Privacy Policy

Your privacy matters to us. Here’s how we protect and use your information.

Last updated: July 24, 2026

Introduction

Wellthplan, LLC (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our website, mobile applications, financial tools, dashboards, budgeting features, our AI financial assistant Benjamin, and related services (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

Information we collect

We collect information you provide directly to us, information we collect automatically when you use our Services, and information from third parties.

A. Information you provide

We collect information you provide to us when you:

Create or register a WellthPlan account
Connect financial accounts or link third-party financial institutions
Fill out forms or otherwise submit content through our Services
Set up budgets, financial goals, or dashboards
Apply for, inquire about, or evaluate financial products
Make a purchase or subscribe to paid features
Communicate with us via email, chat, SMS, or third-party platforms
Participate in a contest, promotion, survey, or referral program
Request customer support or information about our Services
Use the chat or AI assistant functionality within our Services
Upload documents or financial records
Otherwise communicate or interact with us

B. Information we collect automatically

When you use the Services, we may automatically collect:

IP address
Device identifiers
Browser type and version
Operating system
Referring URLs
Pages viewed and time spent
App usage data
Log files
Approximate geolocation derived from IP address
Cookies and similar tracking technologies

C. Information we collect from other sources

We may obtain information about you from third-party sources in certain circumstances. For example, we may collect information from:

Identity verification and fraud prevention providers
Credit bureaus (including information from your credit report, where authorized)
Financial institutions and account servicing companies
Payment processors
Analytics providers
Advertising networks and marketing partners
Mailing list providers
Data aggregation providers
Service providers and data partners
Publicly available sources

D. Device permissions and camera access

With your permission, the app may access your device’s camera to enable features such as scanning receipts or documents. Any images or videos captured are used solely for these purposes and are not accessed without your explicit consent. You can manage device-level permissions (including notifications) at any time in your device settings.

Account creation and phone-based sign-in

WellthPlan uses your US mobile phone number to create your account and sign you in. When you enter your phone number, we send you a one-time verification code by SMS. We collect and store your phone number to authenticate you, secure your account, and — if you opt in — deliver messages from Benjamin and account notifications via SMS or other messaging channels.

If you enable Face ID or Touch ID to unlock the app, biometric authentication happens entirely on your device. WellthPlan never receives, stores, or has access to your biometric data.

Standard carrier messaging rates may apply to SMS messages depending on your phone plan. You can manage messaging preferences in Settings → Notifications within the app.

SMS and text messaging

If you opt in to text messaging, WellthPlan sends you messages such as conversations with Benjamin, account notifications and alerts you have enabled, and one-time verification codes used to sign in. Consent to receive text messages is not a condition of purchasing any goods or services. Message frequency varies based on your activity and settings. Message and data rates may apply — contact your wireless provider with questions about your plan.

Opting out and getting help

You can cancel text messages at any time by replying STOP to any message from us. After you send STOP, we may send one final message confirming that you have been unsubscribed. You can re-subscribe by replying START or by updating your preferences in Settings → Notifications within the app. For help, reply HELP to any message or contact us at support@wellthplan.com.

No sharing of mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding vendors and service providers acting on our behalf solely to deliver messages to you.

Financial account integration (Plaid)

We may allow or require you to integrate or connect your WellthPlan account with third-party financial services through trusted service providers, including Plaid Inc. (“Plaid”) and similar financial data aggregators. When you choose to connect your bank, credit card, loan, or investment accounts through Plaid or another integration partner:

You authorize WellthPlan and the third-party provider to access and transmit your financial account information.
You log in through the provider’s secure interface — WellthPlan never sees or stores your bank username or password.
Certain information may be imported directly into WellthPlan rather than you having to upload it manually.
The third-party provider’s collection and processing of your information is governed by their own privacy policy and terms of service.

Through these integrations, we may receive information such as:

Financial account identifiers and account owner information
Account balances
Transaction histories
Credit account information
Loan account information
Mortgage information
Investment account holdings and performance data
Payment history
Income and payroll-related data (where available)
Employment-related information
Account metadata and categorization information

The information we receive depends on the accounts you connect, the permissions you grant, and the data made available by the third-party provider. We use this information to:

Provide budgeting tools and dashboards
Categorize transactions
Generate financial insights and projections
Help you evaluate financial products
Improve the functionality and accuracy of our Services
Detect fraud and maintain security

You may disconnect a linked financial account at any time through your WellthPlan account settings, though previously collected data may be retained in accordance with this Privacy Policy and applicable law. Transactions tied to a removed account stay in your history unless you delete your full account.

How we use your information

We use your information to:

Provide, operate, and improve the Services
Create and manage your account
Connect and display financial account data
Provide budgeting insights, projections, and analytics
Calculate and display your WellthScore, a household financial health indicator (it is not a credit score and does not affect your credit in any way)
Recommend financial tools or services
Process transactions and subscriptions
Communicate service updates and support responses
Send spending alerts, bill reminders, and proactive nudges you have enabled
Personalize content and user experience
Conduct research and product development
Detect, prevent, and investigate fraud or security incidents
Comply with legal and regulatory obligations
Enforce our Terms of Service

We may also create aggregated or de-identified information that cannot reasonably be used to identify you.

Households and shared Spaces

WellthPlan is a shared-finance app for households, partners, roommates, and families. If you join or create a shared Space, the accounts, balances, transactions, budgets, and goals you contribute to that Space are visible to the other members of that Space. Benjamin uses the shared context to give every member consistent answers.

Only share a Space with people you trust to see that financial information. Members of a Space have read-only visibility — no member (and not Benjamin) can move money, make payments, or change your external account settings.

Use of AI Services

We use artificial intelligence (“AI”) services to provide personalized financial insights, recommendations, and in-app guidance through Benjamin. Benjamin is for informational and educational purposes and is not a licensed financial advisor.

Data shared with AI providers

When you use AI-powered features within the app, we may send limited user data to our third-party AI service provider, OpenAI. This may include:

User-provided inputs (such as responses to questions, prompts, or messages)
Financial data, including transaction history and account balance information
Context necessary to generate relevant financial insights

We do not send:

Bank account numbers
Personally identifiable financial account identifiers
Direct identity information such as Social Security numbers

Purpose of data sharing

This data is shared solely for the purpose of:

Generating personalized financial insights and recommendations
Powering interactive AI-driven features within the app

We do not use this data for advertising or marketing purposes, and we do not sell user data.

How AI providers handle data

Data sent to our AI provider is processed in accordance with their applicable privacy and security practices. We take reasonable steps to limit the data shared to only what is necessary to provide the requested functionality.

User consent

AI-powered features are optional. Before any data is shared with a third-party AI provider, you are presented with a clear disclosure and must provide explicit consent.

Payments and subscriptions

When you start a free trial or subscribe to a paid plan, payment is handled by our third-party payment processors and app store billing providers. We receive limited billing information (such as subscription status, plan type, and renewal dates) but do not store your full card number. You can manage or cancel your subscription in Settings → Billing → Manage Subscription, which opens our secure billing portal.

Cookies and tracking technologies

We use cookies, pixels, SDKs, and similar technologies to:

Authenticate users
Remember preferences
Analyze usage patterns
Improve performance
Deliver relevant content

You can manage cookies through your browser settings, though some features may not function properly without them.

Data security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

Encryption in transit and at rest
Secure authentication practices
Access controls
Monitoring for suspicious activity

However, no system can guarantee absolute security.

Data retention

We retain your data for the duration of your active account. Transaction data associated with disconnected institutions is retained for historical visibility but is no longer synced. Soft-deleted transactions are permanently purged after 90 days. Webhook logs are retained for 1 year for debugging purposes.

Certain records may be retained for longer periods where required by applicable banking and financial regulations, to comply with legal obligations, to resolve disputes, or to enforce our agreements.

Data deletion

You may request complete deletion of your account and all associated data at any time. Upon receiving a deletion request, we will:

Revoke all Plaid access tokens and disconnect your financial institutions
Permanently delete all stored transactions, account data, balances, messages, and profile information
Remove your authentication credentials

Deletion requests are processed within 30 days. You may also disconnect individual financial institutions from within the app, which revokes our access to that institution and stops all data syncing.

In limited cases, we may retain certain information after a deletion request where retention is required by law or financial regulation (for example, records subject to banking record-keeping requirements), or as needed to detect fraud, resolve disputes, or enforce our agreements. Any retained data remains protected under this Privacy Policy.

Your rights and choices

Depending on your jurisdiction, you may have rights to:

Access your personal information
Correct inaccurate information
Request deletion
Restrict or object to processing
Request portability (export your data in a portable format)
Opt out of certain data sharing

Marketing communications

You can unsubscribe from marketing emails using the link in each email, update your communication preferences in your account settings, and opt out of promotional communications while continuing to receive essential service and security notifications.

AI processing choices

AI-powered features are optional and require your explicit consent before any data is shared with a third-party AI provider. You may also request that your data not be used to improve our models, opt out of personalized AI recommendations, and request deletion of AI-generated insights based on your data.

Notifications and device permissions

You can control notifications, alerts, and Benjamin’s proactive nudges in Settings → Notifications, and manage device-level permissions (camera, notifications) in your device’s Settings app.

To exercise any of these rights, contact us at privacy@wellthplan.com.

Compliance and regulations

We maintain a privacy and security program designed to comply with the financial services and data protection laws and regulations that apply to us, which may include, depending on your location and how you use the Services:

Gramm-Leach-Bliley Act (GLBA) requirements for financial privacy
Fair Credit Reporting Act (FCRA) requirements, where credit information is involved
State financial privacy laws and regulations
California Consumer Privacy Act (CCPA) and other US state privacy laws
General Data Protection Regulation (GDPR), where it applies to our processing of EU users’ data

We follow industry-standard security practices and work toward recognized standards such as SOC 2 where relevant to our Services.

International data transfers

Our Services are operated from the United States. If you are located outside the United States, please note that your information may be transferred to and processed in the United States. Where required by applicable law, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses (SCCs).

Children's privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at privacy@wellthplan.com and we will delete it.

Changes to this policy

We may update this Privacy Policy periodically. We will revise the “Last Updated” date and notify you of material changes by:

Sending a notification to your registered contact information
Posting a notice on our website
Providing in-app notifications

Material changes will become effective 30 days after notification. Non-material changes will become effective immediately upon posting.

Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Privacy inquiries and data rights requests: privacy@wellthplan.com
General support: support@wellthplan.com
Mail: Wellthplan, LLC, 616 S. 300 E, St. George, Utah 84770