Last updated: October 20, 2026
Wyroe is a budgeting app operated by [LEGAL NAME OF PERSON OR COMPANY], [MAILING ADDRESS] ("Wyroe", "we", "us"). We are the controller of the personal information described in this policy. Contact us at [email protected].
| Information | Why | Basis (EEA/UK) |
|---|---|---|
| Email and password (stored hashed, never readable by us) | Create your account, sign you in, send account emails | Contract |
| Display name and currency (optional) | Personalize the app | Contract |
| Pods and transactions you enter: names, icons, colors, targets, deadlines, limits, lock and autosave settings, amounts, descriptions, dates | Show your balances, history, goals and suggested splits | Contract |
| AI coach messages and generated tips | Answer your questions and give insights | Contract |
| Crash reports (scrubbed) | Find and fix errors, keep the app secure | Legitimate interests |
| Usage events with a one-way scrambled ID (scrubbed) | Understand which features are used and improve the app | Legitimate interests |
| Technical data your device sends with any request, such as IP address and device type | Deliver the service, prevent abuse | Legitimate interests |
We don't collect your bank login, card numbers, contacts, precise location, photos, microphone or advertising identifiers. Wyroe does not connect to financial institutions. The money amounts in the app are what you type in.
We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. We use it only to provide and improve Wyroe. We don't track you across other companies' apps or websites.
When you chat with the AI coach, your message, along with a summary of your pods and recent transactions (including descriptions you typed) is sent securely from our servers to Anthropic, which generates the reply. AI insights and suggested-split explanations use a compact summary of your numbers, not your transaction descriptions. The AI provider's key is kept on our servers only, never in the app. AI answers are general information, not financial, tax or legal advice, and may sometimes be wrong. Don't enter information into the coach that you don't want processed.
| Provider | What for |
|---|---|
| Supabase | Sign-in and storing your data (hosted in the United States, Oregon) |
| Anthropic | AI coach and insights |
| Resend | Sending account emails and the waitlist confirmation email |
| Sentry | Crash reports (scrubbed) |
| PostHog | Usage statistics (scrubbed) |
| Cloudflare | Hosting and protecting this website and its domain |
These providers act as our service providers (processors) and may only use your information to provide their service to us. We may also disclose information if the law requires it, to protect people's safety or our rights, or in a sale or merger of our business (in which case we'll tell you).
We and our providers are based in or process data in the United States and possibly other countries. If you are in the European Economic Area, the UK or Switzerland, your information is transferred outside your region using approved safeguards such as Standard Contractual Clauses.
If you turn on "Lock with Face ID", your iPhone checks your face or passcode itself. Wyroe never receives your face data or passcode. Only an on/off setting is saved on your phone.
We send only account emails, such as confirming your email address and resetting your password, and one email to people on the waitlist when Wyroe launches. We don't send other marketing email. If we ever do, we will ask first and every message will include a way to opt out.
This website does not use cookies, advertising or analytics. If you join the waitlist, we store your email address, the date, where you signed up (the website), and a scrambled copy of a one-time link, only to confirm your address and tell you when Wyroe launches. We email you a link to confirm; unconfirmed addresses are deleted after 30 days. Every email has a link that deletes your address immediately. We keep confirmed addresses until launch or until you ask us to remove them; you can also email [email protected]. The legal basis for people in the EEA/UK is your consent, which you can withdraw at any time. Waitlist emails are stored with our database provider, Supabase, and sent through our email provider, Resend; nobody can read them from the website. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security and reliability.
We respond to requests within 30 days (or sooner where the law requires) and may need to confirm it's you first.
You have the right to access, correct, delete, restrict or object to our use of your information, to receive it in a portable format, and to withdraw consent where we rely on it. You can also complain to your local data protection authority. Email [email protected] to use these rights.
In the past 12 months we collected these categories of personal information: identifiers (email, scrambled usage ID), financial and commercial information you enter (pods and transactions), internet or app activity (usage events and crash reports), and the account log-in details you create. We collect them directly from you and your device, for the purposes above, and disclose them only to the service providers listed above. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. You have the right to know, access, correct and delete your personal information, to limit the use of sensitive information, and to be free from discrimination for using these rights. You or an authorized agent can make a request by emailing [email protected]. We don't respond differently to "Do Not Track" signals because we don't track you across sites.
We keep your information while your account is open. When you delete your account, your records are removed right away. Backups and logs at our providers may take a short additional time to clear. Crash and usage data is kept only as long as needed for the purposes above.
Data is encrypted in transit and access is limited. Each person can only access their own records, enforced in the database. Secret keys never appear in the app. No system is perfectly secure, so please use a strong password and, if you like, the Face ID lock. If a breach affects you, we'll notify you and the authorities as the law requires.
Wyroe is not meant for anyone under 13 (or the higher minimum age where you live), and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.
If we change this policy in a way that matters, we'll update the date above and, for major changes, tell you in the app or by email.