Privacy Policy

Worth It? ("we", "us") respects your privacy and complies with the Swiss Federal Act on Data Protection (revised FADP) and, where applicable, the EU GDPR. This policy explains what we collect and your rights. Controller: Worth It? [insert legal name / address]. Contact: prohaniph.nathan@gmail.com.

What we collect

• Account data: your email, a securely hashed password, and your display name.
• Preferences: language and currency-symbol settings.
• Content you create: the expenses and amounts you enter, weekly check-ins, redirected amounts, goals, streaks, and companion progress.
• Payment data: handled by our payment provider Stripe. We do not store your card details, only your plan and payment status.
• Minimal technical data needed to run and secure the service.

Why we process it (and legal basis)

To provide the service and your account (performance of contract), to process payments (contract), to keep the service secure, and to meet legal obligations. We ask for consent where the law requires it.

What we do NOT do

We do not sell your data, show advertising, or use third-party advertising trackers.

Who we share it with (processors acting on our instructions)

• Supabase, database and authentication hosting.
• Stripe, payment processing.
• Our application hosting provider.

These providers process data only to deliver our service.

International transfers

Some providers may process data outside Switzerland (e.g. the EU or US). Where they do, transfers rely on recognised safeguards such as adequacy decisions, the Swiss–US Data Privacy Framework, or Standard Contractual Clauses.

Retention

We keep your data while your account is active. When you delete your account, we delete or anonymise your personal data, except where we must keep records to comply with the law.

Your rights

Under the FADP and GDPR you may request access, rectification, erasure, restriction, objection, and data portability, and withdraw consent. Email prohaniph.nathan@gmail.com to exercise these. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local supervisory authority if you are in the EU.

Security

We use encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we take reasonable measures to protect your data and will notify the FDPIC and affected users of a data breach as required by law.

Children

Worth It? is not intended for anyone under 16.

Changes

We may update this policy; we will post the new version here with an updated date.