Back to Home

Privacy Policy

Last updated: June 2026

1. Introduction

At MapMyWealth, we believe your financial data is exactly that—yours. This Privacy Policy explains how we collect, use, and protect your information when you use our application.

2. Data Collection

We collect information you provide directly to us when you create an account, import your portfolio, or interact with our services. This includes account credentials and the financial data you choose to track.

3. Secure Cloud Storage

Your portfolio data is securely transmitted and stored using industry-standard encryption on our cloud servers. Your data is encrypted and stored securely — never sold, never shared.

4. How We Use Your Data

We use your data solely to provide and improve the MapMyWealth service. We do not sell your personal or financial data to third parties, advertisers, or data brokers.

5. Third-Party Sub-Processors and AI Data Sharing

To provide the AI-powered portfolio insights feature, MapMyWealth transmits aggregated, anonymized portfolio summaries to our third-party Large Language Model (LLM) sub-processors—specifically Google (Gemini) and Groq.

What IS shared: Only high-level mathematical summaries are transmitted. This includes the total portfolio value, total invested amount, total gain/loss, base currency, and an aggregated percentage breakdown by asset class and region.

What is NEVER shared: We do NOT transmit your personally identifiable information (PII), raw individual holdings (e.g., specific stock tickers or names), account numbers, PDF statements, or user identifiers to these AI sub-processors.

6. Security

We implement robust row-level security (RLS) on our cloud database infrastructure. This ensures that your portfolio data is strictly isolated and can only be accessed by your authenticated user session.

7. GDPR & EU Data Privacy Rights

Under the EU General Data Protection Regulation (GDPR), users residing in the European Economic Area (EEA) hold specific rights. Because MapMyWealth is operated out of Ireland, we support and fully comply with:

  • Right of Access & Portability: You can download a complete structured JSON archive of your asset records directly from the Profile page at any time.
  • Right to Erasure (Right to be Forgotten): You can permanently wipe your account and all associated backups from our Supabase servers using the account delete function in your Profile.
  • Right to Restrict Processing: You can request to restrict processing of your data.

8. International Data Protections (US, India, UAE)

Because MapMyWealth operates globally, we respect and integrate requirements from major regional data standards:

  • United States (CCPA/CPRA): We do not sell or trade your financial or personal information. California residents hold the right to opt-out of data profiling, which is fully supported by our secure architecture.
  • India (DPDP Act 2023): All portfolio data sync processing relies on explicit, withdrawable user consent. In-memory decryption and parsing of Indian CAS PDF statements do not store files or passwords on our servers.
  • United Arab Emirates (PDPL): Cross-border data sync is fully encrypted in transit and at rest. Your asset declarations and properties are secured using row-level policies.

9. Contact Information

If you have any questions about this Privacy Policy, your data rights, or wish to make a data subject access request, please contact us at trymapmywealthio@gmail.com.