Privacy Policy

Last updated: September 15, 2026

Wualy ("Wualy", "we", "us") is a personal budgeting and financial-management service operated by RougeHoneybee Inc., a company based in the Province of Ontario, Canada, with its registered office at 145 Yorkview Dr, Etobicoke, ON, Canada. This policy explains what personal information we collect, why, who we share it with, and the choices you have.

If you connect a bank account, we use Plaid Inc. and, for institutions in Colombia, Belvo Technologies to retrieve your account and transaction information. By using that feature you also agree to Plaid's End User Privacy Policy and Belvo's Privacy Policy, which govern how each of them handles the data they collect on your behalf.

1. Information we collect

Information you give us

• Account details — your name, email address, and a password (stored only as a salted hash), or, if you sign in with Google, the basic profile information Google shares (name, email, profile photo).
• Financial data you upload — when you import a bank or card statement (CSV or Excel), we process and store the transactions in it: dates, descriptions, amounts, and the account you assign them to.
• Budgets, goals, categories, notes and other content you create in the app.
• Support messages you send us by email or through the in-app chat.

Information from a linked bank account

If you choose to connect a bank account, Plaid or Belvo collects the following from your financial institution, at your direction, and provides it to us:

• Account identifiers, names, types, and the last few digits of the account number
• Account balances
• Transaction history — dates, amounts, descriptions, merchant names, and pending/posted status

We do not receive or store your online banking username or password. We store a connection token that lets us refresh your transactions; that token is encrypted at rest.

Information collected automatically

• Usage and device data — pages viewed, actions taken, IP address, browser and device type, and approximate location derived from your IP, collected through Google Analytics and our own logs.
• Cookies — a session cookie to keep you signed in, and analytics cookies. See "Cookies" below.

2. How we use your information

• To provide the service — categorising transactions, showing budgets, net worth, goals, and spending insights.
• To keep your linked accounts up to date by periodically refreshing transactions.
• To authenticate you and secure your account.
• To respond to support requests.
• To send you service messages (for example, a sign-up confirmation, a waitlist invitation, or a notice that a bank connection needs to be reconnected). We do not send marketing email without your consent.
• To improve the product, including training the model that suggests categories for transactions. This model is trained on transaction descriptions and the categories assigned to them; it is not used to identify you.
• To detect, prevent, and investigate fraud, abuse, and security incidents, and to comply with law.

Our legal bases for processing (where the GDPR or similar laws apply) are: performance of our contract with you, your consent (for linking a bank account and for analytics cookies), and our legitimate interests in securing and improving the service.

3. Who we share it with

We do not sell your personal information. We share it only with:

• Plaid and Belvo — to establish and maintain a bank connection you have authorised.
• Google Cloud — our hosting, database, and file storage provider. Data is stored in Google Cloud's Montréal, Canada region.
• Google (Firebase Authentication) — if you sign in with Google.
• Our email provider — to deliver transactional email.
• Google Analytics — for aggregate usage analytics.
• Crisp — our in-app support chat provider.
• Professional advisers, acquirers, or authorities — where required by law, to enforce our terms, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

Each provider is bound by contract to use the data only to provide their service to us.

4. Data security

• All traffic between your browser and Wualy is encrypted with TLS.
• Bank-connection tokens are encrypted at rest using a key held in a dedicated key-management service.
• Passwords are stored only as salted hashes.
• Access to production systems is restricted to authorised personnel.

No method of transmission or storage is completely secure; we cannot guarantee absolute security.

5. Data retention

We keep your information from the date your account is created for as long as it stays active. If you delete a bank connection, we stop refreshing it and delete the stored connection token; you can choose whether to also delete the transactions it imported. If you delete your account, we delete your personal information within 30 days, except where we must retain certain records (for example, in backups, or to comply with law or resolve disputes) for a limited additional time.

6. Your rights and choices

• Access, correct, or delete your information — most of it is editable in the app; email support@wualy.money for anything else, or to request a copy or full deletion.
• Disconnect a bank at any time from Settings → Accounts. This revokes our access with Plaid or Belvo.
• Revoke Plaid's access directly at my.plaid.com.
• Withdraw consent for analytics cookies through your browser settings.
• Depending on where you live, you may have additional rights under laws such as the GDPR, PIPEDA, or the CCPA (including the right to object to processing, to data portability, and to lodge a complaint with a supervisory authority). Contact us to exercise them.

7. Cookies

We use a strictly-necessary session cookie to keep you signed in, and Google Analytics cookies to understand usage. We do not use advertising cookies. You can block cookies in your browser, but the app will not work without the session cookie.

8. Children

Wualy is not directed to children under 16, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International transfers

Our infrastructure is in Canada. Plaid processes data in the United States; Belvo processes data in Colombia and the European Union. Where required, these transfers rely on appropriate safeguards such as standard contractual clauses.

10. Changes to this policy

We will post any changes on this page and update the date above. If the changes are material, we will notify you by email or in the app.

11. Contact

RougeHoneybee Inc.
145 Yorkview Dr, Etobicoke, ON, Canada
support@wualy.money