Privacy Policy

At Guapital, we understand that you're trusting us with your most sensitive financial information. This Privacy Policy explains how we collect, use, protect, and share your data when you use our net worth tracking platform and related services (the "Services"). We believe in transparency and your right to privacy—we will never sell your personal data to third parties.

1. Information We Collect

Financial Account Information

When you connect your financial accounts through Plaid, we collect account balances, transaction history, and account details (account type, institution name, account numbers). This data is necessary to calculate and display your net worth.

Cryptocurrency Wallet Data

If you add cryptocurrency wallets, we collect your wallet addresses and use third-party services (Alchemy) to retrieve token balances and transaction history. We never store or have access to your private keys.

Manual Asset Information

You may manually enter information about assets like real estate, vehicles, or other valuables. We store this information along with your valuation estimates and edit history.

Account and Profile Data

We collect your email address, password (encrypted), age bracket (for percentile rankings), and account preferences. We may also collect device information, IP addresses, and usage analytics to improve our service.

2. How We Use Your Information

We use your information to:

• Calculate and display your net worth across all asset types
• Sync and update account balances and transaction data
• Provide trend analysis and financial insights
• Display your anonymized percentile ranking compared to other users (if you opt in)
• Process subscription payments and manage your account
• Send you service updates, security alerts, and support communications
• Improve our platform through usage analytics and bug detection
• Prevent fraud and maintain platform security

3. Third-Party Service Providers

We work with trusted third-party services to provide our platform:

• Plaid: Connects to your bank and investment accounts securely
• Alchemy: Retrieves cryptocurrency wallet balances and holdings
• Supabase: Hosts our database and authentication infrastructure
• Stripe: Processes subscription payments securely
• AWS: Provides cloud hosting infrastructure

These providers are bound by strict data protection agreements and only access the minimum data necessary to perform their services. We never share your data with advertisers or data brokers.

4. Data Security

We implement industry-standard security measures including encryption at rest and in transit, secure authentication (OAuth 2.0), regular security audits, and automated backups. However, no system is 100% secure. We encourage you to use strong passwords and enable two-factor authentication when available.

5. Data Retention and Deletion

We retain your financial data for as long as you maintain an active account. If you delete your account, we will permanently delete your personal data within 30 days, except where we're required by law to retain certain records (e.g., transaction records for tax purposes). You can request deletion of your account at any time through your account settings or by contacting support.

6. Your Privacy Rights

Depending on your location, you have the right to:

• Access your personal data and download a copy
• Correct inaccurate information
• Delete your account and associated data
• Opt out of percentile rankings and community features
• Withdraw consent for data processing (where consent is the legal basis)
• Object to certain data processing activities

To exercise these rights, contact us at support@guapital.com. We'll respond within 30 days.

7. Sharing and Disclosure

We do NOT sell, rent, or trade your personal information. We may disclose your data only in these limited circumstances:

• With your explicit consent
• To comply with legal obligations (court orders, subpoenas)
• To protect our rights, property, or safety, or that of our users
• In connection with a merger, acquisition, or sale of assets (users will be notified)

8. Anonymized Data and Analytics

We may use anonymized, aggregated data (that cannot identify you personally) for research, analytics, and to improve the platform. For details on our percentile ranking feature, see Section 8A below.

8A. Percentile Ranking Feature

Guapital offers an optional percentile ranking feature that allows you to see how your net worth compares to other users in your age group. This feature is entirely opt-in and requires your explicit consent.

What Data We Collect

If you opt in to percentile rankings, we collect:

• Age bracket: Your self-reported age group (e.g., "26-28 years old") - we do NOT collect your exact birthdate
• Net worth snapshots: Daily anonymized snapshots of your total net worth (assets minus liabilities)
• Consent timestamp: The date and time you opted in, for compliance and audit purposes

How Rankings Are Calculated

Your percentile rank is calculated by comparing your net worth to other Guapital users in your age bracket. To ensure statistical accuracy, especially for newer age groups with fewer users, we blend our real user data with data from the Federal Reserve's Survey of Consumer Finances (SCF 2022), which includes 6,000+ households.

As each age bracket reaches 1,000+ real Guapital users, we automatically transition to using 100% real user data for that bracket. This hybrid approach ensures you always get meaningful, accurate comparisons.

Privacy Protections

We take the following steps to protect your privacy:

• 100% anonymous: Your exact net worth is NEVER shown to other users. Only aggregated statistics (medians, percentiles) are calculated.
• No personally identifiable information: Rankings do not include your name, email, or any identifiable data.
• Opt-in only: You must explicitly consent to participate. We never enroll users automatically.
• Easy opt-out: You may withdraw consent and opt out at any time through your account settings or the percentile ranking modal. Your data will be excluded from future calculations immediately.

Data Retention

While you remain opted in, we retain your daily net worth snapshots to calculate trends and percentile movements over time. If you opt out, your data will be excluded from percentile calculations immediately, and we will delete your percentile-specific data (net worth snapshots, age bracket) within 30 days of your opt-out request. Historical snapshots used for your personal net worth trend charts are retained separately and are not affected by opting out of percentile rankings.

Your Rights

Under GDPR and other privacy laws, you have the right to access, correct, or delete your percentile ranking data at any time. You may exercise these rights by opting out through your account settings or contacting us at support@guapital.com.

9. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data in compliance with applicable laws.

10. Children's Privacy

Guapital is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we've collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or through a prominent notice in the app at least 30 days before the changes take effect. Your continued use of Guapital after changes become effective means you accept the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@guapital.com

We're here to help and committed to protecting your privacy.