Privacy policy

1. Who we are

WorthOut is made by R.K. Studio, Nicosia, Cyprus, which is the controller of the personal data described in this policy. You can reach us at support@getworthout.com. This policy covers the WorthOut app for Android, the web app at app.getworthout.com, and this website, getworthout.com.

2. Your financial data

Everything you enter in WorthOut (your accounts and balances, categories, notes and goals, and the names of your devices) is kept in your vault. Your device encrypts it with a random key before it’s saved anywhere, and that key can only be opened with your passphrase or your recovery key, which never leave your devices. We have no copy of your vault, your passphrase or your recovery key, so we can’t read, recover or delete your data.

Each device also keeps its own copy so that WorthOut works offline: on Android in the app’s private storage, which Android’s backups leave out, and in a browser encrypted with your vault’s key. You can delete your data at any time by deleting the WorthOut folder from your cloud storage and removing the app, or the site’s data, from your devices.

3. Your cloud storage

When you choose Google Drive, you sign in with Google and allow WorthOut to use only the files it creates there; it can’t see your other files. Google stores the encrypted files under its own privacy policy and can see their names, sizes and dates, but not what’s in them. Your Google account’s email address is kept on your devices, to show which account holds your vault. In the web app, the access Google grants lasts an hour and is kept only in memory.

4. If you buy Pro

Pro is a licence kept in your vault and signed by our licence service, which runs on Microsoft Azure in Germany.

• On Google Play, Google handles the payment under its own privacy policy. The app sends our licence service the purchase token from Google Play and your vault’s id, a random number that says nothing about you, and the service checks the purchase with Google.
• On the web, Stripe handles the checkout and the payment through Link, which is the seller on your receipt, under Stripe’s privacy policy. Stripe collects your email address, your payment details and your country for tax. We receive the checkout’s id and whether it was paid. If you restore a web purchase, the email address and receipt number you enter are passed to Stripe to find it, and we don’t store them.

For each purchase, the licence service keeps the store, its order or receipt reference, the vault id it was last issued for, when and how often a licence was issued, and whether the purchase was refunded. It keeps no name, email address or payment details. The licence in your vault holds the vault id, the store, a purchase reference and the date it was issued.

We use this to issue your licence, to let you restore it, and to stop refunded purchases being restored, because it’s needed to provide what you bought (Article 6(1)(b) of the GDPR). We keep these records for as long as WorthOut offers Pro, so that restoring keeps working; you can ask us to delete yours, after which it can no longer be restored. The service uses your IP address for a moment to limit how many requests one address can make, and doesn’t store it.

5. Exchange rates

If you keep accounts in other currencies, WorthOut fetches the day’s exchange rates from Frankfurter (frankfurter.dev), an independent public service that publishes central banks’ rates. Each request asks for the whole table of rates against the euro and contains nothing about you, your accounts or your currencies. Like any website, Frankfurter sees your device’s IP address. You can turn this off in Settings, under Exchange rates in the Android app and General in the web app.

6. The apps don’t track you

The Android app and the web app have no analytics, no advertising and no tracking. The web app sets no cookies and loads no third-party scripts; it keeps its encrypted copy of your vault and your settings in your browser’s storage. If you’ve allowed it on your phone, Google Play may share crash reports and performance data about the Android app with us, under Google’s privacy policy. These contain no financial data.

7. This website and Google Analytics

getworthout.com is hosted on Microsoft Azure. If you accept analytics in the cookie notice, the site uses Google Analytics to count visits: the pages you view, how you arrived, your device, browser and language, and your approximate location (country and city, worked out from your IP address, which Google Analytics doesn’t store). Google Analytics sets cookies named _ga and _ga_<id>, which last up to two years, and we keep its data for 14 months. Google acts on our behalf and may process the data in the United States under the EU–US Data Privacy Framework.

If you decline, Google Analytics isn’t loaded at all. Your choice is remembered in your browser’s storage rather than in a cookie, and you can change it at any time with Cookie settings at the bottom of every page. We rely on your consent for this (Article 6(1)(a) of the GDPR).

8. When you email us

If you write to support@getworthout.com, we keep your messages and our replies so we can help you, for up to two years after the conversation ends. Please never send your passphrase, your recovery key or your exported files; we will never ask for them.

9. Who else is involved

10. Children

WorthOut isn’t meant for children under 16.

11. Your rights

Under the GDPR you can ask to see, correct, delete or take a copy of the personal data we hold about you, and to restrict or object to how we use it. Where we rely on your consent, you can withdraw it at any time. Since we hold so little, we may need your Google Play order number or your web receipt number to find a purchase. Write to us at support@getworthout.com.

You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy), or to the data protection authority where you live.

12. Changes to this policy

If we change this policy, we’ll update the date at the top of this page, and describe any significant change here before it takes effect.