Privacy Notice

Who are we?

Wealthcast Ltd is a UK-based personal financial planning application that allows users to build and model their financial picture across income, pensions, assets, liabilities, property, and spending. The platform and services include scenario planning tools that let users test assumptions and project their financial position over time, with results visualised as net worth snapshots. It offers an optional AI-assisted feature called Wealthcast Foresight, which generates narrative summaries and supports chat-based exploration of a user’s plan.

Legal entity name: Wealthcast Ltd
Company registration: Registered in England and Wales
Company number: 17455947
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
ICO registration number: ZC253434
Email address: hello@wealthcast.app

You can contact us at the above address should you have any questions about this Privacy Notice, or if you would like to exercise any of your rights under data protection laws, which we set out below.

What types of information do we collect from you?

We may collect, use, store and transfer different kinds of personal information about you such as:

• Identity, contact and account information: name, internal account identifier, sign-in method, role, and email address.
• Financial and transaction information: financial information you choose to enter into Wealthcast (such as income, pensions, assets, liabilities, property details, spending, future plans, and net worth snapshots), your date of birth and any partner’s date of birth and other household details you enter, scenario and planning data (including saved scenarios, assumptions, preferences, and update cadence choices), and billing information needed to provide paid access (such as Stripe customer and subscription references, billing email, entitlement state, billing period dates, invoice or payment status, and related audit records). We also store the payment and subscription event messages Stripe sends us, including their billing details, to process payments, retry failed updates and reconcile records. If you subscribe in our iOS or Android app, we also store the subscription and entitlement details we receive from the App Store or Google Play through RevenueCat. Wealthcast does not store card numbers.
• Technical and usage information: internet protocol (IP) address, your login data, browser type and version, time zone setting, operating system and platform, device ID and other technology on the devices you use to access our website and information about how you interact with and use our website and services. We also collect Cloudflare Web Analytics Real User Monitoring (RUM) data from website and web-app visits, including page-path and referrer information (without query strings), device, browser, operating system and country dimensions, a random in-memory page-load ID, and navigation, resource, paint and Core Web Vitals performance measurements. Cloudflare RUM does not use cookies or persistent browser storage. We also record operational events linked to your account, such as saving your plan, to run and support the service; these are deleted after 90 days.
• First-party service-analytics information: Wealthcast records one coarse page-view event for each signed-in app page load, accepted only during authenticated same-origin app use. This event is not linked to a user ID, session ID, view ID, event sequence or journey ID. The analytics dimensions are limited to the canonical route, broad device class and storage mode. No granular interaction data is recorded.
• Analytics information: if we make optional Analytics available and you enable it, we collect first-party granular product-usage events for signed-in web-app use, including canonical page views, named control impressions and activations, and onboarding progression. These events use random tab-session, page-view and onboarding-journey identifiers stored in first-party sessionStorage (not cookies) that persist only for the duration of the browser tab session. Raw events are linked to your signed-in account at ingestion; however, reports and exports are aggregate only and do not contain person-level records.
• Marketing and communications information: your preferences in receiving marketing communications from us and your communication preferences.
• Services information: personal information required for us to provide our products and services to you, including: (a) if you enable Wealthcast Foresight, an AI-feature consent record and your most recent Foresight narrative summary and chat threads; (b) if you turn on AI spreadsheet import, derived import telemetry (such as parser route, field counts, and fixed feedback issue categories), an import record linked to your Wealthcast user ID, including the extracted plan fields, a hash of the redacted cells and processing details (kept for up to 7 days), and, where you choose to help improve the feature, a short-lived redacted copy of the spreadsheet cells sent for AI reading (kept for up to 7 days); without AI import, spreadsheet import reads your spreadsheet on your device and sends nothing to us; (c) passkey credential metadata (including credential ID, public key, sign counter, supported transports, authenticator type, nickname, creation time, and last-used time) where you add a passkey; and (d) demo-session data where you use the public demo. Wealthcast does not store your fingerprint, face, PIN, or device unlock secret.
• Feature information: the information described in More about specific features below, including for plan sharing, AI assistant connections, referrals, founder sessions, Foresight records, encrypted cloud backups, bug reports and marketing-campaign attribution.

We also collect, use and share aggregated information such as statistical or demographic data for any purpose. Aggregated information could be derived from your personal information but is not considered personal information in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Technical and Usage Information to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated information with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this privacy notice.

How and why do we use your personal information?

How your information is collected

• When you interact with us: you may share your personal information with us when you provide information using any means on our website, such as when you use our services, create an account or update your profile, or adjust your marketing preferences, or when you engage with us, or when you correspond with us by email, post, telephone or any other means.
• From third parties and authentication providers: we may obtain your personal information from third-party authentication providers where you choose to sign in using Google or Apple. Each provider handles your use of its sign-in service under its own privacy notice. We use that information only to authenticate you, create or update your Wealthcast account, and maintain your session.
• Automated Technologies and Cookies: as you interact with our website, we will automatically collect technical and usage information about your equipment, browsing actions and patterns. We collect this personal information by using cookies and other similar technologies. Please see our full Cookie Notice at https://wealthcast.app/cookies for further details.

How your information is used

Data protection laws require us to have a legal basis for everything that we do with your personal information falling under one of the following categories:

• Performance of a contract with you: Where we need to perform a contract we are about to enter into or have entered into with you.
• Legitimate interests: We may use your personal information where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and/or enable us to give you the best user experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). In particular, we rely on legitimate interests, subject to a documented legitimate interests assessment, for coarse first-party page-view analytics. We also rely on legitimate interests for Cloudflare Real User Monitoring (RUM) aggregate performance statistics; the underlying browser access for this purpose falls within the PECR statistical-purposes exception, and we offer a simple, free Performance analytics opt-out.
• Legal obligation: We may use your personal information where it is necessary for compliance with a legal obligation that we are subject to.
• Consent: We rely on consent only where we have obtained your active agreement to use your personal information for a specified purpose. This includes optional features you switch on, such as Wealthcast Foresight, AI spreadsheet import, the option to share redacted spreadsheet examples to improve AI import, and, if we make it available, optional granular first-party product analytics (which is off by default). You can also opt in to any optional cookies. You can withdraw your consent at any time and doing so does not affect processing carried out before you withdrew it. You can turn Foresight and AI spreadsheet import off at any time in your Profile, under AI features; turning AI import off also stops any further sharing of redacted spreadsheet examples. Where you withdraw consent for granular product analytics, we will stop further granular collection and clear the analytics identifiers and sequence state held in the current browser tab.
• Vital Interests: We may process your personal information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

We use your personal information in a number of different ways and for different reasons – the tables below set out what we do and why:

Identity and contact information

Financial and transaction information

Technical and usage information

Marketing and communications information

Services information

All personal information

In limited circumstances we may process any of the personal information we hold to the extent necessary to defend, establish and exercise legal claims or to comply with legal or regulatory obligations.

Where we need to collect personal information due to a legal or regulatory obligation, or for performance of a contract, and you do not provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our services). We will notify you of this at the time.

Automated decision-making

We do not make decisions that produce legal effects, or similarly significant effects, about you based solely on automated processing. Wealthcast Foresight and other AI-assisted features help you understand your own plan; they are illustrative and do not make decisions for you.

Referral eligibility and abuse checks are automated. They compare the code and its reward policy, account age and setup status, keyed email and IP fingerprints, prior referral history, time-window limits, and campaign or personal-referrer caps. A check can reject or withhold a free month or lifetime Pro reward, but it does not block account creation, paid access, or use of the Free plan. We do not treat this promotional-reward decision as producing a legal or similarly significant effect, including where a fixed campaign limit has been reached. You can still ask us to check whether the information and rules were applied correctly.

How can you manage your marketing preferences?

When you create a Wealthcast account, you will be presented with an unticked checkbox stating “Email me occasional Wealthcast product news and updates.” You may tick this box to opt in to direct marketing communications from us. Where the soft opt-in conditions under applicable law are met (for example, where you have previously purchased or subscribed to our services and we are marketing similar products or services), we may also send you direct marketing on that basis, always with a simple way to opt out.

You can change your marketing preferences at any time in your Profile settings or by contacting us at hello@wealthcast.app.

We do not share your personal information with any third party for their own direct marketing purposes.

Please note that if you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes, for example, updates to our Terms, checking that your contact details are correct.

What about cookies?

For more information about the cookies we use and how to change your cookie preferences, please see our Cookie Notice at https://wealthcast.app/cookies.

Wealthcast operates its own first-party consent banner rather than a third-party consent management platform (CMP). There is no CMP icon on the site. The banner presents three options: Accept all, Reject optional, and Choose settings. Choose settings opens a panel inside the banner, allowing you to make a granular choice about which cookie categories to enable.

You can reopen your consent choices at any time via the “Cookie settings” link on public pages, “Cookie preferences” in Profile (Privacy and cookies) in the signed-in web application, or the cookie link in this Notice.

The settings panel shows Product analytics and Preferences switches. Product analytics does not currently run in the live app, and nothing currently uses the Preferences setting. Marketing cookie controls are not currently offered because Wealthcast does not use marketing cookies at this stage.

Who do we share your personal information with?

We do not sell your personal information. We may share your personal information with third parties only where reasonably necessary to operate Wealthcast. We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

The categories of data recipients we may disclose your personal information to are as follows:

Service providers and processors: We engage third party service providers, from time to time, including:

• IT and website hosting, CRM, fulfilment, communications and analytics service providers;
• Cloudflare, which provides hosting, database and file storage, email sending, network security, and Web Analytics RUM;
• OpenAI, when you explicitly turn on the optional Wealthcast Foresight feature or AI spreadsheet import;
• Cloudflare, which also hosts the optional AI spreadsheet import flow;
• Stripe, when you start or manage a paid subscription (Stripe processes card payments; Wealthcast stores the billing details described above, not card numbers);
• RevenueCat, if you subscribe in our iOS or Android app (RevenueCat processes app store purchase and subscription events linked to your Wealthcast user ID so we can give you Pro access);
• Microsoft, which provides our business email and phone (Microsoft 365) and, for founder sessions, Microsoft Bookings and Teams;
• Microsoft Azure, which stores our encrypted offsite backups;
• professional advisors such as tax or legal advisors (for example, as necessary for the establishment, exercise or defence of legal claims or to protect the rights or safety of the website or us);
• consultants, insurance companies/claim managers and accountants; and
• agents, suppliers or sub-contractors and other associated organisations where they are engaged by us to help deliver a service or product that we have instructed them on.

Independent controllers: Some recipients decide for themselves how they use your information and act as independent controllers, not as our service providers. Each handles your information under its own privacy notice. They are:

• authentication providers (Google and Apple) when you choose one of those sign-in options;
• Apple (App Store) and Google (Google Play), if you subscribe in our iOS or Android app;
• the AI assistant you choose to connect to Wealthcast, which receives the plan information its requests need; and
• Microsoft, for the limited service data it uses for its own business operations when it provides our business email and phone and our founder-session tools.

Relevant parties as part of the provision of the product and/or services: We disclose personal information as part of the fulfilment of our services.

Third parties in case of a legal requirement: We also disclose your personal information if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process (including to law enforcement or competent authorities like the police/tax authorities, such as HMRC in the UK).

Third parties in case of a corporate transaction: In addition, information about our customers and users, including personal information, may be disclosed as part of any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event, including while engaging with our actual or potential investors.

We may provide anonymous information to analytics and search engine providers to help us improve and optimise our services. We will only share this information in a form that does not directly identify you.

What happens if we share your information with organisations outside of the UK?

Whenever we transfer your personal information out of the UK or the EEA to service providers or any other third party, we ensure a similar degree of protection is afforded to it by ensuring that the necessary safeguards are in place, for example:

• We will only transfer your personal information to countries that have been deemed by regulators in the UK or the EU to provide an adequate level of protection for personal information; or
• We may use specific standard contractual terms approved for use in the UK and EU which give the transferred personal information the same protection as it has in the UK and EU.

Some of the providers we use are based outside the UK and EEA, or may process limited data in other countries. In particular, if you turn on Wealthcast Foresight, limited plan data is sent to OpenAI; if you turn on AI spreadsheet import, redacted spreadsheet cells are sent to OpenAI; and if you take out a paid subscription, billing data is processed by Stripe (or, if you subscribe in our iOS or Android app, by RevenueCat), who may process personal information in the United States or other countries. Microsoft, which provides our business email and phone and our founder-session tools, stores our Microsoft 365 email, calendar, meeting and file content in the United Kingdom, but may also process personal information outside the UK or EEA, including in the United States, using the safeguards described under Founder sessions below.

For more information about these safeguards, please contact us at hello@wealthcast.app.

How do we protect your personal information?

We are committed to protecting individuals’ personal information. We put in place appropriate technical and organisational measures to help protect the security of your personal information. However, please note that no system is ever completely secure.

We have put various safeguards in place to guard against unauthorised access and unnecessary retention of personal information in our systems. These include pseudonymisation and encryption, together with access-control and retention policies.

How long do we keep your personal information for?

We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you. In general, we keep your account and plan data for as long as your account is active. If your account is closed or deleted, we remove or redact that data. Deleted data may remain in our encrypted offsite backups until those backups are deleted. Stripe and the app stores may keep their own payment records under their terms. Our Delete your Wealthcast account page explains what is removed.

Some categories have specific retention periods: raw first-party app events (such as feature-usage and navigation events) are deleted after 90 days; however, a per-account first-observed date, first broad device class, and first storage-mode category, which are created only if you enable optional Analytics and never by the basic page-view layer, are retained until the account is deleted so that retention reporting remains accurate after raw events are pruned; AI spreadsheet import records, including short-lived redacted spreadsheet examples shared to improve AI import, are kept for up to 7 days; Foresight review records are kept for 180 days and Foresight replay context for 30 days; if your Pro access ends, Pro-only settings and extras are hidden and kept for 30 days so you can restore them by upgrading, and are then deleted; and limited billing and audit records are kept for as long as needed to meet accounting, tax, and legal obligations (for example, up to six years for certain financial records). Cloudflare, which provides our web analytics, states that it retains unsampled RUM beacon data for 7 days, after which it keeps sampled aggregate data, with Web Analytics history accessible for the previous 6 months.

If you use Wealthcast Foresight or AI spreadsheet import, OpenAI may keep the information we send it for up to 30 days to detect and prevent misuse of its services, unless longer retention is required by law. OpenAI does not use this information to train its models.

Spreadsheet import reads your spreadsheet on your device, and nothing is sent unless you turn on AI import. With AI import on, your browser hides personal details it spots before any cells are sent to Wealthcast, and cells you choose to keep visible are never sent for AI reading. Wealthcast replaces sheet names with neutral labels and removes notes, then sends the redacted cells to OpenAI to read, with OpenAI’s response storage turned off. You can turn AI import off at any time in your Profile, under AI features. Switching AI import off stops spreadsheet cells being sent for AI reading. Spreadsheets you upload are still read on your device. Existing import records are not deleted. Import records are marked with a seven-day expiry. Expired import records are removed by a daily cleanup that runs in limited batches, so a backlog can delay removal.

For further information, please contact us at hello@wealthcast.app.

What are your rights in relation to the personal information we hold?

You have a number of rights under data protection laws in relation to your personal information.

You have the right to:

• Request access to your personal information (commonly known as a “subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal information in certain circumstances. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
• You also have the absolute right to object any time to the processing of your personal information for direct marketing purposes.
• Request the transfer of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information in one of the following scenarios:
  • If you want us to establish the data’s accuracy;
  • Where our use of the data is unlawful but you do not want us to erase it;
  • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

If you wish to exercise any of the rights set out above, please contact us at hello@wealthcast.app or delete your account directly from your Wealthcast profile settings.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Contact us if you have a question or a complaint

You have the right to make a complaint at any time to the relevant data protection regulator. In the UK this is the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach any regulator, so in the first instance please contact us at hello@wealthcast.app.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time and we keep it under regular review. This version was last updated on 2 October 2026.

Children

Wealthcast is intended for adults aged 18 or over. The service is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at hello@wealthcast.app so we can remove it.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

More about specific features

This section gives more detail about particular Wealthcast features. It adds to the sections above and does not replace them.

Google and Apple sign-in data

If you sign in with Google, Wealthcast currently requests the openid, email, and profile scopes. We use that information to authenticate you, create or update your Wealthcast account, maintain your session, and help you sign back in safely.

Wealthcast does not use Google sign-in to read your Gmail, Google Drive, Calendar, Contacts, or any other Google service data beyond the identity information described above.

We do not sell Google user data. We do not use Google user data for advertising. We only use Google user data in ways that are necessary to provide and secure the Wealthcast sign-in experience and the related account.

If you choose Sign in with Apple, we receive a name and an email address. The email address may be an Apple private-relay address if you choose to hide your real email. We use this information only to authenticate you, create or update your Wealthcast account, maintain your session, and help you sign back in safely.

We do not use Sign in with Apple to access any other Apple service data. We do not sell this data, and we do not use it for advertising.

Where your data is stored

Wealthcast runs on Cloudflare. The main database and object-storage buckets used for profile, snapshot, scenario, bug-report, and related media storage are configured with Cloudflare EU jurisdiction settings. This is intended to keep those stored D1 and R2 records in the EU.

Cloudflare may still process requests through its global network, and technical metadata such as logs and analytics can have a different location boundary unless additional Cloudflare data-localisation services are enabled. We do not describe Wealthcast as an EU-only processing service.

Our daily offsite backups are encrypted before they are stored with Microsoft Azure in its West Europe region, in the EU.

Cloudflare’s Data Processing Addendum and subprocessor list apply to the Cloudflare services we use. If we materially change where personal information is stored or which infrastructure providers we rely on, we will update this Privacy Notice.

Plan sharing

You can invite one other person to share your plan. We store the email address you enter and send the invitation to it. The invitation stops working after 72 hours.

If they accept, you both see the same plan data — income, pensions, assets, balances, snapshots, and scenarios — and Wealthcast shows each of you what changed since you last looked. The household owner controls whether the other member can edit the plan or only view it. Each member’s sign-in details, Foresight chats and billing stay their own. Shared plans need cloud storage.

We delete each invitation record, including the email address you entered, 30 days after the invitation is accepted or, if it is not accepted, 30 days after it expires. You can ask us to delete it sooner by contacting us at hello@wealthcast.app.

If a member leaves, they stop seeing the shared plan and it stays with the household. If the household owner deletes their account, the other member keeps the shared plan.

We use this information to provide the shared plan you asked for, as part of our contract with each of you.

AI assistant connections

If you connect an AI assistant to Wealthcast, the assistant can read the parts of your cloud plan and projections that your subscription includes. When the assistant asks Wealthcast for information, we return only the plan, projection, tax, scenario or tracking data needed to answer that request.

If you have the Pro Features and allow it when you connect, the assistant can also draft scenarios, save new scenarios and propose changes to your plan or balances. We store these drafts, saved scenarios and proposals in your account, as we do the ones you create in Wealthcast, and record that they came from an AI assistant connection. A proposed change is applied only if you confirm it in Wealthcast. The assistant cannot move money.

We store the connection record and hashed connection credentials. For each request we record the tool used, a hash of the request, the outcome, how long it took and when it happened. Apart from the drafts, saved scenarios and proposals described above, we do not store the request or the result itself. The rest of your conversation with the assistant is not sent to Wealthcast.

The AI provider receives the results and handles them under your account settings and its own terms, as an independent controller. Disconnecting stops any further requests, but it does not delete results already in a conversation; use your AI provider’s controls for those.

We delete each request record 90 days after the request. If you disconnect, we delete the connection record 90 days later. Deleting your Wealthcast account disconnects every assistant and deletes these records. Drafts, saved scenarios and proposals stay with your plan data and are deleted if you reset your plan data or delete your Wealthcast account. We use this information to provide the connection you asked for, as part of our contract with you.

Wealthcast supplies information about your plan; anything your AI assistant tells you is not from Wealthcast and is not financial advice.

Referrals

If you use an invite or community code, or someone uses your personal code, we keep a referral ledger. It can include the code, whether it was a personal or campaign referral, the campaign reward type and claim limit, linked Wealthcast user IDs, reward and eligibility status, rejection reason, relevant dates, and whether a free month or lifetime Pro reward is pending, active, used, withheld, or revoked. We do not show either person the other person’s identity.

For referral eligibility and abuse prevention, we create separate keyed fingerprints (HMACs) from the new user’s normalised email address and signup IP address. These are pseudonymised personal information, not anonymous information. We do not store the raw signup IP in the referral ledger. If an initial eligibility check cannot finish safely, a retry record temporarily keeps the user ID, referral code, IP fingerprint, attempt count, and retry dates; it does not store an email address or raw IP address.

We use referral information to attribute a code, reserve a place in a limited campaign, check that a new user has completed setup, provide free Pro months or lifetime Pro, enforce campaign and personal-referrer limits and the one-reward-per-normalised-email rule, prevent self-referral and high-volume misuse, keep an audit trail, and send service emails confirming or explaining a reward. These emails administer the reward and do not advertise or promote a subscription.

Performance of a contract: recording, providing, and administering a referral reward under the referral programme terms, including the service emails needed to confirm or explain that reward.

Legitimate interests: preventing duplicate, self, and high-volume claims; protecting a bounded promotional programme from misuse; treating participants consistently; keeping the service and reward ledger reliable; and retaining the minimum evidence needed to enforce one reward per normalised email. We balance these specific interests against your rights, use keyed fingerprints instead of raw IP addresses or a permanent email list, limit access and retention, and do not use referral data for advertising.

The signup IP fingerprint is cleared after seven days. A failed-capture retry remains eligible for no more than seven days and is then removed by bounded scheduled cleanup. If the cleanup queue exceeds its daily capacity, deletion can happen later; an expired record is not retried or used for a reward decision.

Rejected referral rows are deleted after 30 days. Referral data carried by a consumed or expired magic-link token is deleted after 30 days. Plaintext normalised referral email values are scrubbed by scheduled cleanup.

The reward ledger and personal referral code are kept while needed to administer the programme and your account. An accepted place in a fixed-limit lifetime campaign remains counted even if setup is abandoned, the reward is revoked, or the account is deleted, so a place cannot be reused. If you delete your account, direct account links, the personal code, normalised email, IP fingerprint, and unrelated unearned rows are removed. We retain the campaign identity, reward type, minimum claim history, and keyed normalised-email fingerprint as a pseudonymised deletion tombstone where needed to preserve that limit and prevent another new-user reward. The tombstone is kept while the campaign and its lifetime rewards need to be administered, subject to scheduled deletion. It may also remain in our encrypted offsite backups until those backups are deleted.

Your privacy rights, including the right to object to processing based on legitimate interests, apply to referral information. If you believe an automated referral check used incorrect information or applied a rule incorrectly, you can contact us and ask for a human review. These rights concern how we use your personal information and do not change a correctly applied campaign limit or other eligibility rule.

Founder sessions

If you arrange a founder session, Microsoft Bookings collects the details you enter, including your name, email address, chosen time and any notes you add. Wealthcast does not send your plan, balances, storage choice or access token in the booking link. Do not include account balances, documents or other detailed financial information in your booking notes.

The session takes place on Microsoft Teams, which handles the name you join with, audio and video during the call, any meeting chat, and attendance details.

Performance of a contract: checking eligibility for, arranging and delivering the founder session included with Wealthcast Pro.

Microsoft provides Microsoft Bookings and Teams to Wealthcast as our service provider. For the limited service data it uses for its own business operations, Microsoft is an independent controller (see Who do we share your personal information with?).

We keep founder-session booking details, calendar entries, related booking emails and meeting chat in Wealthcast’s Microsoft 365 account for up to 12 months after the session date, and then delete them. You can ask us to delete them sooner. Deleted items may remain in Microsoft’s systems for a short period before they are permanently deleted.

Microsoft stores founder-session booking, calendar and meeting chat details for Wealthcast in the United Kingdom. Microsoft and its subprocessors may access or process them from other countries, including the United States, to provide and support the service. For those transfers, Microsoft uses the European Commission’s Standard Contractual Clauses with the UK International Data Transfer Addendum, and it is also certified to the UK Extension to the EU-U.S. Data Privacy Framework.

Foresight records

If you turn on Wealthcast Foresight, we keep your latest summary and chat threads so you can reopen them. For cloud plans they are stored in Wealthcast’s database; for plans kept only on your device, they stay in your encrypted local data.

For cloud plans, we keep your 25 most recent chat threads and delete older ones automatically. You can delete a chat thread in Foresight at any time. Saved summaries and threads are otherwise kept until you remove your cloud planning data or delete your account, and you can ask us to delete them sooner by contacting us at hello@wealthcast.app.

For cloud plans, Wealthcast also keeps a redacted review record for 180 days to find problems and improve Foresight. It may include questions, answers, tools used, and automatic quality flags.

For some chat answers, Wealthcast also keeps redacted replay context for 30 days so it can reproduce a problem. This may include recent chat context, the plan context used for the answer, selected tools, and tool results.

Direct account and thread identifiers are replaced with coded references in these records, but the records are still personal data.

For this-device-only plans, Wealthcast keeps aggregate counts only for this review, without conversation text or user or thread identifiers.

You can turn Foresight off at any time in your Profile, under AI features.

Turning Foresight off stops new AI requests and stops Wealthcast creating review or replay records. Existing review records remain until their 180-day expiry, and replay context until its 30-day expiry, unless you delete your cloud planning data or account sooner.

These records are covered by the consent you give when you turn Foresight on.

On-device storage and encrypted cloud backups

In encrypted local mode, your saved plan stays encrypted on your device. This does not make optional online features offline: Foresight and AI spreadsheet import send the data needed for your request to Wealthcast, which passes it on to our AI provider, OpenAI. Without AI import, spreadsheet import reads your spreadsheet on your device and sends nothing. The processing and retention for both features are described in this Privacy Notice.

Your on-device plan is encrypted with a data key. Wealthcast keeps that key for your account in encrypted form, so your browser can unlock the plan after you sign in. This is why on-device storage still needs a Wealthcast account.

Encrypted cloud backups are different from Cloud storage. The backup is encrypted in your browser with the password you choose before it reaches Wealthcast. We store the locked backup file and basic metadata only. If you forget the password and no old browser or exported file can still unlock the plan, the encrypted cloud backup cannot be recovered.

When you remove cloud planning data without closing your account — for example, switching to local-only storage or starting over — a short 48-hour safety hold guards against mistaken deletion before the removed data is permanently cleared. An automatic daily sweep removes the held copy once the window passes, and a record with no personal data is kept so the deletion can be accounted for.

Our Cookie Notice explains what Wealthcast keeps in your browser’s storage.

Bug reports

If you report a problem from inside the app, we collect the description you write, the page you were on, your account ID, email address and role, browser, device and display details, the IDs of the plan records open at the time, recent app messages and actions, and a screenshot if you add one. Detected email addresses, money amounts and long numbers, such as account numbers, are removed automatically from the description, page address and recorded messages.

We use bug reports to investigate and fix problems and to tell you when a problem you reported has been fixed. We rely on legitimate interests for this: keeping Wealthcast working properly.

We do not currently delete bug reports after a fixed period; we keep them while we need them to track and fix problems. You can ask us to delete a report by contacting us at hello@wealthcast.app. If you delete your account, we remove your account details, the recorded app messages and actions, and any screenshots from your reports.

Marketing-campaign attribution

If you first sign up after following one of our marketing links, we keep a record of which campaign brought you here: the campaign labels from the link, the page you arrived on, and the date. This is recorded once, when your account is created, and never updated afterwards.

We use it to understand, in aggregate only, which of our marketing campaigns bring people to Wealthcast. We never send this information back to any advertising platform, and we never use it to make decisions about you individually. We rely on legitimate interests for this: measuring in aggregate which marketing campaigns bring people to Wealthcast.

The record of which marketing campaign brought you to Wealthcast is kept for as long as your account exists and is deleted with your account. You can object, and we will delete that record.

Staff support access and terms acceptance records

To answer a support request or investigate a problem, authorised Wealthcast staff can view your account. Access is read-only, time-limited, needs an extra identity check and is logged. We rely on legitimate interests: supporting you and keeping Wealthcast working properly.

When you accept the Terms of Service, we record the time, the version of the Terms of Service that you accepted, the version of this Privacy Notice we showed you, your IP address and details of the browser you used, so we can show what you agreed to and when. We rely on legitimate interests for this: keeping a record of our agreement with you. This record is deleted when your account is deleted.