1. who we are
wym is an independently developed app. In this policy, "wym," "we," "us," and "our" refer to the independent developer operating the app. For privacy or support questions, contact david@waasg.com.
wym records and organizes financial information that you choose to enter or capture. It is not a bank, payment processor, money transmitter, lender, financial adviser, tax adviser, or debt-collection service. It does not access your bank login or receive your full payment card number.
2. information you provide
Depending on the features you use, you may provide:
- account details such as your name, email address, username, profile information, and authentication identifiers;
- transactions, amounts, merchants, categories, notes, dates, currencies, recurring expenses, budgets, savings goals, and related financial records;
- friends, groups, guest participants, split requests, settlement status, reminders, and social activity;
- support messages, feedback, and other information you choose to send.
When a shortcut helps capture an Apple Pay or other payment moment, wym processes the transaction details made available to the shortcut, such as merchant and amount. wym records the purchase; it does not process the payment itself.
On iOS 27 and later, an optional Wallet notification shortcut passes the text of the Wallet payment notification to wym so it can read the merchant, amount, currency, and card name. wym keeps those extracted details and a one-way fingerprint used to spot duplicates, not the notification text itself.
3. information handled automatically
wym and its service providers may handle user and device identifiers, Firebase authentication identifiers, push-notification tokens, subscription product and entitlement information, basic service and security logs, and app interactions required to operate features.
Precise location is handled only when you enable location access and use travel or transaction-context features. iOS controls the permission. Widgets, App Intents, and shortcuts may place limited app data in local or shared device storage so those features can work.
From version 1.1.18, wym uses Firebase Crashlytics to collect crash reports and diagnostic information, including stack traces, app version, device model, operating system and random installation identifiers, to identify and fix stability problems. wym does not attach your account ID, name, email address or financial records to these reports. Crash and diagnostic data are not linked to your identity and are not used for tracking or advertising. Crash reporting is on in release versions of the app. Apple and platform providers may also provide their own diagnostics subject to your device settings and their policies.
product measurement
From version 1.1.20, wym uses Google Analytics for Firebase to see where people stop using a feature. Release versions of wym send anonymous usage events, such as which main screens are shown, sign-in and onboarding steps, starting or saving a transaction, using splits, connecting Gmail, and viewing a subscription offer, with fixed labels such as the entry method or plan. These events do not include your account ID, name, email address, amounts, merchants, notes, category names, friend or group names, receipt contents, or record IDs. Google Analytics uses a random app-instance identifier and derives a general location, such as country or city, from a masked IP address; wym does not use Location Services for this. Google Analytics is not used for advertising: advertising identifiers, ad storage, ad personalization, and ad-network attribution stay off. Debug builds and automated tests never send these events.
While you use an authenticated account, versions of wym before 1.1.20 record activity such as starting or saving a transaction, using splits and invitations, returning to the app, viewing a subscription offer, and starting or completing a subscription purchase. These records are linked to your account and include the event time, app version, a session identifier, and limited details such as the entry method, group size, or subscription plan. They are stored in Google Firebase, do not include transaction amounts, merchant names, receipt photos, email contents, or notes, and are not used for advertising or cross-app tracking. Your data export includes these records, and account deletion removes them. The current app does not automatically delete them after a fixed period.
“Share anonymous usage data” in Privacy & Security is on by default. Turning it off stops new usage events and records from that device, before sign-in and across accounts; it does not recall events already sent or delete records already saved. Crash reports are separate and are not affected by this switch.
4. how information is used
Information is used to create and secure accounts; sync transactions and settings; show budgets, goals, histories, groups, splits, and widgets; send requested notifications; provide location-enabled context; manage premium access; prevent abuse; troubleshoot service problems; respond to support; and comply with applicable law.
5. authentication
wym supports email and password, anonymous guest accounts, Sign in with Apple, and Google Sign-In. Apple or Google may provide an authentication identifier and, depending on your choices and provider settings, a name or email address. Their use of information is governed by their own terms and privacy policies. An anonymous account still receives a unique service identifier and may store app data.
6. optional phone number and contacts
From version 1.2, you can link a phone number. Linking is optional and is never part of sign-up. wym verifies the number with a one-time SMS code sent by Firebase Authentication (Google), which keeps the verified number with your login. wym itself stores a keyed hash of the number, not the number, plus its last four digits so you can see which number is linked. You can unlink it in Settings.
When you add a guest to a bill, you may pick their phone number from your contacts or type it. wym stores only a keyed hash of a guest's number. If that person later links the same number, wym shows them that someone added them and lets them choose whether to link; the person who added them is told only after they link and decides whether they join shared groups. After you link your number, people who have it can find you through Find friends from my contacts; you can turn this off in Settings.
Find friends from my contacts is optional and asks for iOS Contacts permission. The phone numbers in your contacts are sent securely to wym's server, hashed and compared with linked accounts, then discarded; names and other contact details are not sent, and the numbers are not stored. Picking one contact for a guest uses the iOS contact picker and does not need Contacts permission. Deleting your account removes your linked number and its hashes.
7. optional Gmail imports
Gmail access is separate from signing in and is enabled only when you choose Connect Gmail in Email Imports settings. The requested read-only Gmail permission allows wym to read mailbox messages but does not allow wym to send, modify, move, or delete email.
wym first checks sender and subject metadata. It downloads message content only when the subject contains a transaction signal, such as a receipt, payment, or order, or the sender matches a small list of known billing and bank-alert addresses. Known non-transaction subjects and spam, trash, sent, and draft messages are excluded. wym may read a supported Apple receipt PDF when the email text cannot be parsed. Email subjects, bodies, and attachments are processed transiently and are not retained. wym retains extracted transaction fields such as merchant, amount, currency, date, sender domain, a short payment description and payment method when available, and review status. Candidates not dismissed by your learned filters are shown for your review, and no transaction is added without your approval.
For Premium accounts, wym may send a short subject line and a short text excerpt of a likely receipt or transaction alert to Google's AI service on Google Cloud (Vertex AI), together with the amount, currency, direction, and payment provider it already parsed. Recognizable email addresses, links, account, card, reference, phone, and ID-style patterns are removed first, so the excerpt is bounded and partly redacted; short messages may fit within the excerpt limit, and unusual names or identifiers can still remain, so wym does not claim perfect anonymization. The AI result is limited to screening for a likely expense, income, transfer between your own accounts, repayment of a shared expense, or uncertainty. It cannot change the amount, currency, or date, cannot apply a repayment, and anything uncertain goes to your review. The AI screening receives the email text excerpt, not the receipt PDF or text taken from it, although the amount and other fields it is given can come from that PDF. wym keeps only the extracted financial fields plus a short classification label, confidence, reason, model name, and version; it never stores the subject or excerpt.
wym's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Choosing Not a transaction saves your review decision and, when a sufficiently specific pattern can be identified, an account-specific fingerprint derived from the sender and message template. The fingerprint does not store the subject or body. Matching future suggestions may be retained as dismissed instead of appearing in the review queue. Ordinary dismissal does not teach a filter. You can restore a dismissed suggestion to review and disable its matching filter, or reset learned filters in Gmail settings. Reset stops using earlier filters; it does not erase existing suggestions or feedback records. Feedback records remain until account deletion.
Google authorization tokens are encrypted and restricted to server-side processing. You can pause importing, disconnect Gmail, revoke access, and delete extracted candidates. Disconnecting erases wym's stored Google refresh token. Account deletion also erases the token and feedback records and attempts to revoke the Google grant. If revocation fails, an isolated encrypted copy of the token is kept solely to retry revocation for up to seven days and is then scheduled for deletion. You can also revoke access directly in your Google Account settings.
saved receipt photos (separate from Gmail email attachments)
When you scan or select receipt photos and save them, wym keeps a private copy linked to your account so you can reopen it from transaction details. Receipt text is processed to suggest items and totals. Photos are not automatically shared with split participants. You can explicitly include receipt photos when sharing a split through the system share sheet. Cloud receipt photos are removed after their last linked transaction or your account is deleted. Signing out or erasing transactions clears the corresponding local copies.
8. service providers
wym uses third parties to operate the app:
- Google Firebase for authentication, Firestore database storage, Firebase Storage for receipt photos, cloud functions, remote configuration, Firebase Cloud Messaging, phone-number verification by SMS from version 1.2, Firebase Crashlytics for crash reports from version 1.1.18, and Google Analytics for Firebase for anonymous usage events from version 1.1.20;
- Google for Google Sign-In, optional read-only Gmail imports, and, for Premium accounts, AI screening of email excerpts on Google Cloud (Vertex AI);
- Apple for Sign in with Apple, iOS services, push delivery, and App Store billing;
- RevenueCat for subscription products, entitlement status, purchase history, and restoration.
These providers process information under their own policies and may process it in countries other than your own.
9. sales, ads, and tracking
The current public configuration is designed without third-party ads and without app tracking. The privacy manifest declares no tracking and no tracking domains. wym does not sell personal information or use it for cross-context behavioral advertising. If this changes, this policy and the App Store disclosures must be updated before the changed feature is released.
10. storage, security, and international processing
Cloud account and app records are stored through Firebase services. Some widget, shortcut, preference, and session data is stored on your device. Subscription records are processed by Apple and RevenueCat.
wym uses reasonable technical and organizational safeguards and the security controls provided by its service providers. No storage or transmission method is completely secure, so absolute security cannot be guaranteed. Providers may process information in the United States and other locations where they operate.
11. retention
Account and app records are kept while your account is active and as needed to provide the features you use. When you delete your account, the app runs its deletion flow against the active Firebase account and associated app collections. Service-provider logs, transaction records held by Apple or RevenueCat, and backup copies may remain for the periods those providers require for security, billing, recovery, or legal compliance.
Information may also be kept when reasonably necessary to comply with law, resolve disputes, prevent abuse, or enforce these terms. Files you export remain wherever you choose to save or share them.
12. account and data deletion
You can delete your account from the app's data-management settings. The implemented deletion flow removes the Firebase Authentication account, profile and public profile, username reservation, personal transaction collections, budgets, recurring transactions, savings goals, categories, friends, guests, a linked phone number and its hashes, social activity, requests, invitations, and local widget account data. It also removes the user from groups. Sign in with Apple accounts are reauthenticated and the Apple authorization token is revoked as part of deletion.
Shared records may affect or remain visible to other participants where needed to preserve their own group or split history. Anonymous accounts can use the same deletion action while signed in. The deletion request runs when you confirm it in the app; if it cannot complete, the app reports an error rather than silently treating the account as deleted.
Deleting a wym account does not cancel an active App Store subscription. Apple and RevenueCat may retain transaction and entitlement records under their legal obligations and policies. Cancel billing in your Apple account separately.
13. your choices
You can edit account and financial information in the app, export transaction history as a CSV where that feature is available, manage notification and location permissions in iOS Settings, turn off “Share anonymous usage data” in Privacy & Security (version 1.1.18 and later), unlink your phone number or stop people finding you from their contacts in Settings (version 1.2 and later), restore or manage subscriptions through Apple, withdraw optional permissions, and request access, correction, export, or deletion by contacting david@waasg.com.
14. children's privacy
The current app does not ask for a date of birth and does not include an age-verification flow. wym is intended for people who can manage their own personal-finance records and agree to these terms. If you are a parent or guardian and believe a child has provided information, contact david@waasg.com so the account can be reviewed and, where appropriate, deleted.
15. privacy rights
Depending on where you live, including certain US states, the EEA, or the UK, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, or appeal a denied request. You may also complain to your local data-protection authority.
wym does not discriminate for exercising applicable privacy rights. We may need to verify your identity before completing a request. Authorized-agent requests may require proof of authority.
16. updates to this policy
This policy may change as the product or law changes. The effective date will be updated, and material changes may also be communicated in the app or through another appropriate channel.
17. contact
For privacy questions, support, corrections, exports, or deletion requests, email david@waasg.com.