WholioWholio is a free personal finance tracker. You record your spending, set budgets, scan receipts, and track what you own and owe, so you can see your whole financial picture in one place. This page explains what information Wholio keeps, why, and what control you have over it.
In short: your data is used only to run the app for you. It is never sold, never used for advertising, and other people can't see it.
Who runs Wholio
Wholio is run by an individual developer in Australia, not a company. For any privacy question or request, email privacy@wholio.app.
What Wholio keeps
- Your account. If you sign in, your email address. If you sign in with Google, Google also shares your name and profile picture. Wholio only uses these to identify your account.
- What you enter. Spending entries, categories, and budgets; recurring payments; your monthly income; goals; and the assets and debts you add with their monthly values.
- Photos you add. Receipt photos, and any photos you attach to an asset or debt (for example a screenshot of a balance).
- Settings. Things like your currency, tracker names, and colours.
- Your agreement. Which version of the Terms and this policy you agreed to, and when.
- Feedback you send. If you use Send feedback in Settings, your message, the type you picked, the email you give (if any), whether you were signed in, and your device type and screen size are emailed to me. It stays in my inbox, isn't added to your account, and is only used to improve Wholio and reply to you.
- Technical logs. Supabase and Vercel briefly keep standard logs, such as IP addresses and sign-in times, for security and to fix problems.
Wholio does not use analytics, advertising, or cookies, and does not connect to your bank.
Who can see it
Your data is private to your account. Other users can never see it, and I don't browse anyone's entries, photos, or balances. Access is limited to what's needed to keep Wholio running safely, such as fixing a problem you report, or when the law requires it.
To understand how Wholio is used, I look at totals across all accounts, such as the number of accounts and the combined net worth tracked in Wholio. These totals never identify you.
Where it's stored
- Signed in: your data and photos are stored with Supabase in Sydney, Australia. Access is locked so that each account can only read its own data. A copy is also kept on each device you use so the app works offline.
- Not signed in: everything stays in your browser on that device only. Nothing is sent to Wholio's servers.
Receipt scanning
Receipts are read on your own device. The photo is not sent to any AI or text-reading service. If you save the entry, the photo is stored with it as described above.
Services Wholio relies on
- Supabase stores account data and photos, and handles sign-in emails.
- Resend delivers feedback messages to my email.
- Vercel hosts the website.
- Cloudflare manages the wholio.app domain and forwards emails sent to @wholio.app addresses to my inbox.
- Google handles "Continue with Google" sign-in if you choose it.
- ExchangeRate-API provides daily currency rates. No personal information is sent to it.
- jsDelivr delivers some of the code the app runs in your browser.
These services only receive what they need to do their job.
Some of these services are based outside Australia, so information they handle may be processed overseas. For example, Vercel, Google, Cloudflare, and Resend are based in the United States, and Resend processes feedback messages in Japan. Your account data and photos stay in Sydney.
Google sign-in
If you use Google sign-in, Wholio receives only your email address, name, and profile picture. It does not access your Gmail, contacts, Drive, or anything else in your Google account. Wholio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your choices
- See and download it: Settings, then Your data, downloads everything as Excel or CSV.
- Change or delete it: you can edit or delete any entry, tracker, asset, goal, or photo in the app.
- Delete your account: in Settings, under Account & sync, tap Delete my account. Your account, data, and photos are removed straight away. You can also email privacy@wholio.app from the address you sign in with, and it will be done within 30 days.
- Stop using Google sign-in: you can remove Wholio's access any time at myaccount.google.com/permissions.
Browser storage
Wholio doesn't use cookies. It keeps your sign-in, an offline copy of your data, and a copy of the app's own files (so it opens without a connection) in your browser's storage, because the app needs this to work. Signing out removes your account's copy from that device.
Security
Data is sent over encrypted connections (HTTPS), and the database only lets each account read its own rows. No system is perfectly secure, so please don't store passwords or card numbers in notes. If a breach is likely to harm you, I'll tell you by email as soon as I can.
Children
Wholio isn't intended for children under 16.
Changes
If this policy changes, the date at the top will change too. For significant changes, the app will ask you to agree again.
Questions and complaints
Email privacy@wholio.app and I'll reply within 30 days. If you're not happy with the answer, you can contact the Office of the Australian Information Commissioner.