Where is my data?

WealthMgr stores your data on your device first. This page explains what that means in practice — where your data sits, how it’s protected, and where we’re honest about the limits.

Free tier: your data never leaves your browser

If you’re on the free plan, your accounts, transactions, rules, goals, and projections live entirely in a SQLite database stored inside your browser. No copy is sent to our servers. No copy sits in a cloud database. There is nothing for us to read, sell, or leak.

You can export your full database any time from the Settings page (under “Data Export & Import”). You can use the app offline indefinitely. Closing the tab does not lose anything.

What happens if I clear my browser?

On the free tier, clearing your browser data removes your database permanently. We cannot recover it for you. Export your database from Settings before clearing anything.

Are passwords and passkeys part of the export?

No — and this is deliberate. The export file carries your financial data only. Your password lives on our auth servers as a salted hash, and a passkey private key never leaves the password manager of the browser or device that created it (that’s the WebAuthn guarantee: passkeys are not exportable, even by us). A stolen backup file can therefore never hand anyone the keys to your account.

Two practical consequences:

• New browser or device: sign in with your email and password, then add a passkey for that browser under Settings → Passkeys. Passkeys are created where you use them; importing or exporting your database does not move them.
• Different web address: a passkey belongs to the exact site address where it was created. Opening WealthMgr at a different URL (for example a preview deployment instead of the app you used before) will not offer your old passkey — it wasn’t lost, it simply lives on the other address.

Paid tier: optional cloud sync

When you subscribe, we create a per-user database on Turso Cloud and sync your local database to it. This is what lets you use WealthMgr on two devices, or recover your data if you clear your browser.

The sync path is:

• On your device: your local database stays in your browser, same as the free tier.
• In transit: every byte between your browser and Turso is TLS-encrypted.
• On Turso’s servers: the synced copy is stored with Turso’s own at-rest encryption.

We will not hedge: Turso’s at-rest encryption is managed by Turso, not by you. They hold the keys to their storage layer. A paid user’s data on Turso is encrypted at rest, but Turso can technically read it if they need to. This is standard industry practice, not zero-knowledge.

If that line matters to you, stay on the free tier. Free is the plan where the privacy claim is strongest, by design.

What “local-first” means in practice

When we say WealthMgr is “local-first,” we mean:

• Your data lives on your device by default, not in a cloud database.
• The app works offline. You don’t need an internet connection to view or edit your data.
• Cloud sync is optional (paid tier only) and always under your control.
• You can export your full database at any time as a SQL text dump (.sql file).

We don’t track your balances, transactions, or goals on our servers. We don’t build a profile of your spending. We don’t sell your data, because we don’t have it.

Questions, corrections, vulnerability reports

If you’ve found a security issue or have questions about how your data is handled, we’d rather hear it from you than discover it the hard way. Support contact will be published here once our mailboxes are live.