Privacy Policy

WDFAM (“We Don’t Fight About Money”) helps you see where your money goes from your card statements and, if you share costs with a partner, split expenses and settle up. That means we handle sensitive financial information, and this policy explains what we collect, why, who can see it, and what you can do about it.

What we collect

• Account details: your name, email address, and a password. We store only a salted hash of your password, never the password itself.
• Statement data: when you upload a PDF statement, we extract its transactions (date, merchant, description, amount, and sometimes a state) and the card’s issuer and last four digits. We never ask for or store full card numbers, and we don’t connect to your bank.
• What you enter: categories, notes, and, if you share a household, splits, questions to your partner, settlement records, and payments you log.
• Security records: sign-in sessions, and a log of account and money-related actions (for example, sign-ins, invites, and finalizing a month) with the IP address and browser that made them.

What we don’t keep

Uploaded PDFs are read and then discarded. We keep the transactions extracted from them, not the files. We don’t use advertising or third-party analytics trackers. Your theme preference is saved in your own browser.

How we use it

Only to run WDFAM: to show your transactions, suggest splits and categories, calculate who owes whom, send the emails the service needs (verification, password resets, invites), and keep accounts secure. We don’t sell your data or use it to advertise to you.

Who can see it

• Your partner, if you invite one: members of your household see your shared transactions, the splits, and the settlement. A charge marked personal stays private to the person it belongs to, unless your partner paid for it.
• Service providers: we host WDFAM on Google Cloud (United States) and send email through Resend. They process data only to provide those services to us.
• Password breach check: when you choose a password, we send the first five characters of its SHA-1 hash to Have I Been Pwned to check it against known breaches. Neither your password nor your email address is sent.
• Local weather: to show the weather on your dashboard, our server sends your IP address to ipwho.is to look up your approximate city, then that city’s coordinates (not your IP address) to Open-Meteo for the forecast. We don’t store your location.
• When the law requires it: we disclose information if we’re legally required to, or to protect people’s safety or the security of the service.

How we protect it

Data is encrypted in transit and at rest. Names, email addresses, household names, card details, and raw transaction descriptions are additionally encrypted at the field level in our database. Sign-in sessions expire, and sign-in and invite attempts are rate-limited. No system is perfectly secure, but we’ll tell you promptly if a breach affects your data.

How long we keep it

We keep your data while you have an account. You can delete statements, transactions, and cards at any time, and they’re removed from the app immediately. Database backups are kept for a limited period for disaster recovery and then expire. If you ask us to close your account, we delete your data, except what we must keep for legal or security reasons.

Your choices and rights

You can see and export your transactions from the app. To get a copy of your data, correct it, or delete your account, email privacy@wedontfightaboutmoney.app. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR. We’ll honor them, and we won’t treat you differently for using them.

Children

WDFAM is not intended for anyone under 18, and we don’t knowingly collect their information.

Changes

If we change this policy in a way that matters, we’ll update the date above and let you know by email or in the app before the change takes effect.

Contact

Questions about privacy: privacy@wedontfightaboutmoney.app.