Security & trust

• Kept apart from other accounts, except the people you invite — every table that holds your records carries per-user access rules in the database itself, not only in the application code. An account reaches its own records and the ones explicitly shared with it, and every request is permission-checked before it returns anything.
• Safe sign-in — your password goes straight to our sign-in provider and never through Hy-Worth's servers. You can turn on two-step verification, and connecting a bank requires it. Household sharing is set up by the owner and checked on every request.
• Abuse protection — a request to delete your whole account can be made only three times an hour. If that safeguard is unavailable, the request is refused rather than let through.

• Document vault: we cannot open it — estate documents are locked in your browser before they are uploaded, with a passphrase only you know, so we hold files we cannot open. Company documents use the same vault by default. You can instead keep a company document in standard encrypted storage, which our servers can read. A document uploaded before the vault existed stays readable to us until you move it in.
• Your keys, your documents — the vault passphrase never leaves your device. Lose the passphrase and the recovery kit, and not even we can restore access — that is the guarantee working as intended.

• Stored in Switzerland — your data is stored in Switzerland (Zurich) and processed in the EU (Frankfurt), under Swiss data-protection law (FADP) and the GDPR.
• Served through Vercel — the app is delivered by Vercel, a US company. It runs on servers in Frankfurt (EU), and pages reach you through Vercel's worldwide network, which sees details such as your IP address. Your records are stored only in the Zurich database, and Vercel does not store your financial data.
• A Swiss company — Hy-Worth is built and operated by Hy-Lev SA (company register CHE-147.726.731), a Swiss company founded by Darius Hyworon. Your relationship is with a Swiss entity, not an offshore shell.
• On the way — everything between your device and Hy-Worth travels over an encrypted connection.
• When stored — the database and its backups are stored encrypted by our database provider.

• No bank logins required — Hy-Worth is manual-first. You never have to hand over bank credentials to use it. If you opt into bank sync (US and Canadian institutions, Pro plan), you sign in at your bank through Plaid: your credentials go to Plaid, never to us; Plaid processes the connection in the United States; and each refresh is held as a preview until you confirm it — nothing is written into your accounts or holdings before that.
• We never see your card — payments are handled entirely by Stripe. Card numbers never touch our servers.

Opt-in: the monthly summary, milestone messages and the currency explanation. On request: Ask Hy-Worth, import help, statement import. Your stored vault documents are never sent.

• Export your records — download everything you have entered, as a single file, from Settings at any time. Uploaded documents are not included in that file, so download those separately from the vault or from the company they belong to.
• Delete everything — account deletion removes your data, including uploaded documents from storage, with backups purged within 30 days.