Privacy policy

Last updated 19 October 2026

Wilson Finance, LLC (“we”) operates Wilson Finance, a personal financial planning app for the web, with an iPhone app coming soon. This policy explains what we collect, why, and what we do not do. It is written to be read rather than to be defensible.

The short version

• We never ask for your bank credentials and have no connection to your bank or any data aggregator. You type your figures in.
• We do not sell or share your financial data with anyone, for any purpose, including advertising. There is no advertising in Wilson Finance.
• Cancelling does not lock you out of your own data. It stops new changes being saved; everything you already entered stays readable and exportable.
• You can delete your account and everything in it yourself, from Account → Delete account in the app, or by emailing support@wilsonfinance.app.

What we collect

Your account

An email address and a password, so you can sign in on more than one device. The password is stored only as a salted hash by our authentication provider; we never see it and cannot recover it.

If you choose Sign in with Apple or Sign in with Google instead, we receive your name and email address from that provider (with Apple you can choose to hide your real address), and no password is created. We never receive your Apple or Google password or anything else in those accounts.

Your name, which is only ever shown to you inside the app, and, if you choose to give it, your date of birth. The date of birth is optional and has one use: keeping your current age up to date in the retirement projection. You can change or remove either in Account at any time.

The figures you enter

Income, spending, account balances, debts, assets, liabilities and the assumptions behind your projections, and, if you log them in Budget › Actual, what each spending line came to in a month. This is the content of the product. We store it so it is there when you come back, and so the same plan appears on your phone and in your browser.

These are numbers you typed, not transactions we fetched. We do not know where you bank, what you bought, or who you paid.

Holdings you import

If you use Retirement › Holdings, you choose a positions file exported from your broker. The file is read on your device; the file itself is never uploaded or kept. What is saved is, for each position: its symbol and description as the file gives them, the asset class, the quantity, the market value and the cost basis, plus the account name you give the file and when you imported it. Anything else in the file, such as account numbers, is discarded. Nothing connects to your broker, and removing a file removes its positions.

Subscription status

Whether your subscription is active, which platform it was bought on, and when the current period ends. Payment itself is handled entirely by Apple or by Stripe — we never see or store your card details.

Technical logs

Our hosting providers keep short-lived operational logs (IP address, timestamp, which endpoint was called) as any web service does, for security and debugging. These are not used to build a profile of you and are not combined with your financial data.

What we do not collect

• Bank logins, account numbers, or transaction history.
• Card numbers.
• Social Security numbers or government identifiers.
• Location.
• Contacts, photos, or anything else on your device outside the app.
• Advertising identifiers. There are no third-party trackers or ad SDKs in the app.

How it is protected

• Encrypted in transit (TLS) and at rest.
• Row-level security in the database. Every row is tagged with the account that owns it and Postgres refuses to return anyone else’s — enforced by the database itself, not by application code that has to be written correctly every time.
• On iPhone, once the app launches, your sign-in token is kept in the iOS Keychain rather than in ordinary app storage.
• Automatic daily backups, retained by our database provider.

No system is perfectly secure, and we do not claim otherwise. What we can say is that the amount of damage available to an attacker is bounded by the fact that we hold no credentials to anything of yours.

Who else is involved

We use a small number of service providers to run the product. They process data on our instructions and may not use it for their own purposes:

• Supabase — database, authentication and backups. Holds your account and the figures you enter.
• Cloudflare — hosting for this website and the web app.
• Resend — delivers account email (confirming your address, password resets). Receives your email address and the message.
• Apple and Google — only if you sign in with them, under their own privacy terms.
• Stripe — payment processing on the web. Stripe receives your payment details directly; we receive only whether the subscription is active.
• Apple — payment processing and distribution on iPhone once the app launches, under Apple’s own privacy terms.
• RevenueCat — reconciles subscription status across the two payment rails.

We will not sell your data, and we will not transfer it to anyone else except where a company acquires this business as a whole — in which case this policy travels with it and you will be told before anything changes.

Where it is stored

On servers in the United States. If you use Wilson Finance from outside the US, your data is processed there.

How long we keep it

For as long as your account exists. Delete your account and we delete the plans, snapshots and settings that belong to it. Backups roll off on our provider’s schedule, within 30 days. We may keep a minimal record of the transaction (not its contents) where tax law requires it.

Your choices

• See it. Everything we hold about you is visible in the app, because it is what you typed.
• Correct it. Edit it in the app.
• Take it with you. Ask us and we will send you your data as a file.
• Delete it. Email support@wilsonfinance.app and we will delete your account and its contents.

If you are in California, the EU or the UK you have further rights under the CCPA, GDPR or UK GDPR — including access, correction, deletion, and objection. We honour the same requests for everyone, wherever you are, because writing two policies would only mean treating some customers worse.

We do not sell or share personal information as those terms are defined by the CCPA.

Children

Wilson Finance is not intended for anyone under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

Changes

If this policy changes in a way that affects you, we will say so in the app and by email before it takes effect. The date at the top always reflects the most recent substantive change.

Contact

Wilson Finance, LLC, Oklahoma, United States. Questions, requests, or complaints: support@wilsonfinance.app.