Privacy Policy

Our Commitment

DecentWealth is built on a foundation of privacy. We believe your financial data should stay yours. This privacy policy explains how we handle your information when you use our app and website.

Information We Collect

Through this website, we may collect only:

• Your email address (when you voluntarily sign up for updates)

That's it for personal information. We don't collect names, phone numbers, or other personal identifiers through this website. The app itself collects no personal information at all. For details on website analytics data (including cookieless usage signals sent to Google), see the Website Analytics section below.

Website Analytics

This website (not the app) uses analytics to understand how visitors find and use our site, and to measure the effectiveness of our advertising campaigns.

Google Analytics (Consent Mode v2): We use Google Analytics 4 with Google's Consent Mode v2. Google Analytics loads on every page visit in one of two modes depending on your consent choice:

• Before consent or if declined: Google Analytics operates in a limited, cookieless mode. No cookies are set on your device, but anonymous pings are sent to Google containing your IP address (truncated), page URL, referrer, user agent, and timestamp. Google uses this data for aggregate statistical modeling.
• After consent is granted: Google Analytics activates full tracking with cookies and collects pages visited, time spent, referral sources, general location (country/city level), device and browser information, and advertising campaign performance.

Google processes this data as a data processor on our behalf, and may also use aggregated, cookieless ping data for its own statistical modeling purposes. Data is transferred to Google servers in the United States under the EU-US Data Privacy Framework.

For more information, see Google's Privacy Policy. To fully block Google Analytics, use the Google Analytics Opt-out Browser Add-on.

Vercel Analytics: We also use Vercel Analytics for basic, privacy-focused metrics (no cookies, no personal data, aggregated and anonymous).

Important: These analytics apply only to this website. The DecentWealth app contains no analytics, tracking, or advertising SDKs whatsoever.

How We Use Your Email

If you subscribe to updates via the form on our website, your email address is used solely for:

• Notifying you of important app updates and new features

Email subscriptions are managed entirely through Beehiiv, a third-party email service provider. Your email address is stored on Beehiiv's servers, not on ours. We do not maintain a separate email database. You can unsubscribe at any time via the link in any email.

Data Storage

DecentWealth does not collect or store your personal data on our servers. All portfolio data is stored locally on your device and optionally synced via your personal iCloud account.

What We Don't Do

• We will never sell your email address to third parties
• We will never share your data with advertisers or marketing companies
• We don't set tracking cookies without your consent. Google Analytics operates in cookieless mode by default and only sets cookies after you grant consent
• We don't send spam or promotional emails unrelated to DecentWealth

The DecentWealth App

The DecentWealth iOS app follows strict privacy standards:

• No user accounts or authentication required
• No data sent to DecentWealth servers
• All portfolio data stored locally on your device using SwiftData
• Optional iCloud sync uses your personal iCloud account (encrypted by Apple)
• No analytics, advertising, or tracking SDKs in the app
• Optional biometric lock (Face ID/Touch ID/Optic ID) for app access
• Apple Watch companion app shares data via secure WatchConnectivity framework
• Home screen widgets access data through encrypted App Groups (on-device only)

Camera Access

DecentWealth requests camera access only for QR code scanning to quickly import wallet addresses. Camera usage is entirely optional and occurs only when you initiate a scan. No images or video are stored, transmitted, or processed beyond reading the QR code data. You can deny camera access and manually enter wallet addresses instead.

Data Sent to Third-Party Services

To display your portfolio balances and prices, the app sends limited data to third-party APIs. No personal information is transmitted. Only the data necessary to fetch balances:

• Wallet addresses are sent to blockchain data providers (Alchemy for 16 EVM chains, Helius for Solana, mempool.space for Bitcoin) to fetch token balances
• Token contract addresses are sent to DefiLlama to fetch current cryptocurrency prices
• Stock/ETF symbols are sent to EODHD to fetch market prices and dividend data
• Currency codes are sent to Open Exchange Rates API (open.er-api.com) to fetch conversion rates (no personal data)

Wallet addresses are public blockchain data and do not identify you personally. All API requests use HTTPS encryption. These services have their own privacy policies:

• Alchemy Privacy Policy (EVM chains)
• Helius Privacy Policy (Solana)
• mempool.space (Bitcoin - open source, no tracking)
• DefiLlama (crypto prices - open source, no API keys)
• EODHD Privacy Policy (stocks & dividends)
• Open Exchange Rates API (currency conversions, open.er-api.com - free, no API key)

In-App Purchases

DecentWealth offers optional premium subscriptions through Apple's App Store. All payment processing is handled entirely by Apple. We never see or store your payment information. Apple's privacy practices for in-app purchases are covered under their Privacy Policy.

Biometric Authentication

DecentWealth offers an optional app lock using Face ID, Touch ID, or your device passcode. Your biometric data is never accessed or stored by the app. Authentication is handled entirely by iOS using Apple's secure LocalAuthentication framework. We only receive a success/failure result from the system.

Push Notifications

DecentWealth may request permission to send push notifications in future updates. If enabled, notifications would be used only for app-related alerts (such as dividend reminders). No notification data is collected or transmitted to our servers. You can manage notification permissions in iOS Settings → DecentWealth → Notifications at any time.

Your Rights

You have the right to:

• Access: Request a copy of any personal data associated with you
• Delete: Request deletion of your email from our subscriber list at any time
• Unsubscribe: Opt out of emails via the unsubscribe link in any email, or contact us directly
• Correct: Update your email address if it changes
• Portability: Your app data is already in your control on your device
• Object: Decline cookies to prevent full analytics tracking. To fully block Google Analytics (including cookieless pings), use the Google Analytics Opt-out Browser Add-on

To exercise any of these rights, email us at hey@decentwealth.app. We respond to all requests within 48 hours (or 30 days maximum for GDPR/CCPA requests).

Data Export

Premium users can export transaction data to CSV or PDF format. When you export data:

• Files are generated locally on your device
• Export files are saved to your device or shared via iOS share sheet
• No export data is sent to DecentWealth or third-party servers
• You are responsible for securing exported files

Deleting Your Data

You have complete control over your data:

• Delete individual items: Swipe to delete wallets, transactions, assets, or liabilities in the app
• Delete all local data: Uninstall the app to remove all data from your device
• Delete iCloud data: Go to Settings → [Your Name] → iCloud → Manage Storage → DecentWealth → Delete Data
• Delete subscriber email: Unsubscribe via any email link, or email hey@decentwealth.app to request removal from Beehiiv

Once deleted, your data cannot be recovered as we do not store backups on our servers.

Data Retention

We retain data only as long as necessary:

• App data: Stored locally on your device until you delete it or uninstall the app
• iCloud sync data: Retained in your personal iCloud account according to your Apple settings
• Subscriber emails: Stored on Beehiiv's servers until you unsubscribe or request deletion
• Website analytics: Google Analytics data (from both cookieless pings and full cookie-based tracking) is retained for 14 months per Google's default settings

Children's Privacy

DecentWealth is intended for users aged 17 and older and is not directed at children under 17. We do not knowingly collect personal information from children. The app is rated 17+ on the App Store due to its financial content. If you believe a child has provided us with their email address, please contact us at hey@decentwealth.app and we will promptly delete it.

GDPR & CCPA Compliance

DecentWealth operates under European Union law. We comply with the General Data Protection Regulation (GDPR) for EU users and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

For GDPR: Our legal bases for processing are: consent (Article 6(1)(a)) for email collection and full cookie-based analytics tracking; and legitimate interest (Article 6(1)(f)) for limited, cookieless analytics pings sent to Google when consent has not been granted. The legitimate interest pursued is understanding aggregate website traffic patterns. You may object to this processing by using the Google Analytics Opt-out Browser Add-on.

For CCPA/CPRA: We do not sell or share your personal information as defined under California law. We honor Global Privacy Control (GPC) signals. California residents have the right to know, delete, and opt-out.

Do Not Sell or Share My Personal Information: We do not sell your data. Subscriber emails are never sold to or shared with third parties for marketing purposes. Cookieless analytics pings sent to Google do not include personal identifiers. To fully block Google Analytics, use the Google Analytics Opt-out Browser Add-on.

Security Practices

We implement security measures to protect your data:

• Local-first architecture: Your financial data never leaves your device (unless you enable iCloud sync)
• HTTPS only: All API requests use encrypted HTTPS connections
• No private keys: We only store public wallet addresses, never private keys or seed phrases
• Biometric protection: Optional Face ID/Touch ID/Optic ID app lock
• Apple encryption: iCloud sync data is encrypted by Apple in transit and at rest
• No server storage: We do not operate servers that store your portfolio data

International Data Transfers

DecentWealth is operated from the European Union. When you use third-party APIs (for price data, etc.), your wallet addresses or stock symbols may be processed by servers in other countries. This data is public information (blockchain addresses, stock tickers) and does not include personal identifiers. If you use iCloud sync, your data is processed according to Apple's data practices and may be stored in data centers outside your country.

Google Analytics data (including cookieless pings) is transferred to Google servers in the United States. This transfer is covered by the EU-US Data Privacy Framework, under which Google is a certified participant.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. For significant changes, we may notify users via email or in-app notification.

Contact Us

Questions about this privacy policy or how we handle your data? Email us at hey@decentwealth.app.

Privacy isn't just a feature for us. It's our entire philosophy.