Data, Export & Privacy
Your privacy
WorthSync is built privacy-first:
- No bank linking required. You enter balances yourself — WorthSync doesn’t ask for bank credentials or pull transactions.
- Encryption at rest. Sensitive values like account names and balances are encrypted in the database. The storage volume is also encrypted at rest.
- Strict data isolation. Access rules are enforced in the database itself (Row-Level Security), not just in the app, so you only ever see your own data and what your household has explicitly shared.
- Auth handled by Clerk. WorthSync never stores your password.
Optional zero-knowledge vault
For the most sensitive records, WorthSync offers an optional end-to-end encrypted vault. Data you put there is encrypted on your device with a passphrase only you know — the server stores unreadable ciphertext and cannot decrypt it. You’ll set a passphrase and get a recovery key; keep the recovery key safe, because losing both means the data can’t be recovered.
Exporting your data
You can take your data with you at any time:
| Export | What it includes | Plan |
|---|---|---|
| CSV | Your full ledger (accounts + dated balances) | All plans |
| PDF report | A formatted net-worth report with timeline and year-over-year | All plans |
| Annual summary | A year’s tax-oriented summary (tax treatment, contributions) | Household+ |
Find these under Settings. Exports are generated on demand and download directly to your device.
Importing: you can also bulk-import balance history from a CSV. The importer is flexible about column order and only requires account name, institution, snapshot date, and balance.
Deleting your account
You can permanently delete your WorthSync account from Settings. When you do:
- Your subscription is cancelled.
- Your user record and all associated data are erased.
- If you’re the last admin of a multi-member household, you’ll be asked to hand off admin or remove other members first — this protects the people you share with.
Account deletion is irreversible. Export anything you want to keep first.
WorthSync is designed to support data-subject requests (access, export, deletion) consistent with GDPR/CCPA expectations. See the full privacy policy for our data-retention statement, or email support@worthsync.com to make a request.