Simplify your Path to Financial Wellness

PRIVACY POLICY Last Updated: May 11, 2025 Welcome to SmartWealth Navigator ("we," "us," or "our"). We are committed to protecting your privacy and handling your personal and financial information with transparency and care. This Privacy Statement explains how we collect, use, disclose, and safeguard your information when you use our application and services (collectively, the "Services"). Please read this Privacy Statement carefully. If you do not agree with the terms of this Privacy Statement, please do not access or use our Services. 1. Information We Collect We may collect information about you in a variety of ways. The information we may collect via the Services includes: •Account Information: When you register for an account, we use Google OAuth for authentication. Through this, we receive your email address, which is used to identify your account. We assign you a unique User ID (a randomly generated identifier) which is used to link your account to your financial data. You also have the option to provide a "Username" which we will use to address you within the application and in communications with our AI financial assistant. •Financial Profile Data (swn_ProfileData): To provide you with personalized financial insights, analysis, and our Financial Health Score, we collect financial information that you voluntarily provide. This includes, but is not limited to: ◦Income (e.g., monthlyIncome, additionalIncome, incomeSource) ◦Expenses (e.g., totalMonthlyExpenses, or segmented expenses like foodExpenses, utilitiesExpenses, transportationExpenses, entertainmentExpenses, insuranceExpenses, otherMonthlyExpenses, and data from your Custom Expense Tracker including monthly_payment and remaining_balance) ◦Savings (e.g., monthlySavings, totalSavings, emergencyFund, savingsGoals) ◦Debts (e.g., totalDebt, or segmented debts like mortgageDebt, carLoanDebt, studentLoanDebt, creditCardDebt, otherDebt) ◦Investments (e.g., totalInvestments, retirementAccounts, stocks, bonds, realEstateInvestments, otherInvestments) ◦Housing Information (e.g., housingType, monthlyRent, monthlyMortgage) ◦Employment Information (e.g., employmentStatus, employer, yearsEmployed, monthlyRetirementContributions, employerMatch) ◦Personal Details for Context (e.g., age, creditScore) •AI Interaction Data: ◦Chat History (SWN_ChatHistory): We store your conversations with our AI financial assistant to maintain context and improve your experience. ◦AI Summaries (SWN_Summaries): We store AI-generated summaries of your financial situation or chat sessions to provide ongoing insights. ◦Financial Health Score: We calculate and may store your Financial Health Score to help you track your progress. •Usage Data: We may automatically collect certain information when you access the Services, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Services. This data is used for analytics and to improve our Services. •User Tier and Token Usage (SWN_Users): We track your user tier (e.g., basic, pro) and your usage of AI features (token usage) for billing and service management purposes. 2. How We Use Your Information Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Services to: •Create and manage your account. •Provide you with personalized financial insights, analysis, our Financial Health Score, and AI-driven advice. •Operate and improve our Services, including data analysis and troubleshooting. •Communicate with you about your account or our Services. •Monitor and analyze usage and trends to improve your experience with the Services. •Prevent fraudulent transactions, monitor against theft, and protect against criminal activity. •Comply with legal and regulatory requirements. •[Placeholder: Add any other specific uses, e.g., "Send you newsletters or promotional materials if you have opted in."] 3. How We Protect Your Information We implement robust security measures designed to protect your information: •Encryption in Transit: All data transmitted between your device and our servers (and between our servers and third-party services like OpenAI) is encrypted using HTTPS/TLS. •Encryption at Rest: Our database provider, Supabase, encrypts your data at rest on their servers. •Row Level Security (RLS): We employ RLS policies in our database to ensure that your financial data is accessible only by you when you are logged into your account through our application's standard interfaces. Your financial data tables are linked to your account via a non-personally identifiable User ID. •Secure AI Interaction: When your financial data is sent to our AI provider (OpenAI) for analysis (e.g., for chat responses, summaries, or score generation), it is done over secure connections. We do not send your direct PII like email to the AI for these analyses if a username is provided. The AI uses the provided financial figures to generate insights for you. •Access Controls: Access to user data by our authorized personnel is strictly limited to what is necessary for system operation, maintenance, and providing customer support. We have internal policies and technical controls to protect user data. •No Storage of Credentials: We do not store your Google password. Authentication is handled via Google OAuth. We do not ask for or store your bank account login credentials. 4. Disclosure of Your Information We do not sell your personal or financial information. We may share information we have collected about you in certain situations: •With Third-Party Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: ◦Database hosting and services (Supabase) ◦AI model providers (OpenAI) for generating insights and chat responses. We only send the necessary financial data and conversation context for the AI to perform its function. ◦[Placeholder: List any other types of service providers, e.g., analytics providers, email delivery services.] These service providers are contractually obligated to safeguard your data and are not permitted to use your personal information for any other purpose. •By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. •Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. •Aggregated or Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for research, analysis, or other business purposes. 5. Your Data Choices and Control •Account Information: You may at any time review or change the information in your financial profile by logging into your account settings and updating your profile. •Username: We encourage you to set a "Username" in your profile. This name will be used by our AI assistant to address you, enhancing your sense of privacy during interactions. •Data Export: [Placeholder: *Describe if/how users can export their data, e.g., "You can request an export of your financial profile data by contacting us at [Support Email Address]." *] •Account Deletion: You can request the deletion of your account and associated financial data by contacting us at [Placeholder: Support Email Address or describe in-app deletion process]. We will process your request in accordance with applicable law and our data retention policies. Please note that some information may be retained in our archives for a limited period for legal, operational, or legitimate business purposes. 6. Third-Party AI Services (OpenAI) To provide AI-powered financial advice, summaries, and the Financial Health Score, SmartWealth Navigator utilizes services from OpenAI. •When you interact with our AI features, relevant portions of your financial data and chat history are securely transmitted to OpenAI for processing. •OpenAI is contractually obligated to handle this data in accordance with their privacy and security policies. •We do not send your direct email address to OpenAI for these analyses if you have set a username. The data sent is focused on the financial figures and context needed to provide the AI service. •[Placeholder: You may want to link to OpenAI's general data usage policies or state that data is not used for training their models by default, if applicable based on your OpenAI agreement/usage.] 7. Children's Privacy Our Services are not directed to individuals under the age of [Placeholder: Specify age, e.g., 13 or 16, depending on your jurisdiction and target audience]. We do not knowingly collect personal information from children under [Placeholder: Same age]. If we become aware that a child under [Placeholder: Same age] has provided us with personal information, we will take steps to delete such information. 8. Changes to This Privacy Statement We may update this Privacy Statement from time to time. We will notify you of any changes by posting the new Privacy Statement on this page and updating the "Last Updated" date. You are advised to review this Privacy Statement periodically for any changes. Changes to this Privacy Statement are effective when they are posted on this page. 9. Contact Us If you have questions or comments about this Privacy Statement, please contact us at: [Placeholder: Your Company Name/App Name] [Placeholder: Your Email Address for Privacy Inquiries] [Placeholder: Your Physical Address, if applicable] [Placeholder: Link to a contact form on your website, if applicable] Key Placeholders to Fill: •[Your Company Name/App Name] •[Support Email Address] / [Email Address for Privacy Inquiries] •[Physical Address, if applicable] •[Link to a contact form on your website, if applicable] •Specifics on data export/deletion process. •Age for Children's Privacy section. •Any other third-party services you use that handle user data. •Details on OpenAI data usage (especially regarding model training - by default, API data is not used for training, but confirm your specific usage). Before Publishing: 1Fill in ALL placeholders accurately. 2Ensure it reflects your ACTUAL data handling practices. 3GET IT REVIEWED BY A LEGAL PROFESSIONAL. This is crucial to ensure compliance with privacy laws applicable to your users (e.g., GDPR, CCPA, etc.). This statement aims to build trust by being transparent about how you use the user_id system and your security measures, while also highlighting the use of a chosen username for a more anonymous in-app experience.