Privacy Policy

1. Information We Collect

When you use Capital Wizard, we collect the following types of information:

Account Information

• Email address (required for registration)
• Name and phone number (optional profile information)
• Profile photo or avatar
• Authentication credentials (securely hashed, never stored in plain text)

Financial Data You Provide

• Transaction records (amounts, dates, categories, descriptions)
• Financial account information (names, institutions, account numbers, balances and currencies)
• Asset details (types, values, cost basis, returns)
• Budget and portfolio configurations

Contact Data You Provide

• Names, email addresses, and phone numbers of contacts you add to the People module
• Tags, notes, and custom fields associated with contacts

Organization Data

• Organization names, types, and settings
• Team member roles and invitation records

Usage Data

• Device type and operating system
• User IDs, installation/browser identifiers and notification tokens
• IP addresses and approximate location derived from IP addresses for product analytics; the app does not request precise GPS location
• App interactions, pages viewed, and feature usage for functionality and product analytics

Content and Optional Features

• Calendar events, tasks, habits, notes, custom records, support requests and in-app conversations you choose to create
• Files and documents you upload, including photos, videos and audio files, and their file names and metadata
• Voice recordings when you use microphone-based dictation; audio is sent to a transcription provider to produce text

AI features process your prompts, conversation history, selected records and attachments to provide the response or action you request. These optional features send the relevant content to the configured AI or transcription provider.

2. How We Use Your Information

We use your information solely to provide and improve the Capital Wizard service:

• To create and manage your account
• To store and display your financial data, transactions, and assets
• To enable team collaboration features within organizations
• To sync your data across devices in real time
• To provide customer support
• To maintain and improve app performance and security, understand feature usage, deliver notifications, and provide requested AI and voice features

3. Data Storage & Security

Your data is stored securely with the following protections:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security ensuring users can only access their own data
• Regular automated backups
• SOC 2 Type II compliant hosting infrastructure

Passwords are securely hashed using industry-standard algorithms and are never stored in plain text.

4. Third-Party Services

Capital Wizard uses the following third-party services:

• Supabase — database hosting, authentication, and real-time sync
• Google Sign-In — optional authentication method (only if you choose to sign in with Google)
• DiceBear — avatar generation service (no personal data is shared)
• PostHog — product analytics as described below
• Firebase Cloud Messaging — Android notification delivery using installation identifiers and notification tokens
• AI and transcription providers — processing of prompts, selected content, uploads and audio when you use those features

These services have their own privacy policies, and we encourage you to review them.

5. Data Sharing

Service providers: We use providers for hosting, authentication, analytics, notifications and requested AI features. They receive the data needed to provide those services.

Your data may be shared in the following limited circumstances:

• Within your organization: If you create or join an organization, other members with appropriate roles can view shared financial data according to their permission level.
• Legal requirements: If required by law, regulation, or legal process.
• With your consent: When you explicitly authorize sharing.

6. Your Rights

You have the following rights regarding your data:

• Access: You can view all your data within the app at any time.
• Correction: You can update or correct your data directly in the app.
• Deletion: You can delete your account in Settings → Account or request account or selected-data deletion through our Support page.
• Export: You can request an export of your data.
• Withdrawal of consent: You can stop using the service at any time.

7. Data Retention

We retain account and cloud-synced content while needed to provide the service. We process verified deletion requests within 30 days. Account deletion removes your account, memberships and the spaces you own, including their financial records and contacts. Records in spaces owned by other people may remain available to those spaces. Contact support to request deletion of selected records, uploads or analytics data, or to ask about retention by a service provider.

8. Children's Privacy

Capital Wizard is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Cookies & Tracking

We use session tokens and local storage for authentication, preferences and app functionality. We also use PostHog for product analytics, including account identifiers, email, an optional profile name, app interactions, device/browser identifiers and approximate location derived from IP addresses. We do not use this information for third-party advertising or sell it to advertisers.

10. International Data Transfers

Your data may be processed and stored in data centers located outside your country of residence. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice within the app or sending you an email. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

• Email: [email protected]
• Support page: capital-wizard.com/support