Privacy Policy

The short version

Worth stores your financial data in an encrypted cloud database — encrypted at rest and in transit. We never see your bank login credentials (Plaid handles those directly with your bank), and we never sell, share, or advertise against your data. Your subscription is our only business model.

What we store

The following is stored in your encrypted Worth account, accessible only to you and the members of your household:

• Bank account balances, transactions, and categories
• Budget configurations and spending history
• Goals, debt paydown plans, and progress
• Crypto holdings, wallet addresses, and exchange API keys (encrypted at rest)
• Credit scores, equity grants, and manual asset valuations
• Transaction categorization rules
• Your password (stored as a bcrypt hash)

Third-party services

Plaid: Worth uses Plaid to connect your bank accounts. Plaid handles the connection directly with your bank using 256-bit encryption. Worth receives account balances and transaction data from Plaid but never sees or stores your bank login credentials. Plaid's privacy policy applies to data they process.

CoinGecko: Worth fetches cryptocurrency prices from CoinGecko's public API. No personal data is sent — only ticker symbols.

Anthropic (AI Assistant): When you use the AI Assistant, aggregated financial summaries (not raw transactions or merchant names) are sent to Anthropic's API to generate responses. Anthropic's data retention policies apply.

What we collect

We collect your email address for authentication and billing, and your financial data is stored in an encrypted database we manage on your behalf. Sensitive credentials such as bank API tokens are encrypted at rest. We do not sell, share, or analyze your financial data for any purpose other than providing the service.

Data deletion

Email support@theworthapp.com and we will delete your account and all associated data within 30 days.

Contact

Questions about this policy? Email support@theworthapp.com.