Privacy policy

The short version

Our calculators run entirely in your browser, nothing you type is ever sent to us. In the app, your bank SMS are read and turned into transactions on your phone, not on our servers. Personal messages and OTPs are dropped straight away and never stored, and your transactions stay on your phone, encrypted. You can use the app without an account. We never sell your data or show ads.

The wellthiq.com website

Every calculator on this website, EMI, SIP, Income Tax, and the rest, runs entirely in your browser. The numbers you enter are never sent to our servers, and you don't need an account or email address to use any of them.

Like most websites, we use Google Analytics to understand which pages are visited and Sentry to catch crashes and errors, both see aggregate usage and technical data (page, browser, error trace), never the figures you type into a calculator.

If you hand us your email address to become a founding member, we store that address and the page you gave it on, and nothing else. We use it to tell you when your score is ready. It is not passed to anyone, it is not linked to any calculator you used, and you can have it removed at any time by emailing us.

With or without an account

You can use the WellthIQ app without an account. If you do, nothing about you reaches our servers apart from anonymous usage analytics (if you leave it on) and crash reports.

If you create an account so your score survives a phone change, our servers store your email address, an optional mobile number, your name, an optional profile picture, and when the account was created and last signed in to. Sign-in uses a one-time code sent to your email. Your SMS and your transactions are never part of your account.

How SMS-based transaction detection works

With your permission, the app reads the SMS already on your phone and new ones as they arrive: at the first sync, when you open the app, every few hours in the background, and when you tap re-sync.

Each message is checked on your phone only, to tell bank, card and UPI alerts apart. OTPs, promotional and personal messages are dropped immediately, never stored and never sent anywhere. From a transaction alert the app takes the amount, merchant, category, date and the last digits of the account, and keeps the alert's text with it so you can check its reading.

You can switch SMS access off in your phone's Settings at any time. The app keeps working with manual entry, and it never asks to become your default SMS app.

What stays on your phone

Your transactions, the alert text they came from, your budgets, plans, insurance cover, risk profile and your answers to setup questions are stored only on your phone. None of it is uploaded.

The app's database is encrypted with a key protected by Android Keystore, and your own answers are encrypted separately.

Product analytics and crash reports

We use Mixpanel to understand how the app is used, which screens people visit and how long a sync takes. Every event passes through an allowlist: SMS text, full account numbers, merchant names, your name, email, phone number, anything you type, and your answers to setup questions are blocked before they leave the app.

What we do receive is deliberately coarse: amount ranges (e.g. "₹1,000 to ₹10,000," never an exact figure), spending category labels, screen and feature usage, and at most the last 4 digits of an account. Events are tied to an internal identifier, not your email or phone. You can turn analytics off at any time in the app's settings.

The app uses Sentry to report crashes, so we can fix what breaks. It receives the error and the device type; screenshots, screen contents, your identity and your IP address are all switched off. Apart from our sign-in server, Mixpanel and Sentry are the only services the app talks to.

What we don't do

• We never sell your data to anyone, for any reason.
• We don't show ads and we don't share your data with advertisers.
• We don't share your financial data with banks, lenders, product companies, or anyone looking to sell you something.
• We never read your notifications. The app has no notification access at all.
• We never ask to become your default SMS app.

Your rights: access, export, and deletion

You can review and edit your transactions and account details in the app at any time. Download my data exports a spreadsheet that you choose where to share.

With an account, Delete account removes your account from our servers and erases the app's data on your phone. Without an account, Delete my data erases everything on your phone. If you would rather we did it, or want a copy of your account data, email us at admin@wellthiq.com. We'll act on deletion requests within a reasonable time and confirm once it's done.

How long we keep data

We keep your account data for as long as your account is active and remove it when you delete your account. Data on your phone stays until you delete it in the app or uninstall the app. Anonymised, aggregate analytics that can no longer be tied to you may be retained for product improvement.

Children's privacy

WellthIQ is not directed at children under 18 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

We'll update this page if how we handle data changes, and update the "last updated" date above. For significant changes, we'll let you know inside the app.

Questions about your data?

Reach out any time, to ask a question, request a copy of your data, or have your account deleted. Emailadmin@wellthiq.com.