Privacy Policy

Introduction

The App and its official website wert.app are operated by Shanghai Interface Future Network Technology Co., Ltd. ("Interface Future", "we", "us"). This Privacy Policy explains how Wert (referred to as "the App") and its website handle your information. Please read this policy before using the service to understand how we process your personal information.

Core Principle: Local-First

Your assets and snapshots are stored on your device by default and can sync through your private iCloud or your chosen encrypted WebDAV backup. They are not uploaded to Wert business servers unless you explicitly enable optional AI sharing, as described below.

AI sharing uploads only the scope you explicitly confirm. Summaries are the default; supported versions offer a separate holdings-analysis option. Your local records remain under your control.

Optional AI Sharing: Scope, Access and Deletion

Wert 1.9.1 determines AI availability from the App Store storefront, not interface language or device region. AI connections, pairing and asset sharing are disabled for the mainland China storefront; an unconfirmed storefront also blocks access. The mainland service rejects AI queries under both new and existing authorizations and no longer forwards asset results to the unified entry. Eligible overseas storefronts and the overseas service retain the optional feature, subject to separate authorization and explicit consent. Local snapshots, iCloud sync, purchases and account deletion remain available.

Disabling access does not immediately erase existing authorization records or shared copies. Earlier mainland online copies expire 30 days after the last successful sync and are removed by scheduled cleanup, without a guarantee of physical removal at the exact expiry time. Delete your account in the App or contact [email protected] to request deletion of related online data. Manage information already delivered to conversations with the provider. Older backups may retain residual data under retention and isolated-restoration safeguards; restoring a backup does not reopen old sharing.

AI connections are optional and off by default. Where available, preview and confirm the account scope and history dates in Settings → Connect AI Apps before enabling sharing. Signing in or authorizing an AI app alone does not upload assets. After the first confirmed sync, saving snapshots on a device with sharing enabled can automatically update the shared copy while the App is active.

The shared copy contains the selected account count and date range, snapshot identifiers and dates, reporting currency and completeness, net worth, total assets and liabilities, and totals grouped by asset category and currency. Individual positions are excluded by default. Account names, internal account identifiers, notes, holding quantities, screenshots and source files are excluded even when holdings analysis is enabled. We associate the copy with your Wert account and retain sync, expiry and version metadata to serve your requests and prevent stale devices from overwriting newer choices.

In supported versions, you can separately enable additional holdings analysis, preview it and confirm a sync. It includes positions from the latest selected complete snapshot: per-copy aliases, public instrument codes where entered and recognized, categories, original currencies and values in the snapshot currency. It also includes underlying contributions, region and industry groups, fund disclosure dates, coverage amounts, and missing or stale-data flags derived from the App cache. History queries remain aggregated. Aliases do not anonymize the copy: it remains linked to your Wert account.

Access requires both your additional consent in the App and the AI app's separate holdings-analysis permission. Existing grants do not expand automatically. Turning the option off and successfully confirming a sync removes holdings-analysis content from the online copy while summary sharing may continue. Changing the local option alone or a failed sync does not remove server content. Manage information already returned to an AI conversation with that provider.

Look-through results are estimates based on public disclosures and the local cache and may cover only part of the underlying holdings. They are not real-time or complete risk exposure. The feature helps you understand asset allocation; it does not execute trades or guarantee accurate AI analysis or investment judgments. The storage, cross-border transfer, expiry and deletion terms below also apply to optional holdings-analysis content.

You separately authorize each AI app to read this copy. ChatGPT (OpenAI) and Claude (Anthropic) can read the same currently shared scope for asset summaries and history queries; they cannot edit your local assets. We store the client identity, granted permissions and authorization credentials to maintain the connection. Shared financial data is used for these queries and portfolio-allocation analysis, not advertising or usage analytics.

For the overseas service, Fly.io hosts the application service and Supabase stores the shared copy in its database, both in Tokyo, Japan. On an authorized query, the requested information is sent to the selected AI provider. The AI provider’s processing is not limited to Wert’s storage region. Its processing locations, conversation retention and use of data are governed by its own policy and your account settings: OpenAI (https://openai.com/policies/privacy-policy/) and Anthropic (https://www.anthropic.com/legal/privacy). Review those policies before connecting.

The unified AI entry on Fly.io in Tokyo processes short-lived pairing identifiers and forwards overseas authorization requests. The mainland service no longer forwards asset queries through it. Overseas copies are stored in Tokyo; the gateway does not persist asset responses or cache query results. Pairing records expire after five minutes and are periodically removed; backup residues cannot authorize a connection after expiry. Existing overseas regional connections retain their original routes; mainland connections are disabled.

The online copy expires 30 days after the last successful sync; each successful sync restarts this period. Expired copies cannot be read through the connector. Scheduled or request-triggered cleanup removes expired content; physical cleanup is not guaranteed at the exact expiry time.

After the server confirms Stop sharing and delete copy, the online asset content is removed and all connected AI apps lose access to it. A minimal user-linked version marker remains until account deletion to reject stale uploads. Connection authorizations remain. If the request fails or the device is offline, retry until deletion is confirmed; disabling uploads locally does not itself delete the server copy. Your device and iCloud records are unaffected.

Revoking an AI app in Wert connection management prevents that app from accessing Wert but does not delete the shared copy or revoke other apps. Stopping sharing or revoking access does not erase information already returned in AI conversations; manage or delete it with the relevant provider. Online deletion does not mean immediate physical erasure from infrastructure backups or transaction logs. The 30-day online expiry is not a backup retention guarantee.

Application-managed backups exclude shared content and temporary authorization data; older and infrastructure backups may retain residual data. Before restoring service, restored copies and authorizations must be isolated and cleared, and sharing requires fresh user confirmation. We do not promise immediate physical erasure or an unverified backup retention period.

What Information We Process

Information you provide directly:

Sign in with Apple credentials: a stable user identifier, email address (may be Apple's private relay address), and display name provided by Apple. Used to create your account and identify your subscription and quota.

Feedback: the email address and feedback content you submit via the website feedback form.

Information generated automatically when you use the App:

Market data queries: when you view prices, the App sends the queried asset symbols (e.g. 600519.CN, AAPL.US) to our servers to retrieve quotes; the server caches these symbols. This reflects which symbols you queried, but does not include your holding quantities or amounts.

Exchange rate queries: the currency pairs you request for conversion.

Subscription credentials: when you subscribe to Pro via Apple In-App Purchase, Apple's transaction identifiers are used to verify subscription status.

Usage analytics: we use PostHog to collect pseudonymous usage events (such as screen views, feature usage, and payment funnel events) to improve the product. This does not include your financial data.

Website analytics: only after you opt in, PostHog measures public page visits, referring domains and download-button clicks. We do not automatically capture clicks, form contents, query parameters, session recordings or financial data. You can turn analytics off in the footer at any time; browser Do Not Track is respected. Website analytics are not linked to your App login. A download click does not represent an installation or purchase.

Crash and error diagnostics: to identify crashes and faults, the App uses PostHog (built-in error tracking) to collect diagnostic data when a crash or exception occurs — stack traces, device model and OS version, App version, and other technical context, typically reported on next launch. Server-side errors are additionally logged via Sentry. These diagnostic data do not include your financial data (snapshots, holding quantities, amounts and net worth do not enter crash reports).

How We Use This Information

To provide and maintain App features (quotes, exchange rates, search, subscriptions)

To verify and manage your Pro subscription and usage quota

To respond to your feedback

To analyse and improve the product experience

To troubleshoot issues and ensure security

We do not sell your personal information. There are no ads in the App.

Third Parties and Data Processors

To provide the service, we share necessary data with the following processors:

Apple — Sign in with Apple, In-App Purchase subscriptions

PostHog — usage analytics, App crash and error diagnostics

Sentry — server-side error diagnostics

Fly.io — server hosting (Tokyo)

Supabase — database hosting (Tokyo)

Cloudflare — website hosting, email routing, bot protection for the feedback form (Turnstile), and privacy-friendly website analytics (Web Analytics; cookieless, no personal or cross-site tracking)

Resend — sending feedback notification emails

Market Data Sources (Do Not Receive Your Personal Data)

To provide quotes, exchange rates, and symbol search, our servers query several third-party market data providers. These queries are server-to-server only, contain only asset symbols or currency pairs, and do not include any information that identifies you. Therefore, no personal data is shared externally through these queries.

Data Storage Location and Retention

Our servers and database are located in Tokyo, Japan.

Price and exchange rate caches are retained as needed; account and subscription information is retained for the duration of your account.

After you delete your account, we will delete the server-side information associated with your account (except where retention is required by law).

Data Security

We use reasonable measures such as HTTPS transport encryption and access authentication to protect information. However, no system can guarantee absolute security.

Your Rights

To the extent applicable law allows, you have the rights to access, obtain a copy of, correct, delete, withdraw consent for, and request an explanation of the processing rules concerning your personal information. These rights also cover the optional shared copy.

Access and correction: you can view and manage your settings within the App.

Account deletion: you can delete your account within the App (Settings → Account → Delete Account, then confirm). After deletion, the login credentials, Pro subscription records, quota, AI authorizations and shared copy associated with your account will be deleted from the live service (except where retention is required by law). Financial data stored locally on your device is removed when you uninstall the App or clear it manually within the App.

You may also contact us at [email protected] to exercise these rights.

Children's Privacy

The App is not directed at children under 14, and we do not knowingly collect their personal information. If you are a parent or guardian and believe a child has provided us with information, please contact us at [email protected] to have it deleted.

International Data Transfers

To provide you with sign-in, market data, exchange rate, and subscription verification services, our servers and database are hosted in Tokyo, Japan (Fly.io, Supabase). This means the server-related data described above (such as your Apple sign-in identifier and email, subscription transaction identifiers, the symbols and currency pairs you query, and any optional AI shared copy) is transferred to and stored outside mainland China.

The overseas recipients are the corresponding service providers listed in "Third Parties and Data Processors"; the purposes and methods of processing are as described in those sections. You may exercise your rights of access, correction, and deletion regarding overseas-processed data by contacting [email protected].

Where separate consent is required for a transfer, it must be obtained before that transfer. Merely using Wert does not constitute separate consent. This policy does not enable AI sharing in the mainland China service.

Legal Bases and Regional Rights (Where Applicable)

Where the EU General Data Protection Regulation (GDPR) applies, our legal bases for processing your personal information include: performance of a contract to provide the service to you, our legitimate interests in improving the product, and, where applicable, your consent. You have the rights of access, rectification, erasure, restriction of processing, data portability, and to object to processing.

Where the California Consumer Privacy Act (CCPA/CPRA) applies, we do not "sell" or "share" your personal information for monetary or other valuable consideration.

You may exercise these rights by contacting us at [email protected].

Policy Updates

We may update this policy. Significant changes will be notified on this page or within the App. This policy is effective as of the update date shown above.

Contact Us

For any privacy-related questions, please contact: [email protected]

If you believe our handling of your personal information has infringed your rights, you may file a complaint with us at [email protected]; you also have the right to lodge a complaint with the competent data protection authority.