Privacy Policy
Draft. This policy is being prepared for WorthGrove’s public launch and is under legal review. Questions: support@worthgrove.app.
- WorthGrove stores the financial information you type in (budgets, bills, paychecks, goals, debts) so it can plan with you. It does not connect to your bank.
- We never sell your information, “share” it for targeted advertising, show ads, or track you across other apps and websites.
- People in your household see your shared household information. Your personal ledger is private to you.
- Wherever you live in the United States, you can see, download, correct and delete your data. Most of it you can do yourself in the app, and the rest by email.
- If you subscribe to WorthGrove Plus, Apple, Google or our payment processor handles your payment. We never see your full card number.
Contents
- Who we are
- What we collect
- How we use it
- Your household
- Who helps us run WorthGrove
- Subscriptions and payments
- How long we keep it
- Your privacy rights (all U.S. residents)
- State-specific disclosures
- Security and breach notification
- Children
- Changes and contact
Who we are
WorthGrove is an app by Chronicles of Mom Life (“we”, “us”, “our”). This policy covers the WorthGrove apps for iPhone and Android, the web app, and worthgrove.app (together, “WorthGrove”). For privacy-law purposes, we are the “business” or “controller” of the personal information described here. Contact us at support@worthgrove.app.
What we collect
Information you give us
- Account: your email address (you sign in with a one-time code sent to it; there is no password) and, if you choose, your first name.
- Household: your household’s name, time zone and the day your week starts.
- Financial information you enter: budgets and categories, spending and refunds you record, bills and due dates, income and paydays, savings goals, debts (balances, interest rates, minimum payments), notes, and their amounts. WorthGrove does not ask for bank login details, full card numbers, bank account numbers or Social Security numbers. Please don’t type them into notes.
- Documents you upload (WorthGrove Plus): photos and PDFs you choose to keep, such as receipts, statements, bills, loan papers, tax forms and insurance policies, with the name, type and note you give them. These files can contain whatever is printed on them, including account numbers, addresses or other personal details. We store them only to show them back to you and, for household documents, your household.
- Invitations: the name you type for someone you invite, and when an invitation was used.
- Support: what you send us when you contact support.
Information collected automatically
- Notifications: if you turn on reminders, your device’s push token, whether it’s an iPhone or Android, your reminder settings, and a record of which reminders were sent.
- Subscription records: if you subscribe, your plan, price, trial and renewal dates, store (App Store, Google Play or web) and transaction identifiers (see Subscriptions and payments).
- Technical logs: our hosting providers keep standard server logs (such as IP address, time of a request, device and browser type, and error information) to run and protect the service.
- On your device: the apps keep you signed in using your phone’s secure keychain, and remember display choices such as dark mode. If you add the home-screen widget, a short summary (bills due this week, your next bill, and, unless you hide them, amounts) is stored on your phone for the widget to show; it is visible to anyone who sees your home screen. The web app uses your browser’s storage. We do not use advertising identifiers, analytics or advertising trackers, or third-party cookies.
Information from imports
If you import a spreadsheet (CSV) of transactions from another app or your bank’s website, WorthGrove reads the dates, descriptions and amounts in it on your device and saves the rows you confirm. The file itself is not uploaded or kept.
How we use it
- To provide WorthGrove: show your budget, plan each paycheck, track bills, goals and debts, and calculate payoff estimates.
- To send sign-in codes, reminders you’ve turned on, and important service messages (for example, about your subscription, security, or changes to these policies).
- To share household information with the members of your household.
- To provide and manage WorthGrove Plus, including free trials and renewals.
- To keep WorthGrove secure, prevent fraud and abuse (for example, limiting repeated invite-code guesses), fix problems, and comply with the law.
- To answer your support requests.
We do not sell your personal information, “share” it for cross-context behavioral advertising, use it for targeted advertising, use it for profiling that produces legal or similarly significant effects, or give it to data brokers. We do not use your financial information to decide your eligibility for credit, insurance, housing or employment. We have not done any of these things in the past 12 months.
Your household
When you share a household, everyone in it can see and change the household’s shared budget, bills, income, goals, debts and history, and can see each member’s first name. Your personal ledger is private: other household members cannot see it, including in totals, and that includes documents you add to it. If you leave or are removed from a household, your personal ledger in that household is deleted, and the shared history stays with the household. If you delete your account, entries you added to a shared household remain for the other members without your name.
Who helps us run WorthGrove
We use a small number of service providers (also called processors) who handle data on our behalf, under contracts that limit them to providing their service to us:
| Provider | What they do | What they handle |
|---|---|---|
| Supabase (on Amazon Web Services, United States) | Database, file storage and sign-in | Your account, everything you enter, and documents you upload |
| Resend | Sends sign-in code emails | Your email address and the code |
| Expo, Apple and Google | Deliver reminders to your phone | Your push token and the reminder’s text (amounts are left out unless you turn them on) |
| Cloudflare | Hosts worthgrove.app and the web app; forwards support email | Web requests and support emails |
| RevenueCat | Keeps track of WorthGrove Plus subscriptions across devices | An anonymous account ID, your plan, and purchase and renewal records |
| Apple, Google and Stripe | Take subscription payments (App Store, Google Play, and the web) | Your payment details, under their own privacy policies; we receive only the purchase record |
We may also disclose information if required by law or legal process, to protect the rights, safety or property of our users, us or others, or as part of a merger, sale or reorganization of the business (in which case this policy will continue to protect your information, and we’ll tell you before it becomes subject to a different policy).
Subscriptions and payments
WorthGrove Plus is sold through the Apple App Store, Google Play, or, on the web, through Stripe. Each handles your payment under its own privacy policy (Apple, Google, Stripe). We never receive or store your full card number. We receive the plan you chose, its price and currency, trial, renewal and cancellation dates, refund status, and transaction identifiers, which we use to turn Plus on for your household, show your subscription status, prevent fraud, keep required tax and accounting records, and answer billing questions. Taking a free trial or buying a subscription does not change how we use your financial information.
How long we keep it
- Your information is kept while your account is active.
- When you delete a document, no one can open it from that moment, and its file is erased from storage within about 10 minutes.
- When you delete your account, it is removed from our live database right away, and your documents’ files are erased within about 10 minutes. Encrypted backups are kept for up to 7 days for disaster recovery, then removed automatically.
- Subscription and transaction records are kept as long as tax and accounting laws require (generally up to 7 years), without your financial entries.
- Records of sent reminders and server logs are kept only as long as needed to run and secure the service.
Your privacy rights (all U.S. residents)
Many states give their residents privacy rights. We give the same rights to every WorthGrove user, wherever you live, whether or not your state’s law applies to us:
- Know and access: learn what personal information we have about you and get a copy, including in a portable, machine-readable format. In the app: More → Account Settings → Download my data.
- Correct: fix inaccurate information, which you can do directly in the app, or ask us.
- Delete: delete your account and personal information. In the app: More → Account Settings → Delete my account, or see how to delete your account.
- Opt out of the sale of personal information, targeted advertising, “sharing” for cross-context behavioral advertising, and profiling for significant decisions. We don’t do any of these, so there is nothing to opt out of, but you may still ask, and we will record your choice.
- Limit use of sensitive information: we use information some states consider sensitive (such as financial information you enter) only to provide WorthGrove to you.
- Know the third parties we disclose personal information to (listed above) and, where state law provides, a list of specific third parties.
- No discrimination: we will never deny service, charge a different price, or provide a different quality of service because you exercised a privacy right.
- Appeal: if we decline your request, you can appeal (see below).
How to make a request
Use the in-app tools above, or email support@worthgrove.app with the subject “Privacy request” from the email address on your account. To protect you, we verify requests by confirming that you control that email address. You may use an authorized agent: they must provide your signed permission, and we may ask you to confirm your identity directly. A parent or guardian, or a person with power of attorney, may also make a request on someone’s behalf. We will confirm receipt within 10 business days and respond within 45 days. If we need more time (up to another 45 days, where the law allows), we’ll tell you why. Requests are free; if requests are manifestly unfounded or excessive, we may decline or charge a reasonable fee as state law allows.
Appeals
If we decline any part of your request, reply to our decision with the subject “Privacy appeal.” Someone not involved in the original decision will review it and respond in writing within 45 days (60 days in Colorado), explaining the result. If you’re unhappy with the result of your appeal, you can contact your state’s Attorney General (or, in California, the California Privacy Protection Agency).
Global Privacy Control and “Do Not Track”
Because we never sell or share personal information or use targeted advertising, there is no tracking to stop. We treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request where state law requires it. Our website does not track you across other sites, so it responds to browser “Do Not Track” signals the same way it responds to every visitor: by not tracking.
State-specific disclosures
The rights above cover the comprehensive consumer privacy laws of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, as well as any state that passes a similar law. Some states require the specific notices below.
California (CCPA/CPRA, CalOPPA, “Shine the Light”)
In the past 12 months we have collected these categories of personal information, from you, your devices, and our payment and subscription providers, for the business purposes described in How we use it, and disclosed them only to the service providers listed above:
| Category (CCPA) | Examples | Kept |
|---|---|---|
| Identifiers | Email address, account ID, push token, IP address | While your account is active |
| Customer records and financial information (Cal. Civ. Code §1798.80(e)) | Name, budgets, bills, income, debts you enter | While your account is active |
| Commercial information | Subscription plan, purchase and renewal history | Up to 7 years (tax records) |
| Internet or network activity | Server logs | Limited period for security |
| Sensitive personal information | Account log-in by email code; financial information you enter; anything printed on documents you upload (which may include account numbers). We never ask for passwords or card security codes. | Used only to provide WorthGrove |
We do not collect precise geolocation, biometric, health or other sensitive categories, and we do not sell or share personal information, including of consumers under 16. We do not disclose personal information to third parties for their own direct marketing (“Shine the Light”). California residents may make the requests above. We offer the Founding Family price as a launch discount for early subscribers. It is not tied to your personal information, so it is not a financial incentive under the CCPA.
Nevada
We do not sell “covered information” as defined by Nevada law (NRS 603A). Nevada residents may still submit an opt-out request to support@worthgrove.app, and we will honor it.
Washington and other consumer health data laws
WorthGrove does not collect consumer health data as defined by Washington’s My Health My Data Act, Nevada’s SB 370, or similar laws. Please don’t record health conditions in notes.
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia
The categories of personal data we process, our purposes, the categories of third parties we disclose to, and how to exercise and appeal your rights are described above. We do not sell personal data or process it for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. Where a law requires consent to process sensitive data, we process financial information only as needed to provide the service you asked for, and we will ask for consent before any other use. Minnesota residents may also ask about the result of profiling and request a list of specific third parties; Oregon, Delaware, Maryland and Minnesota residents may request a list of specific third parties we disclosed personal data to. We do not knowingly process the personal data of anyone under 18 (see Children).
Texas
Notice required by Texas law: we do not sell sensitive personal data or biometric data.
States without a comprehensive privacy law
If you live in a state not listed above, you still have every right described in Your privacy rights, and you remain protected by your state’s data-breach, consumer-protection and other laws.
Security and breach notification
Information travels encrypted (HTTPS/TLS) and is stored encrypted by our database provider. Each household’s data is separated by rules in the database itself, so one household can never see another’s, and your personal ledger is protected the same way. We maintain reasonable administrative, technical and physical safeguards appropriate to the information we hold. No system is perfectly secure. If a security breach affects your personal information, we will notify you, and regulators where required, as the breach-notification laws of all 50 states, the District of Columbia, Puerto Rico, Guam and the U.S. Virgin Islands require.
Children
WorthGrove is for adults managing household finances and is not directed to children or teens. You must be 18 or older to create an account. We do not knowingly collect personal information from anyone under 18, and we comply with the Children’s Online Privacy Protection Act (COPPA). If you believe a minor has given us information, contact us and we will delete it.
Outside the United States
WorthGrove is offered in the United States, and your information is stored and processed in the United States.
Changes
If we change this policy, we’ll update the date above. For material changes, we’ll tell you in the app or by email before they take effect, and where the law requires, we’ll ask for your consent before using previously collected information in a materially different way.
Contact
Chronicles of Mom Life · support@worthgrove.app · Privacy requests and appeals: subject “Privacy request” or “Privacy appeal.”