Privacy Policy
Finworthly is a personal project built and run by one person. This policy describes exactly what the application does with your data — no more, no less.
The short version
- Finworthly never asks for or receives bank credentials, account numbers, OTPs, or Account Aggregator consent.
- Every figure in your account is one you typed in yourself.
- Your financial data is never sold, rented, or shared with advertisers or data brokers.
- You can request deletion of your account and all associated data at any time.
Who runs this service
Finworthly is operated by Malay Mehta, an independent software architect. There is no company entity behind it. For any privacy question or data request, contact hello@malaymehta.com.
What data is collected
1. Account information (from Google Sign-In)
When you sign in, Google provides a signed token from which Finworthly stores:
- Your Google subject identifier — a stable, opaque ID used to recognise you on return visits
- Your name
- Your email address
Finworthly does not receive or store your Google password, and requests no access to your Gmail, Drive, Contacts, or any other Google service.
2. Financial data you enter
Everything in your dashboard is manually entered by you or by a household member you have invited:
- Names of the people in your household, and optionally their email addresses (used only to let them sign in to the same household)
- Names and categories of the assets and liabilities you choose to track
- The values you record for those items, the dates you record them, and any cost-basis figure you choose to add
Finworthly has no connection to any bank, broker, depository, mutual fund platform, or Account Aggregator. It cannot see any balance you have not typed in.
3. Usage analytics
The site uses Google Analytics 4 (measurement ID G-DF4229QX29) to count page views and understand which pages people find useful. This collects standard web analytics data such as approximate location derived from IP address, device and browser type, and pages visited. Your financial figures are never sent to Google Analytics.
4. Local browser storage
Finworthly stores two values in your browser's local storage: your session token (finworth_token) so you stay signed in across refreshes, and your theme preference (finworth_theme). Clearing your browser data removes both.
Where your data is stored
| Component | Provider | Region |
|---|---|---|
| Application server | Oracle Cloud Infrastructure | Mumbai, India (ap-mumbai-1) |
| Database | Neon (PostgreSQL) | Singapore (ap-southeast-1) |
| Analytics | Google Analytics 4 | Google infrastructure |
| Authentication | Google Sign-In | Google infrastructure |
| Fonts | Google Fonts | Google infrastructure |
Cross-border transfer: the database is hosted in Singapore, so data you enter is stored outside India. If that matters to you, please take it into account before using the service.
Loading Google Fonts and Google Analytics means your IP address is visible to Google when you load a page, as it is on most of the web.
How the connection is secured
All traffic is served over HTTPS with TLS 1.2 or 1.3. Sign-in tokens are validated on the server for signature, issuer, expiry, audience, authorised party, and verified-email status before any request is accepted.
Who your data is shared with
Your financial data is not sold, rented, licensed, or shared for advertising. It is shared only in these situations:
- Household members you invite. If you add a person and give their email address, that person can sign in and see the household dashboard, including totals that reflect other members' holdings. They can only edit their own holdings. Only add people you intend to share this with.
- Infrastructure providers listed in the table above, strictly to operate the service.
- Where required by law, if compelled by a valid legal order.
How long data is kept
Your data is retained for as long as your account exists, because the entire purpose of the product is a historical record of your net worth over time. Valuations are deliberately never auto-expired — deleting them would destroy the trend you are tracking. When you request deletion, your data is removed from the live database.
Your choices and rights
- Access and export. Settings includes a CSV export of your holdings.
- Correction. Every value, item, and person is editable in the app at any time.
- Deletion. Email hello@malaymehta.com from your account's email address and your account and its data will be deleted.
- Analytics opt-out. Any standard browser tracking protection or ad blocker will block Google Analytics on this site; nothing in the app depends on it.
If you are in India, the Digital Personal Data Protection Act, 2023 gives you rights over your personal data. Requests can be made to the address above.
Children
Finworthly is not directed at children and accounts should be created by adults. A parent may of course track a child's assets as a household member — that is a record you are keeping, not an account for the child.
Changes to this policy
If this policy changes materially, the "last updated" date above will change. Because the service is small, there is no mailing list; please check back if this matters to you.
Questions?
Email hello@malaymehta.com. A real person reads it.