1. Scope and operator
This is an owner-authored draft privacy policy for Richwise, a money-coaching application for United States and Canadian households. It is not a certification or a verified statement of regulatory compliance. The operator’s full legal identity, mailing address and designated privacy contact are pending confirmation.
The final notice must identify who is responsible for personal information and describe actual processing practices. Separate financial institutions and service providers may have their own privacy notices. Review those notices when you use their services.
2. Profile and household information
Richwise stores profile information such as names, avatars, household membership and preferences. A household can contain one or two people. Settings may include country, currency and timezone for presenting the household’s records.
Membership and invitations establish which household a person belongs to. Do not accept an invitation unless you intend to share household money records. User-private tone choices and Wiseguard conversations are separate from shared household profile information.
3. Money records and learning activity
Information you record can include financial accounts, balances, assets, liabilities, transactions, merchants, dates, currencies, spending heads, budgets and business records. Household totals include personal and joint records, while business money is separate.
Recorded balances may contribute to net-worth snapshots and projections. Learning progress, lesson completion, private level assessments and circle membership may also be stored. Only record information needed for the tools you want to use, and do not enter another person’s information without authority.
4. Uploaded documents and expenses
Vault files, invoices and receipts can contain merchant details, dates, totals, tax amounts, payment references and other personal information visible in the file. Document records also include details needed to associate the file with its household and expense review.
When you request AI reading, the relevant document content is sent for AI processing to extract expense details and suggest a head. Review the extracted values before saving. Remove unnecessary sensitive material before uploading, and avoid including unrelated identification documents or financial credentials.
5. AI conversations and document processing
Wiseguard conversations contain the messages you submit and generated responses. Conversations and tone choices are private to the signed-in user rather than shared with their partner or circle. AI outputs may be incorrect and are educational, not financial advice.
Lovable AI is used for AI features, including reading invoices and receipts. The exact underlying processors, processing locations, provider retention, model-training restrictions and onward-disclosure terms are pending confirmation. This draft does not claim that AI inputs are never retained or never used for training. The owner must verify and disclose these terms before enabling AI under a final notice.
6. Optional bank connections
With your consent, a bank-connection service can provide information needed to connect and refresh authorized financial accounts. Linked information can include institution and account details and balances made available through the provider. Only link accounts you have authority to access.
You can disconnect a connection. Previously saved balances remain separate from live access and are not erased merely by disconnecting. The final notice must identify the connection provider, the precise permissions requested and any additional financial information actually imported; a feature description is not confirmation of every data field collected.
7. Membership and payment information
Membership administration uses household-owned billing records, plan status, business add-on counts and confirmed payment-provider events. Payment details entered in a provider-controlled payment flow are subject to that provider’s terms and privacy practices.
The owner must confirm the payment provider’s exact data flows, retained identifiers and support-access practices. This draft does not make unverified promises about card-number storage, payment compliance or provider retention.
8. Why information is used
The intended purposes are to provide the household tools you request, save and display records, calculate estimates, manage membership, process authorized invitations, deliver requested messages and respond to privacy requests. AI document processing is tied to the reading action you request.
Any additional purposes, legal bases, optional marketing, tracking or automated targeting must be confirmed and disclosed before they are introduced. The final notice should distinguish information necessary to run an account from optional processing that can be declined.
10. Service providers and legal disclosures
Operating the requested features can involve hosting, identity, storage, AI, payment, bank-connection and email providers. An invitation can require processing the recipient’s email address and invitation information.
A complete provider list, contracts, processing regions, international-transfer safeguards and any lawful disclosure procedures are pending owner confirmation. This draft does not certify providers or guarantee where information resides. Any disclosures required by law must be described in the final notice consistently with applicable legal requirements.
12. Your choices and privacy requests
You can correct records through available editing tools, choose your Wiseguard tone, review sharing consent and disconnect linked accounts. In the signed-in privacy page you can review available consent information and submit an account-deletion request.
A deletion request is pending until processed; submitting one does not immediately erase data. A pending request can be cancelled through the available control. Export requests, access requests, appeals and other rights-handling channels require an approved privacy contact and process. Do not assume an automated export or completed deletion exists solely because a request can be submitted.
13. Retention, archiving and deletion
Cancelling membership returns the household to Free, removes bank connections and turns off AI without deleting saved records. Vault archiving keeps files recoverable and is not permanent deletion.
The operator must approve and disclose retention periods for active records, archived files, AI requests, payment records, logs and backups. Account deletion needs a coordinated process that respects another household member’s shared records and applicable legal obligations. This draft does not promise immediate deletion, a fixed deletion deadline or erasure from every provider and backup.
14. Security and incident information
Treat access to your account as sensitive. Keep your sign-in secure, avoid shared credentials, review household invitations and do not upload unnecessary secrets. Use only trusted devices when accessing financial records.
Security measures, encryption representations, audit claims, incident-response commitments and notification procedures require owner-approved evidence before inclusion in a final notice. This draft does not claim certification, breach-proof protection or any particular security standard.
15. United States and Canadian privacy rights
Depending on where you live and the law that applies, you may have rights to request access, correction or deletion, withdraw certain consent, challenge processing or complain to a relevant authority. Exceptions may apply, including protection of another person’s information and legal recordkeeping obligations.
The final policy must assess applicable United States state requirements and Canadian requirements, including PIPEDA and Quebec Law 25 where relevant, and establish request verification, appeal and response procedures. Mentioning these laws is not a claim of compliance. The owner must verify any statements about sale, sharing for targeted advertising, sensitive-information use and opt-out signals before publication.
16. Children and sensitive information
Richwise is intended for people able to enter a binding agreement. Minimum age, age-screening and handling of minors’ information are pending owner and legal review. Do not provide information about a child unless you are authorized and a supported purpose has been established.
Do not put bank passwords, authentication tokens, full government identification numbers or unrelated health information into Wiseguard chats or uploaded receipts. If unnecessary sensitive information was included, use an approved privacy contact once available rather than sending more copies to an unverified address.
17. Updates and privacy contact
The final notice should explain how material privacy changes will be communicated. The draft preparation date is not an effective date and does not confirm any change in actual data handling.
Legal operator: pending confirmation. Privacy officer or responsible contact: pending confirmation. Privacy email and mailing address: pending confirmation. These details, the provider inventory, retention schedule and rights-handling procedures must be approved before this policy is presented as effective.