Privacy Policy

1. Introduction

Walley ("Walley," "we," "us," or "our") operates a personal wallet and expense-tracking service available through our web and mobile applications. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using Walley, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

2. Information We Collect

Account Data

When you create an account, we collect your name, email address, and password (stored in hashed form). You may optionally upload a profile photo.

Financial Data You Enter

To provide our service, we store the financial information you choose to record, including:

• Transactions (income, expenses, and bill payments)
• Amounts, dates, categories, and merchant or description details
• Account balances for bank, credit, and cash accounts you manage
• Budgets and spending limits
• Recurring bills and payment schedules
• Currency and financial preference settings

Receipts and Attachments

If you use receipt scanning or attach files to transactions, we store the images and documents you upload. This may include receipt photos, payment SMS or email screenshots, and bank statement imports when you use those features.

Security Settings

If you enable optional PIN protection, we store a hashed version of your PIN. We never store your PIN in plain text.

Usage Data

We automatically collect certain technical information when you use Walley, including device type, browser or app version, IP address, and standard server logs. This helps us maintain security, diagnose issues, and improve reliability.

Communications

We process your email address to send transactional messages such as password reset links and, on the web app, bill and budget reminder emails that you have enabled.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Walley service
• Process receipt images through OCR and AI-assisted features, including field extraction, category suggestions, spending insights, and expense summaries
• Authenticate your account and protect against unauthorized access
• Send transactional emails you request or enable (e.g., password resets, reminders)
• Improve the reliability, security, and performance of our applications
• Respond to your support requests

We do not sell your personal or financial data to third parties for advertising or marketing purposes.

4. AI and Automated Processing

Walley uses automated systems, including optical character recognition (OCR) and artificial intelligence, to power features such as receipt processing, transaction categorization, spending insights, natural-language data entry, and expense summaries.

When you use these features, receipt images and relevant transaction data may be processed by our systems to deliver the results you request. This processing is performed solely to provide the Walley service to you.

We do not use your data to train public third-party AI models. You may always choose to enter transaction data manually instead of using AI-powered features.

5. How We Store and Protect Data

Your data is stored in secure databases. Passwords and PINs are protected using one-way hashing. Files such as receipts and profile images are stored using secure cloud storage providers.

We use JWT-based authentication for session management and offer optional PIN protection for additional security within the app.

While we implement reasonable technical and organizational measures to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

6. Third-Party Services

We use trusted third-party providers to help operate Walley, including:

• Cloud hosting and database infrastructure
• File and image storage services
• Email delivery for transactional messages
• Payment processors (such as the Apple App Store, Google Play Store, or Stripe) when subscription billing is enabled — payment data is handled according to each provider's privacy policy

These providers process data only as necessary to perform services on our behalf and are subject to contractual obligations regarding data protection.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Walley service. If you delete your account, we will delete or anonymize your personal and financial data within a reasonable period, except where we are required by law to retain certain information.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access and update your account information through Settings
• Export your transaction data via CSV or Excel reports
• Delete your account and associated data
• Opt out of non-essential communications where applicable

If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under applicable data protection laws (such as GDPR or CCPA), including the right to request access, correction, deletion, or portability of your personal data.

To exercise these rights, contact us at support@walley.app.

9. Children's Privacy

Walley is not intended for use by anyone under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

10. International Users

Your information may be processed and stored in countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using Walley, you consent to the transfer of your information subject to appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to make a data-related request, please contact us at support@walley.app.