Privacy Policy

Effective 20 October 2026. This policy is kept in step with the copy shown inside the app; the two are meant to say the same thing.

1. Introduction

NetWorth+ helps you track accounts, transactions, budgets, goals and expenses shared with other people, so that all of it resolves into a single net worth figure. This policy explains exactly what data the app touches, where it goes, and how to get rid of it. It applies equally to the Android and iOS versions of NetWorth+; where the two platforms differ (for example, SMS reading is Android-only because Apple does not permit it), that is called out explicitly.

2. Information we collect

a. Account information

Your display name, your email address, and an anonymous user identifier issued by Firebase Authentication. We do not collect your phone number, your postal address or your date of birth.

Profile picture (optional). If you add one, we store a small copy, 192 by 192 pixels. If you sign in with Google, the picture on your Google account is copied the same way. It is shown only to people who share a group with you. You can change or remove it at any time in Profile.

b. Financial information you enter

Account names and the institutions you label them with, account types, currencies and balances; transactions with amounts, dates, categories, notes and payees; budgets, goals, loans and liabilities. This is stored in your account so it is available across your devices.

We do not collect bank login credentials, full card or account numbers, CVVs, PINs or government identifiers, because the app has no feature that uses them.

We do store the last four digits of a card or account in two cases: when you add a credit card, where those four digits identify which card a statement or alert belongs to, and when a bank alert you have allowed the app to read quotes them. Four digits on their own cannot be used to pay anyone.

c. Sharing with other people

Four features involve someone other than you, and each shares only what it needs.

Shared expenses. We store the email addresses and display names of the people you add, your group memberships, the shared entries between you, and the resulting balances and settlements. This is visible to the people involved in those entries; see Terms §6. Only the people you choose to add are stored. If you use your phone's contacts to find someone, see §6.

Group links. When you send someone a link to join a group, we store which group and which place it is for, who sent it, and when it was used and by which account. Until it is used, whoever opens the link can see the group's name, its members' names (never their email addresses) and the balance of that place. When they join, that place's entries move to the email address they signed in with.

Shared accounts. You can choose to share one of your accounts with another user. They then see that account's name, type, currency and current balance, and may include it in their own net worth figure. Only accounts you explicitly share are visible, and you can withdraw a share at any time.

Being found by others. Your email address, display name and an internal user identifier are stored in a lookup that any signed-in user can query, so that someone who knows your email address can add you as a contact. Nothing else is in that record.

Referrals. If a referral code is used, we store the link between the referring account and the referred account, together with the status of that referral.

d. SMS transaction data (Android only, optional, off by default)

See §4a, which describes this separately and in full.

e. Forwarded bank emails (optional, off by default)

If you set your own mailbox to forward bank alerts to the private address the app gives you, we receive those forwarded messages: the sender, the subject, the message text and the date it was sent. See §4b. We never sign in to your mailbox and never ask for your email password.

f. What you say to Numo (optional)

Numo is the assistant inside NetWorth+. What you type or speak to him is sent to OpenAI so that it can be understood, along with the names of your accounts and categories and the recent messages in that conversation. Your individual transactions are never sent. See §8 for the full account of what does and does not leave your phone.

g. Receipt images (optional)

See §5.

h. Device and diagnostic information

Crash reports (including device model, operating system version and the state of the app at the point of failure) via Firebase Crashlytics; usage events such as which screens are opened and which features are used, via Google Analytics for Firebase; a push notification token if you enable notifications; and an app integrity token issued by Firebase App Check, used to confirm that requests come from a genuine copy of the app.

From version 1.4.76, we also keep a scrambled identifier for your phone to prevent misuse of offers and keep accounts secure. It is never used for advertising or shared.

From version 1.5.9, the app includes Meta's measurement software, so we can tell whether our ads on Facebook and Instagram bring people to NetWorth+. What it sends is described in §8.

From version 1.4.76, the app also records your phone's time zone and country, whether notifications and SMS reading are allowed, and counts of what you have set up, such as how many accounts or friends you have. It never records amounts, names or what a transaction says.

3. How we use information

• To operate the Service: store your records, calculate balances, budgets, net worth and shared settlements, and sync them across your devices.
• To send the notifications you have turned on: bill and budget reminders, and alerts when someone shares an expense with you or approves one.
• To send tips and reminders: occasional messages that help you get set up and use the app, at most one a day. Turn them off any time in Settings, Notifications, Tips and reminders, or by turning notifications off.
• To support you: answer questions and troubleshoot problems you report.
• To keep the Service working and safe: diagnose crashes, understand which features are used, and detect abuse of the shared-expense features.

NetWorth+ shows no advertisements. From version 1.5.9 it includes Meta's measurement software, used only to measure our own ads (§8). Nothing you record in the app is used for advertising. We do not sell, rent or trade personal data, and we do not share it with data brokers.

4. Bank message handling: the detail

NetWorth+ can read bank alerts two ways, and both are optional and off until you turn them on. The app works fully without either. They differ in one respect that matters, so they are described separately: text messages are read entirely on your phone, while forwarded emails reach our server.

4a. Text messages (Android only)

Reading bank SMS is an optional, Android-only feature that is off until you turn it on. The app works fully without it. On iOS, this feature does not exist at all: Apple's platform does not permit any app to read SMS messages, so the NetWorth+ iOS app has no SMS permission, no SMS-reading code path, and no way to access your Messages. iOS users add every transaction by typing it in or by scanning a receipt.

What is requested

The READ_SMS permission. Android shows you its own permission dialog, and the app explains what the permission is for before that dialog appears. If you decline, every other feature continues to work.

Why

Bank and card alerts are the only automatic source of transaction data available to an app that does not connect to your bank. Reading them is what saves you from typing every transaction by hand.

What is read

The app reads your SMS inbox on your device and immediately discards everything that is not a plausible bank or business alert. Messages from personal phone numbers are excluded before any parsing happens. The first scan reaches back 30 days only; later scans cover the period since your last scan.

What leaves your device

Two small values are saved alongside each imported transaction, so that the same alert cannot be imported twice: a short non-reversible numeric hash of the message, and the sender ID the bank used (for example “HDFCBK”). Neither can be turned back into the message text.

What does leave your device is the transaction the app extracts: an amount, a date, a merchant or description, and which of your accounts it belongs to. Each extracted transaction is saved to your account as a pending entry in your Financial Inbox. It counts towards your balances only after you approve it, and is then stored exactly like a transaction you had typed yourself.

How to turn it off

Revoke SMS permission in Android Settings → Apps → NetWorth+ → Permissions at any time, or turn off automatic scanning in the app's Settings. Nothing already saved is affected; the app simply stops reading messages.

4b. Forwarded bank emails (Android and iOS)

How it works. In the app you create a private forwarding address. You then set up a filter in your own email account that forwards your bank alerts to it. NetWorth+ never signs in to your mailbox, never asks for your email password, and has no access to any message you do not forward. You can link more than one mailbox, and each gets its own address.

What we receive. Only the messages your filter forwards. For each one: the sender, the subject, the message text and the date it was sent.

What we do with it. Our server reads the message once, in memory, to pull out the amount, the merchant, the card or account digits quoted, and whether money came in or went out. It creates one pending entry in your Financial Inbox for you to approve. Nothing reaches your balances until you approve it.

How to turn it off. Delete the forwarding address in the app, or remove the forwarding rule in your own mailbox. Entries already approved are unaffected.

5. Camera, photos and receipt scanning

If you scan a receipt, the app opens your camera and takes a photograph; the operating system asks for camera permission the first time you do this.

If you attach an existing image instead, the app opens the operating system's own photo picker (Android's Photo Picker, or Apple's PHPickerViewController on iOS) and receives only the single image you choose. NetWorth+ holds no permission to browse your photo library, and never asks for one; it cannot see any image you have not handed to it, on either platform.

From version 1.4.76 of the app, there are two ways a receipt is read, and both send the photo to OpenAI.

Bill scanning (Pro): the photo goes through our server to OpenAI to read the amount, shop, date and category. If OpenAI cannot be reached, or today's limit is reached, the photo is read on your phone instead, by Google ML Kit Text Recognition, and is not sent anywhere for that.

Attach a photo, from Numo. The photo is sent to our server and passed to OpenAI, which reads it and returns an amount, a date, a merchant and a category.

Either way, scanning keeps no copy of the photo on our server; OpenAI holds it briefly for abuse monitoring and does not use it to train its models. With Pro, we store a compressed copy of each receipt photo in your private cloud storage so your other phones can show it; it is deleted when you delete that receipt or your account. This cannot be switched off while you have Pro. On the free plan, a photo you attach without scanning it never leaves your phone.

In versions before 1.4.76, Scan receipt reads the photo on your phone with Google ML Kit Text Recognition, and the photo is not sent to Google, to us, or to anyone else for recognition. Attach a photo, from Numo, works as described above in every version.

The receipt image itself is saved in the app's private storage on your phone. With Pro, the app also uploads a smaller copy, 2,000 pixels on its longest side, to your account, so the receipt opens on your other phones. Only you can open it. This is part of Pro and is always on. If your Pro subscription ends, copies already uploaded stay until you delete them or your account; new receipts stay on your phone.

6. Other device access

• Notifications: used only for reminders, tips and shared-expense alerts you have enabled, delivered via Firebase Cloud Messaging (Android) or, on iOS, via Apple Push Notification service (APNs) through Firebase Cloud Messaging. Apple asks you to approve notifications the first time the app requests them; you can disable them at any time in Settings.
• Contacts (optional): when adding people, you can tap Use my contacts. The app then asks permission to read your phone's contacts. It reads only names and email addresses, shows them on your phone so you can pick someone, and never uploads your contact list. Only a person you choose to add is saved, with the name and email you confirm. If you say no, you can still add people by typing their email, and you can turn access off at any time in your phone's settings.
• File import: if you import a CSV or spreadsheet, the app reads only the single file you pick, and only to create transactions from it.
• Sharing and export: when you export or share data, it goes wherever you send it, using the operating system's own share sheet (Android's share sheet, or the iOS share sheet). We are not involved in and do not retain a copy of that transfer.

7. Tracking, advertising and Apple's App Tracking Transparency

NetWorth+ shows no advertisements. Besides the Google/Firebase services listed in §8, the app includes one measurement tool, from version 1.5.9: Meta's, so we can tell whether our ads on Facebook and Instagram bring people to NetWorth+. What it sends, and where it is switched off, is in §8. This section describes the NetWorth+ app and this website; the separate partner programme website is described in §15.

Under Apple's definition, “tracking” means linking data about you with data held by other companies for advertising purposes, or sharing your data with a data broker. The app never shows Apple's App Tracking Transparency (ATT) permission prompt, so on an iPhone it never reads Apple's advertising identifier (IDFA), and Meta's software receives no advertising identifier there. On Android, Meta's software sends your phone's advertising ID, which you can reset or delete in your phone's settings. We do not share your data with data brokers, and we do not sell it.

The device and diagnostic information described in §2h (crash reports, usage analytics, and app integrity checks) is used solely to operate and secure the Service, and is not used for advertising or shared with anyone for their own advertising purposes.

8. Third-party services we use

What OpenAI receives, exactly

Numo is powered by OpenAI. What it sends depends on what you send him.

• Every message: the sentence you type or speak, your device's date, the names of your accounts and categories, the draft Numo is building with you, the recent messages in that conversation, and, with Memory on, Numo's notes about you. The names are needed so that “from HDFC” and “put it in Groceries” work at all.
• When you ask Numo about your money: a summary of figures the app has already worked out: your account balances, your net worth, your income and spending for this month and last month, your spending by category for those two months, and how your budgets are doing. In versions of the app where Numo can answer about any period, the summary also holds your income and spending totals for each earlier month, up to two years back, and for all time; and when you ask for a total it does not hold, for example what you spent in one category, from one account or at one shop over the dates you name, your phone works that one total out and sends it: the total, the number of payments behind it and the dates it covers, never the payments themselves. From version 1.5.10, the summary also lists every account rather than the first twenty; what each friend owes you, or you owe them, and where you stand in each group, with their names as the app shows them (never an email address); and how each of your app settings is set, so Numo can say what a setting does and where to change it. This is sent only when your message reads as a question, or as a short reply to one, rather than as a spend you are recording; typing “84 kfc” sends none of it.
• When you record a spend, in versions of the app where Numo can add a short comment above the payment: how many of your earlier payments carry the wording you just typed, as two numbers, one for the last seven days and one for this month. No amounts, dates or accounts are sent with them, and nothing is sent when no earlier payment matches.
• Memory, in versions of the app that show Numo learns about you in Numo's settings: unless you turn that setting off, Numo keeps up to 20 short notes about you from your conversations, such as when you are paid or what you are saving for. They are stored with your account on our servers and sent to OpenAI with each message to Numo. Numo does not keep passwords, PINs, one-time codes, card or account numbers, your name, or details about your health, religion, politics or sexuality, and our server refuses notes that look like a card number or a password. Turning the setting off deletes every note, and so does deleting your account. To see them, ask Numo what it knows about you.
• If you attach one, or, from version 1.4.76, scan one: the photograph.
• Category suggestions (Pro, from version 1.4.76): when you tap Fill these for me, or type a description the app can't match from your history, the description, whether it's income or expense, and your category names go through our server to OpenAI. Amounts, dates, accounts and your name are not sent.
• Logos (from version 1.4.76): when a transaction's description or an account's name is not on the app's built-in list of shops and banks, the app sends that wording (in lower case, without punctuation, at most 120 characters), its category's name, and your country to our server, which asks OpenAI which company it names, if any. Nothing else about the transaction is sent: no amount, date, account, name or email address. Our server keeps the answer, the company's name and web address, filed under a one-way fingerprint of the wording rather than the wording itself, so the same wording is not asked about again. When you remove a logo, our server counts that once per person, and a logo that three people remove stops appearing for everyone.

What Logo.dev receives, exactly

From version 1.4.76, Logo.dev supplies the logos shown beside your transactions and accounts. For a shop or bank on the app's built-in list, the app asks Logo.dev for its logo by web address, for example starbucks.com. For any other company, our server first searches Logo.dev for the company's name, for example “Razer”, found as described under OpenAI above, to learn its web address; the app then asks for the logo by that address. The picture is kept on your phone, so each logo is asked for once. Logo.dev receives the web address from your phone, with your phone's IP address as with any website, and the company's name from our server. It never receives the transaction itself: no amount, date, description, account, name or email address. When you search for a logo, the name you type goes through our server to Logo.dev. To hide a logo, tap it and choose Remove logo. To stop logos and these lookups entirely, turn off Shop logos in Settings.

What Meta receives, exactly

Meta, which is NOT operated by Google: from version 1.5.9, measures our ads on Facebook and Instagram. Meta's software in the app reports when the app is installed and opened, and when you buy Pro through the App Store or Google Play (the plan, its price and currency). With each report it sends device details such as your phone's model, operating system, language and time zone, a random identifier it creates on your phone, and your IP address, as with any website. On Android it also sends your phone's advertising ID, which you can reset or delete in your phone's settings. The app never asks iPhone users for permission to track, so on an iPhone Meta does not receive the advertising identifier. On phones set to a country in Europe (the EU, the rest of the European Economic Area, the UK and Switzerland), the app switches Meta's software off the first time it opens; that first opening is still reported. Meta never receives your name, email address, NetWorth+ user id, or anything you record in the app.

Exchange rates come from a public rates service (Frankfurter). Rates are fetched by our server and mirrored into the app for everyone; no user data is sent to the rates provider, and the provider cannot tell that you exist.

Your use of these underlying services is also governed by Google's privacy policy. On iOS, push delivery additionally passes through Apple's Push Notification service, governed by Apple's privacy policy; Apple only relays an opaque device token and does not receive the content of your data.

8a. This website

Everything above describes the NetWorth+ app. This website is separate, and it does one thing you should know about: it uses Google Analytics 4 to count visits.

That means when you browse getnetworthplus.com or networthplus.in, Google receives which pages you looked at, roughly where you are (derived from your IP address, which Google Analytics 4 does not store), what browser and device you used, and which site sent you here. It is set up with the default configuration: no advertising features, no remarketing audiences, and no Google Signals. We use it to see which pages people find useful, and nothing else.

Google Analytics sets cookies in your browser to tell one visit from another. If you would rather not be counted, any of these work: use your browser's “do not track” or tracking-protection setting, block cookies for this site, use a private window, or install Google's official opt-out add-on. Nothing on this site is gated behind analytics, so blocking it costs you nothing.

This is the only tracking on this website. There are no advertising tags, no advertising SDKs, no social media pixels, no heatmap or session-recording tools, and nothing is sold or shared with data brokers. The partner programme website is a separate site and is described in §15. The free calculators under Tools remain entirely local to your browser; the figures you type into them are not sent anywhere, including to Google Analytics.

9. Data sharing and disclosure

We share your information only in these situations:

• With the people you share expenses with: as described in §2c and Terms §6.
• With the infrastructure providers in §8: acting on our instructions, to run the Service.
• With the payment providers in §8, when you buy Pro: only what that payment needs, as listed there. We never see or store your card details.
• With Meta, from version 1.5.9: the reports listed in §8, to measure our own ads. Not from phones set to a country in Europe, after the first time the app opens.
• With legal authorities: where required by law or in response to a valid legal request.

We do not sell, rent or trade personal data under any circumstances. Apart from Meta's measurement in §8, we do not share app users' data with anyone for advertising; the limited sharing that applies to the partner programme website is described in §15.

10. Data security

Data in transit is encrypted with TLS. Data at rest is encrypted by Google Cloud. Access to your records is enforced by server-side Firestore security rules, so a request that is not yours is rejected by the server rather than merely hidden by the app; those rules are covered by an automated test suite that runs on every change. Firebase App Check rejects requests that do not come from a genuine build of the app.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your data we will notify you as required by applicable law.

11. Data storage and international transfers

Your data is stored on Google Cloud infrastructure and may be processed in countries other than your own. Where required, transfers rely on the safeguards Google provides for its cloud services, including standard contractual clauses.

12. Data retention

We keep your data while your account is open. When you delete your account it is removed as described in §13. Crash and aggregate usage data is retained by Google Firebase according to that platform's retention settings and is not linked to your financial records.

If you use the app without creating an account, what you add is stored under a temporary account that only that phone can open. A temporary account that is not opened for 6 months is deleted with all its data. Creating an account keeps everything and ends this.

Payment records are kept by the payment providers in §8 as the law requires them to, under their own privacy policies. Deleting your NetWorth+ account does not delete those records, and does not cancel a subscription: cancel it first, under Manage billing in the app or in your App Store or Google Play account.

13. Your rights, and how to delete your account and data

To delete your account and all associated data from inside the app

Open NetWorth+ → Profile → Delete Account, and confirm.

Deletion is scheduled with a 7-day grace period, during which you can cancel it by signing back in. If you do not cancel, a scheduled server process permanently deletes your account and its data at the end of that period.

What is deleted

Your profile, your profile picture and the receipt copies stored in your account, accounts, transactions, budgets, goals, loans, categories, contacts, groups and shared balances, and your authentication record. Receipt images held in the app's private storage are removed when you uninstall the app.

What may be retained

Entries that another person also participates in may remain visible in their copy of a shared expense, because that record is theirs as well as yours. Anonymous, aggregated crash and usage statistics that cannot be traced back to you are not deleted, as they are no longer personal data. Some records that other people or our safeguards rely on are kept: which accounts referred each other, removal votes on shop logos, and records that prevent misuse of offers and abuse of the Service. These hold an internal identifier, or a scrambled phone identifier no longer linked to your account, and never your name, email address or financial data. We may retain records where law requires it.

To request deletion without using the app

If you cannot sign in, or you have already uninstalled the app, submit the account deletion request form, or email support@networthplus.in from the address on your account. Either route is actioned within 30 days.

You also have the right to

Access the personal data we hold about you, correct it, obtain a copy in a portable form, restrict or object to certain processing, and withdraw consent for anything optional (SMS reading, camera, notifications) at any time. Depending on where you live these rights arise under the GDPR, the UK GDPR, or India's Digital Personal Data Protection Act. Write to support@networthplus.in; you also have the right to complain to your local data protection authority.

14. Children

NetWorth+ is intended for adults and is not directed at children. You must be 18 or older to use it. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we will delete it promptly.

15. The partner programme website

The NetWorth+ Partner Programme is a separate business programme for creators, at a separate address. Everything above describes the NetWorth+ app and this website; the partner site works differently, and this section describes it.

Who this applies to

People who visit or sign up to the partner programme. Nothing in this section changes how the app works, or how the data of the app's users is handled.

What we collect

The email address you sign in with, the details you enter in the partner form, and standard technical information: your IP address, browser and device type, the pages you view, and how you arrived at the site.

Measurement and advertising

We promote the partner programme through online advertising. The partner site uses cookies and similar technologies, together with server-side measurement, so that we can see which campaigns bring people to the programme and which of them lead to a completed signup. For this we share a limited set of information with our advertising and measurement providers: technical data of the kind described above, and a securely hashed (irreversible) form of your email address, used only to match a signup to a campaign. We do not share your payout details, your earnings, or any information about the app's users for this purpose.

What has not changed

The app shows no advertising. The financial data of app users is never used for advertising, never shared for anyone else's advertising, and never sold.

Your choices

You can block cookies for the partner site in your browser, or use its tracking-protection setting; your signup and your earnings are unaffected. To have your partner account and the information above deleted, email support@networthplus.in.

16. Changes to this policy

We may update this policy to reflect changes in the app or in the law. Significant updates will be communicated in the app.

Where this policy says “from version” followed by a number, that part describes that version of the app and every later one. If you use an earlier version, the app works as this policy describes for earlier versions, and nothing marked “from version” happens until you update.

17. Contact

Milan Suresh, NWP Technologies Private Limited: support@networthplus.in