In short
Worthwise is provided by Summit City Digital Solutions LLC (“we”, “us”). Your financial data stays on your device. The app has no user accounts on our servers, no ads, and no analytics or tracking. The few things that leave your device are listed below, and most of them only happen if you turn them on.
What stays on your device
Everything you enter: accounts, balances and their history, holdings and their entries, goals, income and expenses, your age, tags, notes and settings. It is stored in the app’s private storage on your device, and can be encrypted with the optional vault. We never receive it.
Screenshots and statement PDFs you import to read your holdings are read on your device, by Android’s text recognition (part of Google Play services) or the PDF’s own text. They aren’t uploaded or kept. Google Play services may send Google basic diagnostic information about its text recognition (such as how long it took), never the images or the text in them.
What leaves your device, and when
- Market prices. Only if you choose to fetch market data (in setup, or later in Settings › Market data; if you choose to stay offline, none of this happens): to price your holdings, the app sends ticker symbols (for example “VTI” or “BTC-USD”) straight from your device to the sources it uses. We run no server in between and never see which symbols you ask about. Those sources are Coinbase, Kraken and CoinPaprika (for crypto), gold-api.com (for gold and other metals), Frankfurter (for European Central Bank currency rates), Yahoo Finance (only while the Yahoo backup is on), and any provider you add your own key for in Settings: Finnhub, Tiingo, Alpaca, Massive, Twelve Data, Financial Modeling Prep, Alpha Vantage, EODHD or CoinGecko. Your keys stay on your device and are sent only to the provider they belong to; they’re put only in backups protected by your password (password-protected exports), encrypted. Public figures (inflation, home price indexes, Treasury bill rates, and the closes of the S&P 500, the Dow and the Nasdaq indexes) are read from FRED, the St. Louis Fed’s data service; if a home follows local prices, that asks for its state’s index. When an imported file gives a fund’s CUSIP or ISIN code instead of a ticker, that code goes to OpenFIGI to find the ticker; to name a holding an import adds, its ticker can go to OpenFIGI, or to Finnhub if you added a Finnhub key. Only symbols and codes are sent: never your share counts, balances or anything about you. Each of these services handles requests under its own privacy policy and, like any internet request, can see your device’s IP address.
- Purchases. Buying or restoring Pro goes through Google Play and RevenueCat, which handle the purchase and tell the app whether Pro is unlocked. They receive an anonymous purchase identifier and the purchase details, not your financial data.
- Files you share. Backups, CSV files and PDF reports you export go wherever you choose to send or save them.
What we don’t do
We don’t sell your data, share it with advertisers, build profiles about you, or use analytics, crash reporting or tracking tools.
Notifications and widget
Reminders are scheduled on your device. The home screen widget reads from the app on your device and can be set to hide your balance.
Deleting your data
You can delete everything from Settings › Account › Delete account & data, or by uninstalling the app. Since we don’t hold your data, there is nothing for us to delete on our side.
Children
The app is meant for adults and isn’t directed at children under 13.
Changes
If this policy changes in a meaningful way, the app will show you the new version and ask you to agree before you continue.
Contact
Questions about this document can be sent to summitcitydigitalsolutions@gmail.com.