Privacy Policy
Who we are
Prudence Wallet is developed by Opeyemi Ayoola. If you have questions about this policy or your data, contact yemcels@gmail.com.
Information we collect
Account information. When you create an account, we collect your email address and a securely hashed version of your password. We never store your password in plain text.
Financial information. To power the app's core feature — tracking and categorizing your spending — we collect:
- Transactions and account details you connect through Plaid, when you link a bank account.
- Transactions and balance information you connect through PayPal.
- Transactions you enter manually.
- The rank you or the app's coaching feature assigns to each transaction (e.g. Essential, Necessary, Wasteful), and any rules the coaching feature learns from your answers.
PayPal connection details. If you connect PayPal, you provide your own PayPal API credentials (a Client ID and Secret, not your PayPal password). We store them so the connection can stay active; the Secret is encrypted before it is stored.
Notification details. If you turn on notifications, your browser or device gives us a push address and encryption keys for that device. We store these, along with which notification types you've chosen, to send you nudges, reminders and weekly summaries.
Security records. To protect accounts, we record security events such as sign-ins, failed sign-in attempts, sign-ups, removed connections and account deletions, with the time, the email address involved and the IP address the request came from. These records are kept for 90 days and then deleted automatically, including after an account is deleted, so that misuse can be investigated.
Preferences. Your chosen home currency and other in-app settings.
We do not collect your government ID, precise location, contacts, or device advertising identifiers, and the app does not run any third-party analytics or advertising SDKs.
How we use your information
- To authenticate you and keep your account secure.
- To display your transactions, categorize your spending, and power the coaching and savings-projection features.
- To keep your linked accounts (Plaid, PayPal) in sync.
- To protect accounts from misuse, for example by temporarily blocking sign-in after repeated failed attempts.
- If you turn them on, to send you notifications about your spending (nudges, an evening reminder and a weekly summary). You can turn each type off, or all of them, at any time.
We do not sell your personal information, and we do not share it with advertisers.
Third-party services
When you link an account, your information also passes through that provider under their own privacy policy:
- Plaid Inc. — used to securely connect bank accounts. See Plaid's privacy policy.
- PayPal — used to connect your PayPal wallet. See PayPal's privacy policy.
We only receive the transaction and account data these providers share with us on your behalf; we never receive your bank login credentials or your PayPal password.
We also use these services to run the app:
- AI service provider — powers the coaching feature. When the app asks you about a purchase, the transaction's details (such as merchant, amount and category) and your replies are sent to a third-party AI provider, which processes them on our behalf to suggest a rank. It may not use your data for any other purpose.
- Push notification services — notifications are delivered through your browser or device maker's push service (for example Google, Apple, Microsoft or Mozilla). Their content is encrypted so that only your device can read it.
- Email delivery provider — sends operational and security alerts to the app's administrator. These alerts can include a partly masked email address and IP address involved in a security event (for example, repeated failed sign-ins); the full details stay in our own database.
- Security monitoring service — our own monitoring system, hosted on Cloudflare, receives a copy of security events (such as failed sign-ins) so attacks across our services can be detected. It only receives a partly masked email address and the network part of the IP address (the last part is removed), and keeps them for 90 days.
Data storage and security
Your data is stored on our hosting provider's servers and transmitted over encrypted (HTTPS) connections. Passwords are hashed, never stored as plain text, and sessions use signed, expiring tokens. As with any online service, no method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.
Your rights and choices
You can review your data at any time within the app. You can permanently delete your account and all associated data — transactions, connections, and learned coaching rules — at any time from the app (open the profile menu at the top right, then choose Delete account). This deletion is immediate and cannot be undone. You can also remove a single bank or PayPal connection, along with the transactions it brought in, from the Connections list, and turn notifications off from the profile menu.
If you're in the UK or EU, you also have rights under GDPR / UK GDPR to access, correct, or export your data, and to object to or restrict our processing of it — contact us at yemcels@gmail.com to exercise these.
Children's privacy
Prudence Wallet is not directed at children, and we do not knowingly collect information from anyone under 16.
Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
Contact
Questions about this policy or your data: yemcels@gmail.com.