WorthBook

WorthBook App

Privacy Policy

This Privacy Policy applies to the WorthBook mobile app on iOS and Android. WorthBook is local-first: your financial records stay on your device. It is written to meet Google Play’s User Data policy transparency requirements.

Effective date: July 18, 2026 · Last updated: July 18, 2026

1. Overview

WorthBook is a personal finance mobile app. Accounts, balances, transactions, budgets, goals, bills, loans, investments, and related records you enter are stored locally on your device.

The app does not connect to your bank, does not sell your financial data, does not show ads based on your money data, and does not track you across other apps for advertising. WorthBook’s only external network connection is to update reference exchange rates for Pro currencies. Your accounts, balances, and transactions are not sent for that purpose.

This Privacy Policy covers the WorthBook app available on the Apple App Store and Google Play, including disclosures required under Google Play’s User Data policy. It does not cover third-party websites, app stores, or platform services that have their own policies.

2. Who We Are

This Privacy Policy applies to the WorthBook mobile app. WorthBook is operated by the WorthBook team (the developer named in the Google Play and Apple App Store listings).

Privacy point of contact for inquiries and requests: louisesalas08@gmail.com.

3. Personal & Sensitive User Data

Under Google Play’s User Data policy, financial and payment information, authentication information, camera access, and similar categories are treated as personal and sensitive user data. WorthBook may access or store such data only as described below, and only for app functionality you reasonably expect.

  • Financial records you enter. Account names, balances, transactions, budgets, goals, bills, loans, investments, notes, and attachments you add. These stay on your device and are never publicly disclosed by WorthBook.
  • Camera / photos (optional). Used only if you choose receipt scan or attachment features; images you save remain on your device unless you choose to share them yourself (for example, in a support email).
  • Authentication for App Lock (optional). Face ID, fingerprint, or passcode unlock is handled by your device operating system. WorthBook does not access, store, or transmit biometric templates.
  • Purchase / entitlement data. Store purchase verification needed to unlock and restore Pro Lifetime. Payment card details are handled by Apple or Google, not by WorthBook.
  • Support communications. Email address and message content you send to support, plus any device details you choose to include.

We limit access, collection, use, and sharing of personal and sensitive user data to purposes reasonably expected for WorthBook’s personal finance features. We do not use this data for advertising.

4. Data Stored On Your Device

When you use the WorthBook app, information you enter or generate typically remains on your device, including:

  • Account names, balances, and institution labels you choose
  • Transactions, categories, notes, and attachments you add
  • Budgets, goals, bills, loans, investments, and schedules
  • App preferences such as themes, currency settings, and layout choices

We do not operate a WorthBook cloud account that stores your financial ledger for sync across devices. WorthBook does not create a sign-in account with a password for core local-first features. If you uninstall the app, local data may be removed. Export or back up anything you want to keep before deleting WorthBook.

5. Data We May Collect Or Receive

The app is designed so your financial ledger stays on device. Depending on how you use WorthBook, we or our service providers may receive limited information that is not your ledger:

  • Support communications. If you email support from or about the app, we receive your email address, message content, and any device details you share (such as model, OS version, app version, or screenshots).
  • Purchase entitlement signals. When you buy Pro Lifetime, Apple or Google may provide purchase verification information needed to unlock and restore entitlements. We do not receive your full payment card details.
  • Technical diagnostics (if enabled). Crash or diagnostic reports may include device type, OS version, app version, and general error information. These reports are not intended to include your account balances or transaction history. You can control diagnostic sharing in your device settings where available.
  • Reference exchange rates (Pro). To refresh currency conversion rates, the app may request updated reference rates from an external service over a secure connection. Those requests do not include your financial ledger.

WorthBook does not require you to create a WorthBook account with a password to use the core local-first features of the app.

6. Device Permissions & Consent

Where Android or iOS provides a runtime permission, WorthBook requests that permission before accessing the gated data or capability. Permissions are requested only for features you choose to use:

  • Photos / camera. To scan or attach receipts you choose to save locally
  • Notifications. To remind you about bills or other schedules you set (if you enable them)
  • Biometric authentication. To unlock the app with Face ID or fingerprint if you enable App Lock. Biometric data is processed by your device operating system and is never accessed, stored, or transmitted by WorthBook

You can deny or revoke permissions in your device settings. Denying a permission may limit related features without removing your other local financial records.

If a feature would access personal or sensitive data in a way users might not reasonably expect, WorthBook will provide an in-app disclosure describing the data and purpose, and will obtain clear affirmative consent before access begins, consistent with Google Play’s prominent disclosure and consent requirements. Declining or navigating away from a consent prompt is not treated as consent.

7. How We Use Information

We use the limited information described above to:

  • Provide, maintain, and improve the WorthBook app and its personal finance features
  • Respond to support requests and diagnose app issues
  • Verify Pro purchases and restore entitlements
  • Refresh Pro reference exchange rates (rate data only)
  • Comply with legal obligations when required

We do not use your on-device financial records for advertising, resale, profiling for ads, or cross-app tracking. Use of personal and sensitive user data is limited to policy-compliant purposes reasonably expected for WorthBook’s functionality.

8. Sharing & No Sale

We do not sell personal and sensitive user data. Under Google Play’s definition, “sale” means exchanging or transferring personal and sensitive user data to a third party for monetary consideration. WorthBook does not sell your financial ledger or other personal data.

We do not share your financial ledger with advertisers. We never publicly disclose financial or payment information you enter in WorthBook.

Limited information may be handled by:

  • App stores. Apple App Store and Google Play process payments and purchase verification under their own terms and privacy policies.
  • Platform services. Operating system features you use, including on-device AI for Smart Entry on supported devices, are governed by the platform provider’s policies.
  • Exchange rate provider. A third-party service may supply reference exchange rates used for Pro currency conversions. Only rate data is requested — not your accounts or transactions.
  • Support tools. Email or similar tools used to receive and respond to support messages.
  • Legal requirements. If required by law, regulation, legal process, or to protect rights, safety, and security; or as part of a merger or acquisition with legally adequate notice where required.

User-initiated sharing (for example, you email a screenshot or export to yourself) is not a sale by WorthBook.

For app privacy choices and requests, see User Privacy Choices.

9. Third-Party Code & Services

If WorthBook includes third-party code (for example, platform SDKs, billing libraries, or an exchange-rate client), we remain responsible for ensuring that those integrations and their handling of user data from WorthBook comply with Google Play Developer Program policies, including User Data requirements.

We do not authorize third-party SDKs in WorthBook to sell personal and sensitive user data from the app. Third-party AI or platform features used for on-device Smart Entry remain subject to the platform provider’s policies; WorthBook designs Smart Entry so processing occurs on device where supported.

10. Smart Entry & On-Device Features

On supported devices, Smart Entry uses on-device AI to let you describe a transaction or bill in natural language. Processing is designed to occur on device. You review drafts before saving; nothing posts without your confirmation.

Receipt scanning and related Pro tools help you capture information you choose to save locally. Availability depends on device capabilities and OS version.

11. In-App Purchases

Pro Lifetime is a one-time in-app purchase handled by Apple or Google. Payment details are collected and processed by the applicable store. WorthBook uses purchase verification to unlock features and to restore purchases when you reinstall or switch devices on the same store account.

12. Secure Data Handling

We handle personal and sensitive user data with appropriate security measures for a local-first app:

  • On-device storage. Your financial ledger is stored locally on your device under your control.
  • Secure transmission. When WorthBook makes network requests (for example, Pro reference exchange rates or purchase verification through the store), data in transit is protected using modern cryptography such as HTTPS/TLS.
  • App Lock. You can require Face ID, fingerprint, or a passcode before opening WorthBook. Authentication happens through the operating system; biometric data never leaves your device.
  • No public exposure. WorthBook does not publish or publicly disclose your financial records or government identification numbers.

Local device security also depends on your device passcode, OS updates, and backups. No method of storage is completely secure.

13. Retention & Deletion

On-device financial data remains under your control until you delete it in the app or uninstall WorthBook. Uninstalling removes local app data from that device (export or back up first if you need a copy).

No WorthBook cloud account. Because WorthBook does not offer in-app account creation for a cloud ledger, Google Play’s account-deletion web-resource requirement for apps that create accounts does not apply to a WorthBook sign-in account. You delete local data in the app or by uninstalling. For any personal data we hold outside the local ledger (such as support emails), email louisesalas08@gmail.com with the subject “Data Deletion Request.” We will delete associated records we control, except where we must retain limited information for legitimate reasons such as security, fraud prevention, legal compliance, or to honor a purchase entitlement—in which case we will disclose that retention as applicable.

Support emails are retained as long as needed to resolve your request and for reasonable business records. Purchase verification records may be retained as needed to honor entitlements.

See User Privacy Choices for how to submit deletion and other privacy requests.

14. Device Identifiers

WorthBook does not collect persistent device identifiers such as IMEI, IMSI, or SIM serial number, and does not link such identifiers to personal and sensitive user data or to resettable advertising identifiers.

WorthBook is not an ad-supported app. We do not use the Android Advertising ID or App Set ID for ads personalization or ads measurement. If platform diagnostics or store billing APIs use resettable identifiers under the operating system or store provider’s control, those practices are governed by Apple’s or Google’s policies, not by WorthBook advertising.

15. Google Play Data Safety

For the Android app on Google Play, we complete and maintain the Play Console Data safety section so it accurately describes collection, use, and sharing of user data (including by any third-party code in the app). That label is intended to be consistent with this Privacy Policy. If our practices change, we update both this policy and the Data safety section.

This Privacy Policy is available at a public, non-geofenced URL (this page) and is intended for linking from the Play Console privacy policy field and from within the WorthBook app.

16. Children

WorthBook is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children through the app. If you believe a child has provided us information, contact us and we will take appropriate steps. WorthBook is not designed as a Families-policy child-directed app.

17. Your Choices & Rights

Because most financial records stay on your device, you can edit or delete them in the app, manage permissions in device settings, enable or disable App Lock, or uninstall WorthBook.

Depending on where you live, you may also have rights to access, correct, delete, or learn about personal data we hold outside the local ledger (for example, support emails). Email louisesalas08@gmail.com with enough detail for us to verify and respond.

See User Privacy Choices for how to control app data and submit requests.

18. Changes

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the updated policy at this URL. Continued use of the WorthBook app after changes become effective constitutes acceptance of the updated policy where permitted by law.