1. Who we are
The service is operated by {{COMPANY_LEGAL_NAME}}, {{ADDRESS}}. We decide how your personal data is used (we are the "controller").
For any privacy question or request, email {{CONTACT_EMAIL}} or open a ticket from Support inside the app.
For the lawyer: Confirm the legal entity and whether a data protection officer must be appointed or a licence obtained under Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations.
2. What we collect
You type in almost everything Wealth OS stores. We never connect to your bank, and we never ask for bank login details or card numbers.
Account
Your email address and password (passwords are handled by our authentication provider, Supabase Auth, which stores them hashed: we never see them in plain text), your base currency, your plan (Free or Pro) and when you signed up.
Gear and other assets
For each asset: name, category, estimated value and currency, status (for example idle or rented out), location, notes and your plan for earning from it.
Money accounts
The name, type (bank, cash, gold, investment or debt), balance and currency you enter for each account. These are numbers you type, not a link to the account.
Work and skills (human capital)
Monthly salary, expected freelance income, monthly expenses, hours worked per week and skills. If you upload a CV, we store the file itself (inside our database, up to 5 MB) and the text extracted from it.
Health profile (optional)
Only if you use Health Capital: weight, height, activity level, a fitness goal, free-text dietary notes, and the 7-day plan the AI writes for you. Please don't put medical conditions in the notes field; the feature doesn't need them.
Your contacts (people in your network)
For each contact you add: name, field of work, location, your notes about them, and any contact details you enter (email, phone, WhatsApp, LinkedIn, website). This is information about other people; only add what you are allowed to share.
AI results and usage
The recommendations, reading lists, weekly audits and health plans the AI produces for you, and whether you applied or dismissed them. For each AI request we also log the feature, an estimate of the tokens used and the time, to enforce monthly limits. We don't keep a copy of your AI prompts.
Talking to the AI CFO
When you type, or use the microphone button, your message is sent to our server and to Google Gemini (see section 4) to produce the answer, and the AI may add or update assets, accounts, contacts or skills that you mention. We don't store the conversation itself.
Voice input uses your browser's built-in speech recognition. Wealth OS never records or uploads audio: only the resulting text reaches us. Some browsers (for example Chrome) send the audio to their own speech service to turn it into text, under the browser maker's privacy terms. Replies are read aloud by your device.
Payments
Which plan you bought, the payment status, the amount, the Paymob transaction reference and when your paid period ends. Card or wallet details are entered on Paymob's payment page; we never receive them.
Emails and support
Your email preferences and email language, a log of which emails we sent, and your support tickets with every message in them (including replies you send by email).
Technical data
Our hosting providers see your IP address and basic request details (address, time, response code) when you use the site, as any website does. Our server logs record the request path, status and duration; we don't store IP addresses in our database.
3. Why we use it, and on what basis
We use your data only to run Wealth OS for you:
- To provide the service you signed up for: storing your data, calculating net worth and runway, and generating the AI suggestions you ask for (performance of our contract with you).
- To send the emails you have switched on (weekly summary, AI recommendations, reminders). You can switch each one off at any time (consent / your settings).
- To process health information only because you chose to enter it and asked for a plan (your explicit consent, which you can withdraw).
- To take payments, keep billing records and meet accounting and tax rules (contract and legal obligation).
- To keep the service secure and fair: rate limits, usage limits and preventing abuse (our legitimate interest).
For the lawyer: Confirm the legal bases and consent requirements under Egypt's Law No. 151 of 2020 (especially for health data, which is sensitive data under that law) and, for any users in the EU/UK, GDPR articles 6 and 9. Decide whether a separate, explicit consent step is needed before the health profile is saved.
4. How the AI uses your data (Google Gemini)
Wealth OS's AI features run on Google's Gemini API. Data is sent to Google only when you use an AI feature (or, on Pro, for the weekly automatic audit). What is sent depends on the feature:
- Recommendations and the weekly Pro audit: your assets (name, category, value, location, notes, plan), account names, types and balances, your salary, income, expenses, hours and skills, and your contacts' names, fields of work, locations and your notes about them. Contacts' emails and phone numbers are not sent. Your CV is not sent.
- AI CFO (chat and voice): your message, plus up to 20 assets, 20 accounts and 20 contacts (without their contact details) and your salary, income, expenses, hours and skills. Your CV is not sent.
- Growth Hub: your skills, weekly hours, whether you have a CV (yes/no only) and up to 40 assets (name, category, status, value).
- CV reading and CV review: the CV file or text you upload and, for a review, the role you are aiming for.
- Skill roadmap: your skills and monthly salary.
- Importing assets from a file: the file you upload.
- Health plan: weight, height, activity level, goal and dietary notes.
Is my data used to train Google's AI?
Google's Gemini API terms (last modified April 28, 2026, ai.google.dev/gemini-api/terms) say that on Paid Services Google does not use prompts or responses to improve its products, and logs them for a limited period only to detect abuse. On unpaid (free-tier) usage, Google may use them to improve its products and human reviewers may read them. {{GEMINI_PAID_TIER}}
AI output can be wrong. See the Terms of Service for how to use it.
Exporting your data to other AI tools (“My AI profile”)
My AI profile lets you create a file from your own data (gear, skills and hours, a money snapshot and, only if you turn it on, your contacts' names, fields and your notes about them) to paste into or upload to AI tools such as ChatGPT, Claude, Gemini or Copilot. Wealth OS sends nothing to those tools: the file is created in your account and you choose to copy or download it.
The file never includes emails, phone numbers, payment details or internal ids, and amounts are rounded unless you turn rounding off. Once you share the file with another AI tool, that company handles it under its own terms and privacy policy, and we can't delete it there.
We record only that you generated a profile (the date and time, in your AI usage log), not what was in it.
Connected AI tools (the Wealth OS connector)
On the Pro plan you can connect an AI tool, such as Claude or ChatGPT, to your account. You choose to connect it on a Wealth OS page that names the tool and where its access goes, and you sign in with your Wealth OS account. The tool can then read, but not change, your gear, money summary and runway, skills and hours, and saved AI recommendations, whenever you ask it something that needs them. It never receives your password, your contacts' emails or phone numbers, payment details or support tickets.
What the AI tool reads is processed by its company (for example Anthropic or OpenAI) under its own terms and privacy policy, not ours, and we can't delete it there.
To keep the connection working, we store an encrypted sign-in for the connector and the connection's details (which tool, when it was connected). Tokens are stored only in hashed or encrypted form. We log each request the tool makes (which tool and request, when, and whether it worked), never the data returned, and show you the last use in Settings → Connected AI tools.
Disconnect a tool there at any time: its access stops immediately. Connections also stop when you delete your account, and unused ones expire after 30 days.
For the lawyer: Confirm the API key is on Google's Paid Services (billing enabled) before publishing; if it is not, this section must say the opposite. Google's terms also allow data to be processed in any country where Google has facilities.
5. Who else receives your data
We don't sell your data and we don't use advertising or analytics trackers. These providers process data for us so the service can work:
| Provider | What for | Data it receives | Where |
|---|---|---|---|
| Supabase | Database and sign-in | Everything you store in Wealth OS, and your email and password hash | {{DATABASE_HOSTING}} |
| Google (Gemini API) | AI features | The data listed in section 4, only when an AI feature runs | Google data centers worldwide |
| Paymob | Payments | Your email, the amount, the plan and an order reference that includes your user ID. You enter card or wallet details on Paymob's page. | Egypt |
| Resend | Sending email | Your email address and the email content (for example your weekly summary with net worth and runway, or a support reply) | United States |
| Cloudflare | Runs our API, rate limiting, receiving support emails | Your requests to the API, your IP address, and support emails you send us | Cloudflare data centers worldwide |
| {{WEB_HOSTING}} | Hosts the website | Your IP address and the pages you request | {{WEB_HOSTING}} |
For the lawyer: Check that each provider's data processing terms are accepted (Supabase, Google, Paymob, Resend, Cloudflare, the web host) and that they cover cross-border transfer under Law No. 151 of 2020.
7. How long we keep it
We keep your data while your account is open.
When you delete your account (Settings → Delete account), your login and everything linked to it (profile, assets, accounts, CV, health profile, contacts, AI results, email log, support tickets and payment records in our database) are deleted from the live database straight away. This cannot be undone.
Copies can remain for a limited time in database backups and in our providers' logs: up to {{RETENTION_DAYS}} days. Paymob keeps its own record of your payments as required by law. Messages a member of our support team wrote stay in our records without being linked to you.
For the lawyer: Confirm how long payment and invoice records must be kept under Egyptian tax and accounting law, and whether we must keep our own copy after an account is deleted (today the app deletes them).
8. How we protect it
Measures that are in place today:
- The site is served over HTTPS.
- Database row-level security: every query is limited to your own rows, and the API checks your session on every request.
- Passwords are handled and hashed by Supabase Auth. Deleting your account requires your password.
- Card and wallet details are entered on Paymob's page, never on ours. Payment notifications from Paymob are checked with a cryptographic signature.
- Unsubscribe links in emails are signed so they can't be forged.
- Rate limits on AI features, AI profile exports and account deletion, and monthly AI usage limits.
What we don't offer yet
Two-factor sign-in is not available yet, and your CV and other records are not encrypted separately inside the database. No system is completely secure; if a breach affects your data we will tell you as the law requires.
For the lawyer: Confirm breach-notification duties and timelines under Law No. 151 of 2020. Confirm whether {{DATABASE_HOSTING}} encrypts stored data, before adding any "encrypted at rest" statement.
9. Your rights and how to use them
You can do most of this yourself in the app:
- See and download your data: Settings → Your data lets you download it as JSON or as CSV files. The download covers your profile, assets, accounts, work and skills (including your CV), health profile and health plan, contacts, AI recommendations and weekly audits, Growth Hub results, AI usage log, the log of requests from connected AI tools, email settings and email log, plan, and support tickets with their messages. Our staff's internal notes on tickets are not included.
- Correct it: edit or delete any asset, account, contact or skill directly, edit your health profile in Health Capital, and change your email, password and base currency in Settings.
- Delete it: Settings → Delete account deletes everything (see section 7). To delete only your health profile and health plan, use Delete health profile in Health Capital.
- Stop emails: switch each email type off in Settings → Notifications, or use the unsubscribe link in any email.
- Withdraw consent: stop using a feature and delete the data it used. For health data, Delete health profile in Health Capital withdraws your consent and deletes it straight away.
- Ask a question or complain: email {{CONTACT_EMAIL}}. You may also complain to the data protection authority where you live (in Egypt, the Personal Data Protection Center).
For the lawyer: Confirm the deadline for answering requests and which rights apply under Law No. 151 of 2020 (and GDPR for any EU/UK users).
10. Children
Wealth OS is not meant for anyone under {{MIN_AGE}}. We don't knowingly hold their data; if you believe a child has an account, tell us and we will delete it.
11. Data stored outside your country
Our providers store and process data in several countries: the database at {{DATABASE_HOSTING}}, the website at {{WEB_HOSTING}}, Google and Cloudflare in data centers worldwide, Resend in the United States and Paymob in Egypt. Using Wealth OS means your data may be processed outside your country.
For the lawyer: Law No. 151 of 2020 restricts transfers of personal data outside Egypt. Confirm what licence or safeguards are needed for each provider.
12. Changes to this policy
When we change this policy we update the date at the top. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect.
13. Contact
{{COMPANY_LEGAL_NAME}}, {{ADDRESS}}. Email: {{CONTACT_EMAIL}}.