Privacy Policy

Last updated: July 2, 2026

Effective date: July 2, 2026

Publisher: FiWorth (formerly OMDApp) (“we”, “us”, “our”)

Products covered: the FiWorth mobile application for iOS and Android, and the website https://fiworth.app/ (collectively, the “Service”).

This Privacy Policy explains what personal data we collect when you use FiWorth or visit our website, how we use it, who we share it with, and the rights you have over it. FiWorth is a personal net-worth tracking application.

We do not provide financial, investment, legal, or tax advice. Nothing in the app should be taken as a recommendation to buy, sell, or hold any security or asset.

1. Data you create inside the app (your financial data)

When you use FiWorth, you can enter information about your assets (for example cash, savings, investments, property, vehicles, crypto, other), liabilities (such as mortgage, credit, student loans, other), goals, and milestones. This information is your personal content.

What we do with it: we store it so that you can view it, edit it, and see your progress over time.
Where it is stored: on your device only, in a local SQLite database and in device preferences. Data is associated with your account identifier from Firebase Authentication. If you sign in on another device with the same account, that device starts with an empty local database—we do not operate a cloud backup or sync service for your financial entries.
Sharing: we do not sell, rent, or share your financial data with third parties for their marketing. Because this content does not leave your device (except if you explicitly export it), we do not maintain a server-side copy that we could disclose.
Bank credentials: FiWorth does not ask for, collect, or store your bank login credentials. We do not connect to your bank accounts. If we ever add bank aggregation (for example via Plaid or similar providers), we will update this Policy and notify registered users at least 30 days before it takes effect.

2. Account data (Firebase Authentication)

Anonymous use by default. On first launch, FiWorth creates an anonymous Firebase Authentication session automatically so you can use the app without signing up. This assigns a stable Firebase user ID that scopes your locally stored financial data and links your subscription profile in Adapty. You do not need to provide an email or password to use FiWorth.

Optional permanent account. You may sign in or create a permanent account at any time from Profile → Sign in / Create account (email/password, Google, or Apple). If you link a permanent credential while still anonymous, we use Firebase account linking so your user ID, local data, and subscription stay on the same profile.

We use Firebase Authentication (Google LLC) to manage sessions and sign-in. Depending on how you sign in (if you do), the following data may be processed:

Anonymous session — a Firebase UID only; no email or name is collected until you optionally sign in.
Email and password sign-in — your email address and a password that is hashed and stored by Firebase; we do not receive your password in clear text.
Sign in with Google or Apple — Google may share your Google account email and basic profile information (such as display name). Apple may share your Apple ID email (which may be relayed) and, if you choose, your name.

Your Firebase user ID is used in the app as the key under which your locally stored financial data is scoped (see Section 1).

We use this information to authenticate you, respond to support requests, send transactional messages (for example password reset), and operate the Service. Where GDPR or UK GDPR applies, legal bases include performance of a contract (providing the Service) and, where required, consent.

3. Technical data

When you use FiWorth, the following technical data may be processed:

Authentication requests — when you sign in, Firebase Authentication receives your credentials or federated token, your IP address at the time of the request, and basic technical signals needed to operate sign-in securely.
Device information — standard device and app information (such as device model, OS version, app version, language, time zone) may be attached to analytics events (Section 4).
Crash and diagnostic data — we use Firebase Crashlytics (Google LLC) to collect crash reports and diagnostic data from production builds. Crashlytics assigns a pseudonymous installation identifier to each device; it does not receive your email, name, or Firebase user ID. Crash reports (stack traces, device model, OS version, app version) are used solely to diagnose and fix application errors.

We do not use this information to profile you for unrelated advertising.

4. Analytics (mobile app)

We use Amplitude (Amplitude, Inc.) to understand navigation and feature usage. Amplitude receives pseudonymised event records. Examples of events include screen navigation and actions related to “re-evaluate” flows. These events do not include dollar amounts, asset names, account labels, currencies, or other content of your financial entries.

Provider information: amplitude.com/privacy. Amplitude may assign a device-scoped or project-scoped identifier to events.

Depending on your region, analytics may rely on consent where required by law, or on legitimate interests in improving the product where permitted. You may contact us if you have questions about analytics or wish to discuss opt-out options available in your jurisdiction.

5. Website visitors (fiworth.app)

When you visit our website, our hosting provider and embedded technologies may process:

Cookies and similar technologies — used for basic site functionality, preferences, and aggregated analytics.
Google Analytics (GA4) — helps us understand aggregated traffic and usage of our web pages.
Microsoft Clarity — may collect diagnostic and usage data to help us understand how the site is used (for example interaction patterns in aggregated form).

You can control many cookies through your browser settings. Third-party tools are subject to their own privacy notices.

6. Subscriptions (Adapty; Apple App Store; Google Play)

Paid features may be offered via in-app subscriptions. We use Adapty (Adapty Tech, Inc.) to manage subscription status and connect purchase receipts to your app account identifier. When you voluntarily sign in or link an account, we may send your email address to Adapty to help match or manage your subscription. Payment processing is handled by Apple or Google; we do not receive your full payment card number.

We process personal data on the following bases, as applicable:

Performance of a contract — To provide the Service you requested.
Consent — Where required for non-essential cookies/analytics or marketing.
Legitimate interests — For example security, preventing abuse, improving the product (balanced against your rights).
Legal obligations — Where we must comply with applicable law.

8. How long we keep data

Financial entries on your device — remain until you delete them in the app or uninstall the app.
Account and authentication data held by Firebase — retained while your account exists and for a short period afterward as needed for security and legal compliance; deletion timelines depend on the provider’s infrastructure and our deletion procedures.
Analytics — retained according to each provider’s retention settings and our configuration.

9. International transfers

Because your financial entries are stored on your device, they are not uploaded to our servers as part of normal operation.

Service providers we use (such as Firebase Authentication, Amplitude, Adapty, Google, Apple, and analytics providers for the website) may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and provider certifications (for example EU-U.S. Data Privacy Framework where applicable). See each provider’s privacy documentation for details.

10. Your rights

Depending on where you live, you may have rights such as access, correction, deletion, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

To exercise these rights, email support@fiworth.app. We typically respond within 30 days.

Account deletion: if you wish to delete your account and associated authentication data processed by us or our providers, email us from the address associated with your account. We will verify your request and complete deletion within a reasonable period (typically within 30 days), subject to applicable law and minimal retention needed for security or legal obligations. Removing the app from your device does not by itself delete your account with Firebase Authentication.

11. Children

FiWorth is not directed at children under 13 (or under 16 where applicable in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

12. Security

We implement reasonable technical and organisational measures appropriate to the nature of the Service. Financial data stored locally benefits from your operating system’s protections (for example device encryption). Network connections from the app use encryption in transit (HTTPS/TLS). No method of storage or transmission is 100% secure.

13. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have rights to know, delete, and correct personal information, and to opt out of certain sharing (we do not sell personal information in the conventional “sale” sense). You may designate an authorized agent where permitted by law. To submit a request, email support@fiworth.app.

14. Do Not Track

Some browsers send “Do Not Track” signals. Industry practices vary; we configure our Service to minimise unnecessary cross-site tracking. Website analytics may still operate depending on your cookie choices and browser settings.

15. Third-party services (summary)

Apple (App Store, StoreKit, Sign in with Apple) — Distribution on iOS, subscriptions, sign-in.
Google (Google Play, Play Billing, Firebase Authentication, Sign in with Google) — Distribution on Android, subscriptions, sign-in, and crash reporting (Firebase Crashlytics).
Amplitude — Product analytics (app).
Adapty — Subscription management; may receive your email if you voluntarily sign in or link an account.
Google Analytics / Microsoft Clarity — Website analytics and diagnostics.

Each provider processes data under its own privacy policy and terms.

16. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date and, for material changes, provide notice as required by law (for example by email or an in-app message).

17. Contact

Email: support@fiworth.app

Postal address: available upon request for privacy or regulatory inquiries — email support@fiworth.app.