Last updated 4 August 2026.
Alpha Wealth is a place to keep a record of what you own, what you owe, and the paperwork behind both — and to let somebody you choose help you keep it. This explains what we hold, why, who else can see it, and how to get it back or get rid of it.
It is written to be read. Where a thing is uncomfortable, it is said plainly rather than buried.
Alpha Wealth is operated by a company established in the United States. Write to support@alphawealth.app about anything in this document, including any of the requests further down.
Your account. Your email address, your name, and — if you give them — your phone number and a profile photograph. Your chosen language, currency and number format. If you signed in with Google or Apple, we hold the identifier they give us, not your password with them.
Your book. Everything you enter: assets and debts with their names, currencies, values, what you paid, sizes, addresses and descriptions; entries and their categories; dated valuations and holdings. Whatever a subcategory asks for — bedrooms, purity, a policy number — is stored with the asset it belongs to.
Your papers. Photographs of receipts and any documents you upload, plus the text read out of them, the names you give them, and warranty or renewal dates.
People you name. Beneficiaries — their names, their relationship to you, and an email address or phone number for reaching them. This is information about somebody else, held because you asked us to reach them on your behalf. Tell them.
Bookkeepers and members. Who you have given access to, what you gave them access to, and when.
Security and history. A hash of your password — never the password. Your two-step secret if you set one up. A record of each signed-in device: the kind of device, roughly where the sign-in came from, and when. An audit trail of every change made to your book, and by whom, because a record two people can both write to is only trustworthy if it says who wrote what.
Notifications. If you turn them on, a device token so a message can reach your phone.
To run the thing you asked for: keeping your book, showing it, adding it up, converting between currencies, and putting your paperwork where you can find it again.
To let the people you chose do their part — a bookkeeper making entries, a family member reading the book.
To keep it secure: signing you in, telling you about a new sign-in you did not expect, and being able to answer "who changed this" a year later.
To do the legacy handover if you set one up, described below.
We do not sell anything about you. We do not use your book to advertise to you, and we do not use your documents to train anybody's model.
We use a small number of services to run this. They see only what they need to.
Reading your documents. When a receipt or document is read for you — pulling out the shop, the total, the warranty date — the image or PDF is sent to Anthropic's API, which returns the summary. Anthropic does not use API content to train its models. If you would rather nothing left the app this way, do not use the read feature; a receipt you never ask to be read is never sent anywhere.
Hosting. The database and the application run on Railway, in the United States. Your documents and photographs are stored in Cloudflare R2, in a private bucket that is not reachable from the internet — every file is served through our own server, which checks who is asking first.
Email. ZeptoMail sends the verification codes, alerts and handover letters, and so sees your email address and the contents of those messages.
Sign-in. If you use Google or Apple to sign in, they tell us who you are; we do not tell them anything about your book.
Maps and places. Giving an asset a location uses Google Maps. Two things go to Google when you do: what you type into the address box, as you type it, and the point you end up choosing. Google also serves the map itself, so it can tell roughly what part of the world you are looking at. Nothing else goes with it — not the name of the thing, not what it is worth, not that it is yours.
You do not have to. Every asset can be kept with no location at all, and one you have placed can be set to show only its district, or to be left off the map entirely. If you never give anything a location, nothing about you reaches Google this way.
Exchange rates. We fetch published rates once a day from a public source. Nothing about you is sent when we do.
That is the whole list. If it changes, this document changes with it.
Only people you choose, and only what you gave them:
A bookkeeper you granted access to, for the assets you named. Somebody you added as a member of your book. The people you named as beneficiaries — but only through the handover.
Nobody at Alpha Wealth reads your book as a matter of course. Support staff can see account-level facts — that you exist, when you last signed in, what plan you are on — and can act on a written request from you. Every such action is written to an internal log with a name against it.
If you set one up, this is what happens. After 90 days without you opening the app, we email to ask whether you are there. If a further 21 days pass with no answer, your book is handed to the people you named, by a link that works for 90 days. Those periods are the current settings and can change; the app shows you what they are.
This is the one part of Alpha Wealth that gives your records to somebody else without you doing anything at the time. It only ever goes to people you named yourself, it never goes to an address chosen by anyone else, and answering the email stops it. Your private "where the papers are" note is included — that is what it is for.
Your book stays while your account is open.
A deleted receipt sits in the bin for 30 days and can be put back. After that it is gone, along with its photographs.
When you close your account, we anonymise you and destroy your private files: your email is replaced with an unusable address, your name, phone, password and two-step secret are removed, and your avatar and documents are deleted from storage. The entries themselves are kept, because if a bookkeeper recorded them they are that bookkeeper's working records and accounting rules require them to survive. They no longer point at a person.
Sign-in history and the audit trail are kept while the account is open, because their whole purpose is answering questions about the past.
To see it. Everything is in the app already, and the year-book export gives you your entries and every document in one file.
To correct it. You can edit your own entries; after a short grace period a correction to somebody else's entry goes to the owner to approve, so the trail stays honest.
To delete it. Closing your account is in Settings and takes your password and a code, because it cannot be undone.
To take it elsewhere. The export is a normal file you can keep or hand to anyone.
To object, or to withdraw a consent. Write to support@alphawealth.app.
We answer within 30 days. If you are not satisfied, you can complain to your data protection authority.
Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we have collected about you and where it came from, to have it deleted, to have it corrected, and not to be treated differently for asking. The list above is the whole list; nothing is held back for a "categories" table.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either. There is no opt-out to offer you because there is nothing to opt out of.
We do not use or disclose sensitive personal information — which is what your financial records are — for any purpose beyond running the service you asked for.
Requests go to support@alphawealth.app and we answer within 45 days. You may use an authorised agent. We will ask for enough to be sure the request is really yours, which for a book of somebody's finances is the least we should do.
Under the Digital Personal Data Protection Act you are a Data Principal and we are the Data Fiduciary. You have the rights above, plus the right to nominate somebody to exercise them if you die or become incapable — which is what naming a beneficiary does here. Grievances go to support@alphawealth.app.
Under the Personal Data Protection Law you have the rights above, including the right to object to processing and to ask for your data in a portable form. Requests go to support@alphawealth.app.
In the United States. If you are in India, the UAE, or anywhere outside the US, using Alpha Wealth means your records are transferred there and held under US law, by the services named above. We do not hold a copy anywhere else.
Alpha Wealth is not for anyone under 18. We do not knowingly hold anything about a child. If you think we have, write to us and we will remove it.
Passwords are hashed with argon2 and never stored or logged in the clear. Documents sit in a private bucket and are served only through a request we have checked. Traffic is encrypted in transit. Two-step sign-in is available and we recommend it.
No system is perfect. If something happens that affects you, we will tell you.
If this document changes we will update the date at the top, and tell you in the app if the change is one that matters.