Privacy Policy

1. What Data We Collect

Hy-Worth collects only the data you explicitly provide:

• Email address — used for authentication and account identification.
• Financial data — account balances, net worth entries, real estate records, planner scenarios, and any other data you enter into the application.
• Display preferences — your chosen currency, theme, and tracked currencies.

We do not collect analytics, tracking cookies, or any data beyond what you provide. We do not sell, rent, or share your personal data with third parties for marketing purposes.

2. How Data Is Stored

All data is stored in a PostgreSQL database hosted by Supabase. Data is encrypted at rest and in transit (TLS). Authentication is handled by Supabase Auth with secure session management via HTTP-only cookies.

3. Third-Party Services

• Supabase — database hosting, authentication, and API layer. Subject to Supabase's Privacy Policy. supabase.com/privacy
• Frankfurter API / European Central Bank — used to fetch historical foreign exchange rates. No user data is sent to these services; only currency pair and date range queries are made.

4. Your Rights

You have the right to access, export, and delete your data at any time. All of these actions are available in the Settings page: /settings

• Access — view all your data directly within the application.
• Export — download a complete copy of your data in JSON format.
• Deletion — permanently delete your account and all associated data.

5. Data Retention

Your data is retained for as long as your account exists. When you request deletion, your data is purged from active systems within thirty (30) days. Anonymized aggregate data may be retained for analytics. Authentication records are removed at the same time.

6. Regional Privacy Frameworks

Hy-Worth operates across multiple jurisdictions and complies with the privacy frameworks that apply to its users:

• Canada — PIPEDA — Hy-Worth complies with the Personal Information Protection and Electronic Documents Act. Canadian users may request access, correction, or deletion of their personal data.
• Switzerland — revDSG — For Swiss users, Hy-Worth complies with the revised Federal Act on Data Protection (revDSG, in force September 2023). You may request data access, correction, or deletion at any time.
• United States (California) — CCPA / CPRA — California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, the right to delete, and the right to opt out of the sale of personal information. Hy-Worth does not sell personal data.

7. Contact

If you have any questions or concerns about this privacy policy or your data, please contact us at privacy@hy-worth.com.

Hy-Worth by Zorian Inc., Suite 284, 162-2025 Corydon Avenue, Winnipeg, MB R3P 0N5, Canada