WealthOn Privacy Policy

Last updated 30 October 2026

The short version

WealthOn has no accounts. Everything you enter stays in a database on your phone. We (the developer) never see it and keep no copy of it. A few optional AI features send a small amount of data, only after you agree, and the app keeps a word-for-word list of every request it sent (Settings → Your data, shown). The only thing our server keeps is a shared list of shop names and their usual category: no names of people, no amounts, nothing that links to you. WealthOn is made by Suriya Kumar, an independent developer, who is responsible for this policy and for how the smart features handle data.

What the app stores on your phone

The money details you type in or import: income, expenses, loans and EMIs, budgets, savings, deposits, investments, goals and insurance policies, plus your settings and the name you give. They are stored only on this device.

Speak to add (voice entry)

When you tap the microphone, your phone’s speech service turns what you say into text. On most Android phones this is Google’s speech service (the same one Google Assistant uses), under Google’s terms; without internet it works on the phone where the phone supports it. WealthOn asks for microphone access the first time, listens only while the mic is on, and never records, keeps or sends any audio. The text is worked out on your phone into an entry, which you check before it is saved. Only if your phone can’t follow a sentence and you agree to ask the AI: the words you said, your currency, today’s date and the names of your categories, goals and loans are sent once (see “Optional AI features”), and every amount it finds is checked against what you said.

Bank statement import

When you import a bank statement (a PDF, Excel or CSV file you choose), the file is read on your phone. Its contents are not uploaded anywhere. If the PDF is locked, its password is only used to open it on your phone and is not saved. You check every entry before anything is saved, and you can remove an import later.

Optional smart features (off until you agree)

• Smart categories. Off until you say yes (with WealthOn Pro, and once on your first import without it). WealthOn asks before sending anything. If you agree, the names of shops and payees WealthOn has not seen before (on the Sort your spends page, with up to three plain words from the bank note that say what it was for, like “Laptop”; never numbers) and your category names are sent to our processing service, which suggests a category for each one. The suggestions are put in place straight away and listed for you to check, change or undo. Payee names that look like a person’s (a transfer to a plain name with no shop word) are kept on your phone and not sent. No amounts, dates, account numbers or full bank lines are sent.

• Shop memory. To answer faster and use less AI, our server remembers common shops: once a shop name (for example “Swiggy” or “DMart”, with its short bank-note words) has been put in the same everyday category twice, that answer is reused for everyone instead of asking the AI again. Each saved row holds only the shop name, a country group (from your currency), the category name and a count. Only everyday category names are kept (such as Groceries or Eating out, never your own category names or “Family & friends”), never names that look like a person, and nothing about you, your phone, amounts or dates, so a row can’t be linked to anyone. Tapping “Ask again” always asks the AI fresh.

• Reading a statement with AI. Only when you tap “Read it with AI” on the import page (for a statement WealthOn can’t read by itself, or to read one again) and agree: the statement’s lines from the first entry onwards (dates, shop names, descriptions and amounts) are sent once to be read. Card numbers, account numbers and IBANs are hidden on your phone before sending, and the lines above the first entry (such as your name and address) are not sent. Every entry is checked against the file on your phone and shown to you before anything is added.

• Coach’s words (WealthOn Pro). This month’s plan and the answers to your questions are worked out on your phone and are never sent. Only if you tap “Coach’s words” and agree: the plan as your phone wrote it (its headline and top three actions, with their amounts, dates and your own category, loan, card or goal names) is sent once to be rewritten in a friendlier voice. No shop or people names, no bank lines and no account numbers are sent, and WealthOn only shows a rewritten line if it uses the plan’s own numbers.

• Voice entry help. Only when your phone can’t follow something you said and you agree: the words you said, your currency, today’s date and your category, goal and loan names are sent once to be read. No audio, balances or other entries are sent.

• Exchange rate. Only if you use a second currency with “Update the rate by itself” on: about once a day, the two currency codes (for example EUR and INR) are sent to get today’s rate. Nothing about you or your money is sent.

This data goes over an encrypted connection (HTTPS) to a processing service we run on Cloudflare Workers. It passes the request to one AI provider to write the answer: Groq first, then a backup (Cloudflare Workers AI, Cerebras, OpenRouter, GitHub Models or NVIDIA) if that one is busy. We only use providers that state they do not train on or keep these requests (on OpenRouter, only ones that do not collect data). It is used only to produce the answer, is not stored by us (apart from the shop memory above), is not linked to you and is not used to train AI models.

See exactly what was sent: Settings → Backup and privacy → Your data, shown lists the last 40 requests WealthOn sent with the exact text of each, and how many have ever left the phone. This list is kept only on your phone, and you can clear it there. You can turn Smart categories on or off at any time in Settings; Coach’s words only runs when you tap it.

How your data is protected

Your entries are kept in WealthOn’s private storage on the phone, which other apps can’t read, and Android encrypts the phone’s storage (all phones launched with Android 10 or later). App lock adds a fingerprint or face check before WealthOn opens. Backups: you can set a backup password in Settings → Backup password. Backup files are then sealed with AES-256 (the key is made from your password with PBKDF2-SHA256) and can’t be opened by anyone without it, including us. The password is kept in Android’s secure storage (Keystore) on this phone and is never sent anywhere. Without a backup password, a backup file is plain text that anyone who has the file can read.

What else leaves your phone

Apart from the optional AI features above, nothing, unless you choose to. When you tap "Back up to Google Drive", "Export CSV" or "Monthly report (PDF)", WealthOn creates a file and opens the Android share sheet. You choose where it goes (for example your own Google Drive). That copy is then governed by the service you picked. If Android's own device backup is turned on for your Google account, Android may include WealthOn's data in that backup, as it does for other apps; you control this in Android settings.

No tracking

No analytics, no advertising and no third-party SDKs that collect data. Rating: after something good (an EMI marked paid, a month plan set, a win shared), at most three times and 60 days apart, WealthOn may ask Google Play to show its rating box. Google Play shows it and handles your rating under Google’s own privacy policy; WealthOn only keeps, on your phone, the dates it asked, and never learns whether or how you rated. You don't need an internet connection to use the app; only the optional smart features use it.

Permissions

Notifications: for the reminders you keep on (the morning “safe to spend today” number, EMIs, bills and credit card bills, a low-balance warning, salary day, premiums, deposit maturities, money lent or borrowed, and backups), worked out and scheduled on your phone. Folder access: only if you turn on automatic backup; WealthOn then writes its backup file only to the folder you choose. Biometrics: only if you turn on App lock; the fingerprint or face check is done by Android and WealthOn never receives it. Vibration: for haptic feedback. Internet: only for the optional smart features.

Deleting your data

Deleted items stay in "Recently deleted" for 30 days, then are removed. Settings → Erase all data removes everything immediately. Uninstalling the app also removes all data from the phone. Data sent to the smart features is not stored, so there is nothing to delete there. The shop memory holds no personal data and nothing that links a shop name to you; write to us if you want a shop name removed from it.

Children

WealthOn is meant for adults managing their own finances and is not directed at children.

Contact

WealthOn is made by Suriya Kumar. Questions about privacy: write to support@forgeapps.in.