Privacy Policy

Last updated: 8 October 2026

1. Overview

This policy explains what personal information Track My Wealth ("the platform") collects, why, how it's protected, where it's stored, and who it's shared with. It covers our website and the Track My Wealth mobile apps for Android and iOS. Verge Technologies Pty Ltd, an Australian company, is responsible for your information. We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and sections 7 and 9 explain the additional rights that may apply if you live elsewhere. If anything here is unclear, contact us using the details in section 11.

2. Information you give us

• Account details — your name and email address when you sign up, and a securely hashed version of your password (we never store or can see your actual password).
• Financial data you enter — property, shares, cash, loans, superannuation, income and other figures you add to a wealth file. This is the core purpose of the platform, and it's yours: we don't use it for anything beyond providing the service back to you.
• Notes and voice memos — if you use the optional AI-assisted Notes feature, the audio or text you submit is sent to our AI provider (OpenAI) to transcribe and summarise, then the result is stored against your account as with any other note.
• AI assistants you choose to use — if you copy a summary of a wealth file to paste into an AI assistant, or connect Claude or ChatGPT to your wealth files, the figures in that summary or in the files you choose leave our platform at your direction (see section 5). When you connect an assistant we keep a record of the connection: the assistant's name, the wealth files you chose, and when it was connected and last used. We also keep secure access codes that let the assistant keep reading until you disconnect it; these are stored only in scrambled (hashed) form.
• Messages you send us — anything you submit through a contact or support form, including your email address and message content.
• Payment details (website) — if you subscribe to a paid plan on our website, your card details are collected and processed directly by our payment processor, Stripe. We never see or store your full card number; we only receive confirmation of your subscription status.
• Purchases in the mobile apps — if you subscribe through the app, the payment is taken by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your card or payment details. Through our subscription provider, RevenueCat, we receive confirmation of which plan you hold, its dates and its status, linked to your account.
• Your country — the country you choose at sign-up (and can change later in Settings), which we use to show the right currency and tools.

3. Information collected automatically

• Essential session cookie — used on every page once you're logged in, so the platform can recognise your session. The platform can't function without it, and it's not used to track you across other sites.
• Analytics cookies — our public marketing pages (the homepage and pricing page) use Google Analytics (GA4) to understand visitor traffic in aggregate. This isn't loaded on any page inside the logged-in app, and it isn't linked to your account or the financial data you enter.
• Our own visit counter — the same public pages, plus the log in and sign up pages, send a simple count to our own server (the page visited, the site you came from, your device type and your country, worked out from your IP address). We don't save your IP address or browser details, set no cookie for this, and can't follow you from one day to the next. It is switched off if your browser sends a Do Not Track signal. We also count successful sign-ins in total. It is used only to see how many people visit and sign up.
• Basic technical logs — standard server logs (IP address, browser type, timestamps) kept briefly for security and troubleshooting purposes.
• Mobile app information — if you allow notifications, we store a push notification token for your device so we can send the alerts you've asked for. If you turn on Face ID or fingerprint sign-in, the check is carried out by your device and we never receive or store your biometric data. The app also sends your account identifier to our subscription provider (RevenueCat) so purchases are matched to the right account.

4. How we use your information

We use your information to: provide and maintain the platform; authenticate you and keep your account secure; send you service-related emails (verification, password resets, optional weekly digests you can turn off); respond to support or contact requests; make your figures available to an AI assistant when you choose to connect one; understand aggregate usage of our public pages; and meet our legal and accounting obligations.

We do not sell your personal information, and we do not use your financial data for advertising or share it with data brokers.

5. Who we share information with

We only share information with the third parties needed to run the platform, each bound by their own privacy and security obligations:

• Stripe — payment processing for paid subscriptions bought on our website.
• Apple and Google — if you buy a subscription in the mobile app, they process the payment and tell us the result. Their push notification services also deliver notifications to your device.
• RevenueCat — our subscription management provider, which confirms in-app purchases and subscription status for your account.
• Our email delivery provider (currently Twilio SendGrid) — sending account, verification, and notification emails.
• Notification and hosting providers — Expo, which relays push notifications to Apple and Google, and Linode, which hosts our servers in the United States.
• OpenAI — only if you use the optional AI Notes feature, to transcribe and summarise the note you submit.
• Anthropic (Claude), OpenAI (ChatGPT) or another AI assistant you choose — only if you paste a summary into one or connect it to your wealth files. A connected assistant can read, but never change, your data, and it never receives your Notes, legacy contact, sharing details, email addresses or password. Connecting is optional and needs the Advanced plan; you choose which wealth files it can read and you can disconnect it at any time under Account. Once an assistant has your figures, the company that runs it handles them under its own terms and privacy policy, which we don't control, so please read them before you connect.
• Google Analytics — aggregate traffic analytics on our public marketing pages only, as described in section 3.
• Anyone you explicitly invite — if you grant another person (a spouse, accountant, adviser, or client manager) access to a wealth file, they can see what that access level allows.

We may also disclose information where required by law, or to protect the rights, property, or safety of Verge Technologies, our users, or the public.

6. How we protect your information

The financial data in your wealth file is encrypted at rest using AES-256-GCM encryption, and all traffic to and from the platform is protected by TLS/HTTPS in transit. Passwords are never stored in plain text — they're hashed using industry-standard cryptography. Optional two-factor authentication (2FA) is available on every account, and we apply a Content Security Policy and other server-side protections designed to reduce the risk of common web attacks. AI assistants connect through a read-only sign-in that you approve on our own page; their access codes are stored only in hashed form, expire (after one hour, or 30 days if renewed) and stop working as soon as you disconnect the assistant. No system can be guaranteed completely secure — see our Terms & Conditions for how this risk is allocated.

7. Where your information is stored

Our servers are located in the United States (Dallas, Texas), and Verge Technologies is based in Australia. If you use the platform from outside Australia, your information is transferred to, stored and processed in the United States and Australia, and the service providers listed in section 5 may process it in other countries. Where we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it in line with the Australian Privacy Principles or equivalent protections.

8. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account yourself at any time: in the mobile app go to Settings, then Account, then Delete account; on the web use our delete account page. If you can't log in, email us and we'll do it for you.

When you delete your account it stops working immediately and you're signed out everywhere. For 30 days we keep a recoverable copy in case you change your mind or it wasn't you. After 30 days your account and the wealth files you own are permanently erased, and our encrypted backups roll off within a further 14 days. Billing records held by our payment processor are kept for as long as tax and accounting law requires, and we may keep limited records where the law requires it or to resolve a dispute.

Connections to AI assistants end when you disconnect them or delete your account, and their records are erased with your account. Information an assistant has already received is held by the company that runs it, so deleting your account here does not delete it there; you can remove it through that assistant's own settings.

Subscriptions bought through the Apple App Store or Google Play are managed by Apple or Google, and deleting your account does not cancel them. Please cancel them in your store's subscription settings as well.

9. Your rights and choices

Under Australian privacy law, you can ask us to access, correct, or delete the personal information we hold about you, and you can ask questions about how it's handled.

If you live in the European Economic Area, the United Kingdom, or another place with its own data protection law, you may also have the right to object to or ask us to restrict certain processing, to receive a copy of your information in a portable format, and to withdraw consent where we rely on it. We process your information to provide the service you signed up for (contract), to keep it secure and improve it (our legitimate interests), to meet legal obligations, and, for optional features such as the email digest, with your consent. If you live in a US state with its own privacy law, you may have similar rights to know, correct and delete your information. We do not sell your personal information or share it for cross-context behavioural advertising.

To use any of these rights, contact us using the details in section 11 and we'll respond within a reasonable time and within any period your local law requires. You can also opt out of the optional weekly email digest at any time from your account settings, and you can decline non-essential cookies as described in our cookie notice — this won't affect the platform's core functionality. You can also complain to your local data protection authority.

10. Age

The platform is for people aged 18 and over and is not directed at children. We don't knowingly collect information from anyone under 18. If you believe a child has given us personal information, contact us and we'll delete it.

11. Contact us

Questions, access/correction/deletion requests, or complaints about how we handle your information can be sent to info@vergetec.au, or via the contact form on our homepage. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to this policy

We may update this policy from time to time as the platform changes. Material changes will be reflected by an updated "last updated" date above, and we may also tell you in the app or by email.