CustomWorth is built on a simple principle: your financial data belongs to you and only you. Your balances, your account names and your net worth never leave your device, and we have no way to see them. The app does send anonymous, aggregate information about which features get used and about crashes, so we can fix what is broken. That telemetry never contains a single figure from your accounts.
Two kinds of data
This distinction is the whole policy. One category cannot reach us at all. The other is deliberately anonymous and deliberately stripped of anything that could identify you or your finances.
1. Your financial data never leaves your device
Everything you enter into CustomWorth is stored locally on your device in a local database, inside the app's private sandbox. That includes:
- Account names, balances, categories and types
- Every net worth snapshot and its history
- Goals, notes, documents and time capsules
- Your settings and preferences
We have no server that receives any of it, no account for you to sign into, and no sync. We cannot read it, back it up, or recover it for you. You can export everything as a standard JSON file at any time and share it wherever you choose through your device's share sheet. If you delete the app, your data is permanently removed from the device.
One Android caveat, stated plainly: on Android, the operating system's own backup service is left at its platform default, so your app data may be included in the device backup held in your personal Google account. That is a copy between you and Google under your own account, and it never reaches us. If you would rather it did not happen, you can turn backup off in your Android system settings.
2. Anonymous telemetry: what we do collect
CustomWorth uses PostHog, a product-analytics service, with data processed on PostHog's US cloud. It sends:
- Product-usage events such as an account being saved, a snapshot being taken, the charts screen being opened, or an export completing. These carry categories, types, counts and yes/no flags.
- Screen views, recorded by name: Dashboard, Balances, Charts, Learn, Settings and so on.
- App lifecycle events, meaning the app being opened and backgrounded.
- Crash and error reports, meaning stack traces plus device model, OS version and app version when something goes wrong.
- A random anonymous identifier. It is not your name, email, phone number or advertising ID, and there is no account to attach it to.
What telemetry never contains, by design: no balance, no amount, no net worth figure, no account name, no goal value and no text you typed. Not bucketed, not rounded, not at all. We also never call any "identify" function and never build a profile of you, so the events are not assembled into a per-person record.
There is no analytics opt-out in this version of the app. We would rather say so than imply a switch you cannot find. The telemetry is limited to the categories above, is never linked to your identity, and is never used to track you across other companies' apps or websites.
Third-party services
Exactly two, both acting as our service providers, and neither one receiving your financial data:
- PostHog receives the anonymous telemetry described above.
- RevenueCat is initialized at launch and reports an anonymous app-user ID plus basic device information, so we can count installs. CustomWorth is currently free to use in full, so no purchase is processed and no payment information exists. We never ask RevenueCat to collect device or advertising identifiers.
There is no Plaid and no bank connection of any kind, no Firebase, no Google Analytics, no Facebook SDK, no advertising network, no attribution service and no social media tracker. We do not sell your data or share it with data brokers, and there is no mechanism in the app to do so.
Permissions
- Notifications for the reminders you choose to enable. Reminder text is composed on your device and is never transmitted.
- Restart notifications (Android) so pending reminders survive a reboot. Android clears scheduled alarms on boot.
- Internet used only for the telemetry described above.
CustomWorth does not request camera, microphone, photo library, contacts, location or any other sensor.
What we declare to the app stores
These categories match the telemetry described above:
- App interactions, meaning product-usage events and screen views
- Crash logs
- Diagnostics, meaning device model, OS version and app version
- Device or other IDs, meaning a random anonymous ID and never an advertising ID
For every category: collected yes, shared no, not linked to your identity, and not used to track you. Your balances, snapshots and net worth figures are not collected.
This website
The CustomWorth website (customworth.com) does not use cookies, analytics, or tracking scripts. It is a static site hosted on Vercel with no user data collection. This is separate from the app.
Security and your rights
Your data sits inside your device's app sandbox, protected by the device's own encryption and your passcode or biometric lock. Because we hold no copy of your finances on any server, there is no database of your net worth for anyone to breach. Telemetry is encrypted in transit over HTTPS.
- Access: all your data is visible in the app at all times.
- Portability: export everything as JSON, any time, free.
- Erasure: delete data in the app, or delete the app itself.
Because telemetry is anonymous and there are no accounts, we cannot locate an individual person's events in order to export or delete them. There is no identifier that maps back to you.
GDPR and CCPA
GDPR: your financial data is never processed by us, because it does not leave your device. The anonymous telemetry is processed on the basis of legitimate interest, namely fixing crashes and improving the app, and is minimized so that it carries no personal data and no financial values. Processing takes place in the United States via our processors PostHog and RevenueCat.
CCPA: we do not sell or share personal information as defined by the CCPA. The telemetry described above is anonymous and is used only to improve and debug the app. This policy serves as our CCPA disclosure.
Children's Privacy
CustomWorth is not directed at children under 13, and we do not knowingly collect personal information from them. We collect no personal information from any user.
Changes to This Policy
If we change this privacy policy, we will update this page with the new date and details. If a future version changes what is collected, for example by adding an analytics opt-out or by introducing a paid tier, that is a material change and this page changes in the same pass.
Contact
If you have questions about this privacy policy, contact us at info@customapps.us.