Privacy Policy

Last updated: August 7, 2026

Versión en español

This Privacy Notice describes how Carlos Aarón Osorio López (doing business as MyWealthy) ("we", "us", or "our") collects, uses, and shares your personal information when you use our services, including when you visit mywealthy.mx, download and use the MyWealthy mobile application, or otherwise interact with us.

MyWealthy is a budget tracker app that lets users track accounts, transactions, budgets, and savings goals, and manually track investment holdings. It does not connect to real banks or brokers and does not execute financial transactions — it only organizes information the user provides. It includes AI-assisted features (voice capture and PDF bank statement import) and requires a subscription to use.

If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at contacto@mywealthy.mx.

This Notice is issued in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), in addition to other data protection laws that may apply based on your country or US state of residence.

Summary of key points

This summary gives you the key points from our Privacy Notice — you can find more detail on each one in the corresponding section, using the table of contents below.

• What personal information do we process? It depends on how you interact with us and the Services. Learn more about what information we collect.
• Do we process any sensitive personal information? Yes, your financial data, when necessary and permitted by applicable law. Learn more about sensitive information we process.
• Do we collect any information from third parties? No, we do not collect any information about you from third parties.
• How do we process your information? To provide, improve, and administer our Services, communicate with you, for security, and to comply with law. Learn more about how we process your information.
• In what situations and with which parties do we share personal information? We may share it in specific situations with specific third parties. Learn more about when and with whom we share your information.
• How do we keep your information safe? We have adequate technical and organizational processes in place, though no transmission over the internet can be guaranteed 100% secure. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located, applicable law may give you certain rights regarding your personal information. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way is by contacting us at contacto@mywealthy.mx. We will consider and act upon any request in accordance with applicable data protection laws.

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register, use the app, or otherwise contact us. This includes:

• Name
• Phone number
• Email address
• Password (stored with Argon2id hashing, never in plain text)
• Contact preferences (notifications)
• Authentication data (2FA, sessions)

Sensitive information. When necessary, we process the following category of sensitive information: financial data (accounts, balances, transactions, budgets, manually entered investment portfolio).

Payment data. All payment processing for MyWealthy subscriptions is handled directly by the Apple App Store or Google Play Store, using RevenueCat to manage subscription status. MyWealthy does not receive, process, or store your payment card information at any time. You may find their privacy notices here: RevenueCat, Apple, Google Play.

Social login data. You may register using your Google or Apple account. If you choose to do so, we will receive certain basic profile information from that provider (name, email), as described in "How do we handle your social logins?".

Application data

If you use our application, we may also collect the following information if you choose to provide us with access or permission:

• Mobile device access. We may request access to your camera (profile photo), microphone (voice transactions), and photo library/storage (attaching images to transactions). You can change these permissions in your device settings at any time.
• Device data. We automatically collect information such as your device model, operating system, application identifiers, connection type, IP address, and approximate location derived from your IP.

This information is primarily needed to maintain the security and operation of the application, for troubleshooting, and for our internal analytics and reporting purposes.

Information automatically collected

We automatically collect certain information when you use the Services, such as your IP address, device characteristics, language preferences, and technical information about how you interact with the app. This does not reveal your specific identity by itself, but is used to maintain the security of the Services and for internal analytics. It includes:

• Log and usage data. Diagnostic and performance information automatically recorded by our servers (timestamps, features used, error reports).
• Device data. IP address, application identifiers, approximate location, hardware model, and operating system.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

We process your personal information to:

• Create and manage your account — so you can register, log in, and keep your account in working order.
• Deliver and facilitate our services.
• Respond to your inquiries and offer support.
• Send you administrative information — changes to our terms, account notifications.
• Request feedback about your experience with the app.
• Protect our Services — fraud monitoring and prevention.
• Evaluate and improve our Services, products, and your experience; identify usage trends.
• Comply with our legal obligations.
• Manage your subscription — manage your MyWealthy Pro subscription status, including activation, renewal, and cancellation processed through the Apple App Store or Google Play Store.
• Enable user-to-user collaboration — shared budgets and savings goals between users you invite to collaborate, including invite links and member roles.

3. When and with whom do we share your personal information?

We may share your data with third-party vendors who need access to that information to perform services on our behalf. Most of these vendors act as processors under contract with us: they may only use your data for the purposes we authorize, they are contractually required to protect it with the same level of care we do, and they may not use it for their own purposes. Several of these vendors have infrastructure outside of Mexico (primarily in the United States), so your data may be processed and stored there. The vendors we share information with are:

• AI service providers: OpenAI
• Cloud computing services: Railway, Cloudflare
• Billing and subscriptions: RevenueCat, Apple App Store, Google Play Store
• Account registration and authentication: Google Sign-In, Sign in with Apple
• Web and mobile analytics: PostHog
• Website hosting: Vercel
• Transactional email delivery: Resend
• Push notification delivery: Expo (EAS)
• Error monitoring and crash reporting: Sentry (Functional Software, Inc.)
• Market data (stock, ETF, and exchange rate prices): Marketstack, Banxico, Frankfurter — these providers never receive any personal data from you, we only query public market symbols

Unlike the other vendors on this list, Google Sign-In, Sign in with Apple, Apple App Store, and Google Play Store may also use the information they process for their own purposes (for example, their own platform security or fraud prevention), not solely under our instructions. We recommend reviewing their own privacy policies to understand how they handle your information in that role.

About Sentry (error monitoring). We use Sentry (Functional Software, Inc.) to detect and diagnose technical errors in our Services. This may include your account identifier and technical data about your device or the error. You may find Sentry's privacy policy here: Sentry.

We may also share your information in connection with a merger, sale of company assets, financing, or acquisition of our business.

4. Do we offer artificial intelligence-based products?

Yes. As part of our Services, we offer features powered by artificial intelligence through third-party service providers, including OpenAI. Your information will be shared with and processed by this provider to enable these features, subject to this Privacy Notice.

Our AI features are designed for:

• Natural language processing (voice transactions)
• Document and text analysis (extracting data from PDF bank statements — including visual/image processing of statement pages when needed — automatic merchant categorization, and category icon suggestions)

How to opt out. You can opt out of AI-based processing by choosing manual alternatives within the app: entering transactions manually instead of using voice input, manually selecting a category icon instead of the AI-suggested one, and avoiding the bank statement import or Apple Pay Shortcut integration features.

We use OpenAI's standard API (not ChatGPT or any consumer product). Under OpenAI's policy, data sent through their API is not used to train their models and is retained for up to 30 days solely for security and abuse-prevention purposes.

5. How do we handle your social logins?

Our Services allow you to register and log in using your Google or Apple account. When you choose this option, we receive certain profile information from that provider — usually your name, email address, and profile picture. We only use that information for the purposes described in this Notice. We do not control, and are not responsible for, other uses of your information by Google or Apple — we recommend reviewing their own privacy notices.

6. How long do we keep your information?

We keep your personal information only for as long as you have an active account with us. When you delete your account from the app, your information is immediately removed from our active databases, unless a longer retention period is required by law (for example, tax or accounting requirements).

7. How do we keep your information safe?

We have implemented reasonable technical and organizational security measures, including Argon2id password hashing, two-factor authentication (2FA), rate limiting on login attempts, and session token rotation. However, no transmission over the internet or storage system can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security.

8. Do we collect information from minors?

We do not knowingly collect or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that we have collected information from a minor, we will deactivate the account and delete such data. If you become aware of this, contact us at contacto@mywealthy.mx.

9. What are your privacy rights?

You can review, change, or delete your account at any time directly within the app, by logging in and updating your information in account settings, or by deleting your account from the corresponding screen. Upon deletion, we deactivate and remove your information from our active databases immediately, except for data we must retain by law.

If we rely on your consent to process your information, you may withdraw it at any time by contacting us at contacto@mywealthy.mx.

If you reside in Mexico, these are the rights Mexican law (LFPDPPP) calls ARCO rights: Access, Rectification, Cancellation, and Opposition to the processing of your personal data.

10. Controls for Do-Not-Track features

No uniform industry standard for recognizing and implementing Do-Not-Track ("DNT") signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Notice.

11. Do United States residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to your personal information, correct inaccuracies, obtain a copy, or delete it. You may also have the right to withdraw your consent. These rights may be limited in some circumstances by applicable law.

Categories of personal information we collect

We only collect sensitive personal information as permitted by applicable law or with your consent. We do not process sensitive information for the purpose of inferring characteristics about you.

We retain each collected category for as long as you have an active account with us. We have not sold personal information to third parties in the past twelve months. We have disclosed categories A, B, D, F, H, and L to the providers listed in "When and with whom do we share your personal information?".

Your rights

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies
• Right to request deletion of your personal data
• Right to obtain a copy of your personal data
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising, the sale of personal data, or profiling with legal or similarly significant effects

To exercise these rights, contact us at contacto@mywealthy.mx. We will verify your identity before processing your request. Under certain US state laws, if we decline your request you may appeal by emailing the same address — we will inform you in writing of the reasons for our decision, and if your appeal is denied you may submit a complaint to your state attorney general.

California "Shine the Light" law

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about the categories of personal data we have disclosed to third parties for direct marketing purposes. If you are a California resident, submit your request to contacto@mywealthy.mx.

12. Colombia residents (Habeas Data)

If you reside in Colombia, you have rights equivalent to ARCO under Law 1581 of 2012 and its implementing regulations: to know, update, correct, and delete your personal information, and to revoke your authorization, by writing to contacto@mywealthy.mx.

13. Manual financial data & biometric authentication

MyWealthy does not connect to, access, or retrieve data directly from your bank accounts or brokerage accounts. All financial account, transaction, and portfolio information is entered manually by the user, and MyWealthy is not responsible for the accuracy of user-entered data. Biometric authentication (such as Face ID) is processed entirely on your device by the operating system; MyWealthy never receives, transmits, or stores your biometric data.

14. Do we make updates to this notice?

Yes, we may update this Privacy Notice from time to time. The updated version will be indicated by a new "last updated" date at the top of this Notice. If we make material changes, we will notify you by posting a prominent notice or sending you a direct notification.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at contacto@mywealthy.mx or contact us by post at:

16. How can you review, update, or delete your data?

Based on the applicable laws of your country or US state of residence, you may have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, email us at contacto@mywealthy.mx.

17. Accessibility statement

At MyWealthy we want our app and website to be accessible to everyone, including people who use assistive technology such as screen readers. It's an ongoing effort. If you run into an accessibility barrier while using MyWealthy, let us know at contacto@mywealthy.mx and we'll address it.