Privacy Policy

Effective date: October 15, 2026

Net Worth Snapshot ("we", "us", or "our") operates this application to help households track their financial net worth over time. This policy explains what information we collect, how we use it, and your choices.

1. Information we collect

• Email address. We collect your email address when you sign up and use it only to send one-time login codes, notices about your account, and a reminder early each month if last month's balances haven't been entered. That reminder never contains any of your figures, and you can turn it off from the link in it or on the Household page. We do not send marketing email unless you explicitly opt in.
• Passkeys, if you add one. We store the public half of the passkey and the name you give it. The private half never leaves your device, and the public half cannot be used to sign in as you anywhere.
• Financial data you enter. Account names, types, monthly balance amounts, and household membership are stored so we can display your net worth history. We never collect bank credentials, account numbers, or any data directly from financial institutions.
• An OpenAI API key, if your household adds one. The Ask assistant is off until a member of your household saves their own OpenAI API key. We store it encrypted, never display it again beyond its last four characters, and never write it to a log. See section 3.
• Subscription details, if you subscribe. We record that your household has a subscription, when it renews, and the identifiers Paddle uses for your customer and subscription records. We never receive or store your card number. The payment form is provided and displayed by Paddle, and the name, billing address and card details you enter into it go to Paddle, not to us. See section 4.
• Usage information. Standard web server logs (IP address, browser type, pages visited) may be retained for up to 30 days for security and debugging purposes.

2. How we use your information

• To authenticate you via passwordless login codes, or a passkey if you add one.
• To display your household's financial data to you and any household members you invite.
• To keep the service running and troubleshoot issues.

We do not sell your data. We do not share your financial data with third parties, with one exception your household switches on itself: the Ask assistant, described in section 3. If nobody in your household has saved an OpenAI API key, that section does not apply to you and your financial data does not leave our server.

3. The Ask assistant and OpenAI

Ask is an optional feature that answers questions about your finances using a language model operated by OpenAI, a third party. It is off until a member of your household saves an OpenAI API key in household settings. Until then, nothing described in this section happens.

• What we send. When a member of your household asks a question, we send OpenAI a summary of your household's recorded figures, together with that question and the earlier questions and answers in the same conversation. The summary is built from what you entered: your current and historical balances, your accounts and their groupings, year-by-year changes, savings rate and salary figures, goals, the labels on your timeline and planned events, milestones, protection coverage targets, and your budget — each earner's pay and each budget line with its name and notes. Who holds an account is described only as “you”, “another member” or “joint”, and earners only as “Earner 1”, “Earner 2”. You can read the exact text before you ask anything — it is on the Ask screen under “What the assistant can see”.
• What we do not send. We do not send your name, your email address, the names of the other members of your household or of the earners on your budget, your account identifier with us, or any other identifier we hold. We do not send OpenAI's optional end-user identifier, and we send no analytics or telemetry. One thing to be aware of: the summary includes free text you typed yourself — account names, institution names, goal names, event labels, budget line names and notes, notes on an earner's pay — so anything identifying that you put in those fields is included in what we send.
• Web searches. To check facts that change, such as this year's contribution limits or tax brackets, the assistant can search the web while answering. OpenAI runs these searches as part of the same request; we do not send anything to a search engine ourselves. Searches are limited to a fixed list of government and established financial websites, and to a few per question. The assistant writes the search queries itself, with your household's summary in front of it, and is instructed never to put your figures, names, or anything else about you into a query. We cannot prevent that technically, because the search happens inside OpenAI's service before the answer reaches us. What we do is check each answer's searches afterwards, and if one contains a dollar figure or a name that matches your records, we tell you on that answer and record that it happened (but not what the search said) in our server log. Pages an answer drew on are listed beneath it, with links.
• We ask OpenAI not to store answers for retrieval. Every request tells OpenAI not to keep the response for later retrieval through its API. This is separate from the retention for abuse monitoring described in the next point, which is governed by your OpenAI account's settings.
• It goes under your household's own OpenAI account. Requests are made with the API key your household supplies, so they reach OpenAI as that account's activity, and your use of it is governed by OpenAI's own terms and privacy policy in addition to this one. How long OpenAI retains a question and its answer, and whether either is subject to that company's abuse monitoring or human review, is determined by the settings on that OpenAI account. We cannot see, change, or enforce those settings, and we cannot delete anything held under them.
• Saving a key opts in the whole household. This app has no per-member permissions. Once a key is saved, every member of the household can use Ask, every question they ask sends that household's figures to OpenAI, and every question is billed to the OpenAI account the key belongs to — including members who never visited the settings page and never read this section.
• Checking a key. One further request goes to OpenAI at the moment a key is saved, to confirm the key works. It carries the key and none of your financial data.
• Turning it off. Removing the key from household settings stops all of this at once: the Ask screen disappears for everyone in the household and nothing further is sent. It does not remove anything OpenAI already holds under your own account — for that, use the controls on that account.

The conversation is also kept in your browser session so the screen can show it back to you, and is discarded when you clear it, when you sign out, or when the session ends.

4. Data sharing

We do not sell, trade, or rent your personal information to third parties. We may share limited information with service providers (for example, a hosting provider) strictly to operate the service, under confidentiality agreements that prohibit them from using your data for their own purposes.

Paddle handles payments for us, and its role is broader than a service provider's: Paddle is the seller of record for your subscription. It is the merchant you are buying from and whose name appears on your card statement, and it is responsible for the sales tax or VAT on the sale. If you subscribe, Paddle receives your email address and the billing details you type into its payment form, and holds your card details; we receive back only the fact of a subscription and the identifiers that let us look it up. Paddle handles that information as a data controller in its own right, under its own privacy policy, as well as under this one. If you never subscribe, Paddle receives nothing about you.

OpenAI is the exception, and works differently: the relationship there is your household's own rather than ours, under the API key your household supplies, so what is sent and on whose terms it is held are set out separately in section 3.

We may disclose information if required by law or to protect the rights and safety of our users.

5. Data security

Your data is stored in an encrypted database. We use HTTPS for all connections. Passwordless login means there is no password to steal or reuse. While no system is perfectly secure, we take reasonable technical measures to protect your information.

6. Data retention

We retain your account and financial data as long as your account is active. You can delete your account yourself at any time from your household settings — this immediately and permanently removes your account and its financial data, and it cannot be undone. Any residual copies in encrypted backups and server logs are purged within 60 days. This covers the data we hold; anything retained under your household's own OpenAI account (section 3) is outside our reach and has to be removed there.

7. Cookies

We use one functional cookie to remember your preferred color theme. We use session cookies to keep you logged in. We set no tracking or advertising cookies.

The one exception is the payment page. If you choose to subscribe, the page where you enter your card details loads Paddle's payment software, which sets its own cookies and collects its own analytics under Paddle's privacy policy. That happens only on that one page, only if you go there, and never anywhere else in the app. We do not receive that data.

8. Children's privacy

This service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

9. Your rights

You can access, correct, or delete your data at any time by logging in and managing your account, or by contacting us directly. Depending on your location, you may also have rights under applicable privacy laws (e.g., GDPR, CCPA) including the right to data portability and the right to lodge a complaint with a supervisory authority.

10. Changes to this policy

We may update this policy occasionally. When we do, we will update the effective date above. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

Questions? Email us at privacy@networthsnapshot.com.