Data, Export & Privacy
Your privacy
WorthSync is built privacy-first:
- No bank linking required. You enter balances yourself — WorthSync doesn’t ask for bank credentials or pull transactions.
- Encryption at rest. Sensitive values like account names and balances are encrypted in the database. The storage volume is also encrypted at rest.
- Strict data isolation. Access rules are enforced in the database itself (Row-Level Security), not just in the app, so you only ever see your own data and what your household has explicitly shared.
- Auth handled by Clerk. WorthSync never stores your password.
Optional zero-knowledge vault
For the most sensitive records, WorthSync offers an optional end-to-end encrypted vault. Data you put there is encrypted on your device with a passphrase only you know — the server stores unreadable ciphertext and cannot decrypt it. You’ll set a passphrase and get a recovery key; keep the recovery key safe, because losing both means the data can’t be recovered.
Trust Center — where the controls live
Those protections are spread across several screens, so the Trust Center collects them in one place. Open it from Settings → Privacy & Data, or directly at Trust Center. It restates what’s protected and links straight to every control you have:
| Control | What you do there | Covered in |
|---|---|---|
| Security & Devices | Password, multi-factor authentication, active sessions. | — |
| Household access | Choose what stays private and who can view or update. | Households & Sharing |
| Encrypted Vault | Keep selected accounts encrypted with a passphrase only you hold. | Above |
| Export your data | Download your ledger in CSV, JSON, PDF, or annual-summary form. | Below |
| API tokens & webhooks | Review, revoke, and rotate the automation access you’ve authorized. | Below |
| Account history | Review balance and account-change history per account. | Accounts & Snapshots |
Nothing there is new capability — it’s a map. If you already know which setting you want, go straight to it.
Exporting your data
Everything lives on one screen: Settings → Reports & Exports. Exports are generated on demand and download directly to your device.
| Export | What it includes | Plan |
|---|---|---|
| Ledger CSV | Your full ledger (accounts + dated balances), for spreadsheets | All plans |
| Complete JSON | Accounts and history in full fidelity | All plans |
| Ledger PDF | A formatted net-worth report with timeline and year-over-year | All plans |
| Annual summary | A year’s tax-oriented summary (tax treatment, contributions, net-worth change) — pick the year, then Download PDF | Household+ |
| Statement of Net Worth | A dated, formal PDF statement (below) | Household+ |
Importing: you can also bulk-import balance history from a CSV, or use Bulk backfill on the same screen to add historical balances by year. The importer is flexible about column order and only requires account name, institution, snapshot date, and balance.
Statement of Net Worth
When a lender, a visa application, or your own records need something formal, Statement of Net Worth produces a dated PDF of your assets, liabilities, and net worth. Choose a Statement date (today or earlier) and which accounts to include — Combined household, My accounts, or Shared accounts — then Download statement PDF.
The PDF reports the balances you recorded as of that date. It is a user-provided statement, not a credit report, an appraisal, or an independently verified document. Zero-knowledge Vault accounts stay private and are left out.
API tokens & webhooks
If you want to feed WorthSync from your own scripts, Settings → Developer lets you authorize that without ever sharing your password.
- Create token issues a personal API token for reading your ledger and automating account or snapshot updates. Copy it immediately — it is shown once and never again. The list afterward shows only a short prefix, plus when each token was last used. Revoke kills a token instantly.
- Add webhook registers an HTTPS URL that receives a signed notification when snapshots are written through the API. You get a signing secret — also shown only once — to verify that deliveries really came from WorthSync. Disable stops delivery.
For endpoints, payloads, and signature verification, see the Developer & API documentation.
Deleting your account
You can permanently delete your WorthSync account from Settings → Privacy &
Data → Delete account. You’ll be asked to type DELETE to confirm. When you do:
- Your subscription is cancelled.
- Your user record and all associated data are erased.
- If you’re the last admin of a multi-member household, you’ll be asked to hand off admin or remove other members first — this protects the people you share with.
Account deletion is irreversible. Export anything you want to keep first.
WorthSync is designed to support data-subject requests (access, export, deletion) consistent with GDPR/CCPA expectations. See the full privacy policy for our data-retention statement, or email support@worthsync.com to make a request.