Privacy Policy

Last updated: 3 November 2026

This policy explains what happens to your information when you use wdmmg.app (the “site”). A bank statement is sensitive, so we keep this as plain as we can. There are no accounts or logins, so we do not keep a profile about you.

Our take on privacy

A bank statement is one of the most revealing things you own. It can show where you live, what you eat, who you send money to, how you get around and what keeps you up at night. We built this site on one idea: you should be able to understand your own money without handing over your life to do it.

Most money apps begin by asking for an account, a password, a link to your bank, and access to your contacts, location and notifications. Each of those is a door, and every door is one more thing that can be left open. So we chose not to build most of them.

No sign-up, no login. There is no account to create, so there is no password to steal and no profile of you sitting on our servers.
No bank or app syncing. We never ask for your bank login or a standing connection to your accounts. You pick one statement and share it once.
No permissions. We do not ask for your contacts, location, camera, microphone or notifications. The site also tells your browser to keep the camera, microphone and location switched off.
No ads, no tracking, no selling. We run no ads and no tracking of our own, and we never sell your information. We earn from an optional one-time payment, not from your data. We count how many reports are made, never who made them.

Why this matters more than ever

Data breaches have become routine news. Large companies with large security teams get hacked, and the information they held can turn up for sale years later. Financial details are among the most valuable things to steal, because they make scams, fraud and phishing messages look convincingly real.

The safest data is data that was never collected. The next safest is data that was deleted quickly. That is the approach we take.

How we look after what you share

As little as possible, for as short as possible. Your file is never saved. The report made from it is deleted after 48 hours. We do not build a long-term record of your spending, so there is no such record for anyone to break into.
Cleaned on your device where possible. In most browsers your statement is opened and cleaned on your own device, and only the cleaned text is sent to us. Account and card numbers, bank codes, phone numbers, email addresses and your own name where the statement prints it are removed before anything is analysed, and you can check the cleaned text first.
Locked on the way in. Every connection is encrypted. The site refuses requests sent from other websites, limits how often anyone can try things, and checks every payment directly with the payment provider.
AI on a short leash. AI only reads your statement lines and writes the commentary. It cannot browse, it never sees anyone else’s report, and it never does the maths: every number comes from our own code.
Your link is your key. Each report opens with a long, random link that cannot be guessed. Anyone you share it with can see the report until it is deleted, so share it with care.

What we believe

Our mission is to help people see clearly where their money goes, honestly and with a sense of humour, without asking them to pay for it with their privacy. Better money habits start with a clear picture, and a clear picture should not cost you your data.

No website can promise to be perfectly secure, and we will not pretend otherwise. What we can promise is that we design every feature to need less of your information, not more, and that we will always tell you plainly what we do with it. The details are set out below. If anything in this section and the rest of this policy ever seem to differ, the rest of this policy is the one that applies.

The longer story of why we work this way is on our blog: Our take on privacy.

The short version

What we process: the statement you upload (dates, descriptions, amounts, currency, and the names of people and businesses in it) after we remove account and card numbers, bank codes, phone numbers and email addresses; the report made from it; a payment reference if you pay; your message and email if you write to us; and technical data such as your IP address, for security.
Why: to make the report you ask for, to take payment, to answer you and to keep the site safe. Nothing else.
How long: your file is never stored. Reports are deleted after 48 hours, payment markers after 30 days and messages after 12 months at most.
Who else sees it: only the service providers listed below, to run the site. We never sell your information or use it for advertising.
Your choices: you can ask to see, correct or delete your information, withdraw your consent and complain. See “Your rights” and “Complaints”.

Who is responsible

The site is run by Vaibhav, an individual based in India (“we”, “us”). We decide how your information is used, so we are its “controller” (or “data fiduciary” under India’s Digital Personal Data Protection Act). You can reach us through the contact form, where our details and Grievance Officer are also listed.

What happens to your statement

Before you upload, you tick a box to agree to our terms and to the processing described here.
In most browsers your file is opened and cleaned on your own device, and only the cleaned text is sent to us over an encrypted connection (HTTPS). If your browser cannot read it, a file of up to 4 MB is sent to our server instead and read in memory there.
We automatically remove account numbers, card numbers, bank codes such as IFSC, phone numbers, email addresses and UPI IDs that contain a phone number. We also remove your own name, read from the top of the statement, and the address and customer details printed there. We keep the names of the shops, businesses and other people in your transactions, because the report needs them to tell a payment to a friend from a payment to a shop, so those names appear in your report. Names you ask us to hide are removed too. Automatic cleaning is not perfect and some details may remain, so you can check the cleaned text before you continue.
The original file is never saved to disk or to a database. It is discarded once its text has been read.
If your PDF has a password, it is used once in memory to open the file. It is never stored or logged.
Every calculation (totals, averages, scores) is done by our own code. AI is used only to read the statement lines and to write the commentary.
If you choose to clean your statement with another AI service first (the “Don’t trust us?” option, which links to ChatGPT, Claude, Gemini, Grok and Meta AI), what you share there goes to that service under its own terms and privacy policy, not to us.

What we keep, and for how long

Your report (the names of shops and people you paid or were paid by, dates, amounts, the figures worked out from them, your tone and language choices and any category fixes): stored in the United States for 48 hours, then deleted automatically. You can delete it sooner yourself with “Delete this report now” near the end of the report. Anyone with the report link can open it during that time, so share the link carefully.
A copy in your browser tab (session storage), so the report opens quickly. It is cleared when you close the tab.
Payments: a marker that links the payment reference to the report, for 30 days, so one payment cannot be used twice. The payment provider keeps its own records of the payment, as the law requires (for example for tax and fraud prevention).
Messages you send us: your message, your email if you add one and any rating, for up to 12 months, then deleted.
If a paid report does not unlock: what you send us so we can fix it (your payment receipt, the report link and, if needed, your cleaned statement text) is used only to unlock your report and email it to you, and is deleted within 12 months.
Security data: your IP address is used to limit how often uploads and other requests can be made, and is kept for about 10 minutes for that. Our hosting provider keeps short-lived technical logs (such as IP address, time and page) for security and to fix errors. Our logs do not contain your statement.
Usage counts: daily totals such as how many reports were made, split by country (worked out by our host from your connection, kept as a two-letter country code only) and by where the visit came from (for example a link we shared on Reddit), with no cookies, no IP address and nothing about you, kept for about 13 months.
Visit statistics: which pages are visited (with report links blanked out), the site you came from, your country, and your device type and browser, counted by Vercel Web Analytics without cookies and without storing anything on your device. Visits are told apart for one day only, so you cannot be followed from day to day or across other sites. We use this to see which pages and links bring visitors.

Why we use your information (legal bases)

Where a law such as the EU or UK GDPR or Brazil’s LGPD requires a legal basis, we rely on:

Making your report: performing our agreement with you (giving you the service you ask for) and, for any sensitive details your statement may reveal, your explicit consent.
Payments and records: performing our agreement with you, and our legal obligations such as tax and accounting rules.
Answering messages, requests and complaints: our legitimate interest in helping you, or a legal obligation.
Keeping the site safe (rate limits, bot protection, logs): our legitimate interest in preventing fraud and abuse.
Usage counts: our legitimate interest in understanding how the site is used, without identifying anyone.

Under India’s Digital Personal Data Protection Act and the Information Technology Act rules, we process your statement on the basis of the consent you give by ticking the box before you upload. You can withdraw your consent at any time (see “Your rights”). Withdrawing does not affect what was done before, and because reports delete themselves after 48 hours there is usually nothing left to stop.

Sensitive details your statement may reveal

Statements can indirectly reveal sensitive things, for example spending at a pharmacy or clinic (health), at a place of worship (religion), or payments to a political party or a trade union. We do not try to work any of this out, our categories do not include health, religion, politics or similar groups, and we use your statement only to make your report. By ticking the box before you upload, you give your explicit consent to this processing. It is deleted with your report after 48 hours.

Service providers who process data for us

Vercel (USA): hosts the site and runs our code, including automatic bot protection on uploads and cookieless visit statistics (Web Analytics).
Google (Gemini API): reads the cleaned statement text and lists the transactions. Under the paid API terms we use, Google does not use this data to improve its products, and keeps it only for a limited time to detect abuse and meet legal duties.
xAI (Grok API): writes the commentary in the tone and language you choose. It receives figures and the names of shops and people from your report, not your file. xAI says it does not train its models on this data and deletes it within 30 days.
Upstash (USA): the database that holds reports for 48 hours, payment markers, messages and daily counts.
Razorpay, PayPal and Stripe: take payments, depending on which one you choose at checkout. They collect your payment details directly, under their own privacy policies. We never see your full card number.

These providers may use your information only to provide their service to us. We do not sell your personal information, we do not “share” it for cross-context behavioural advertising, and we do not use it for advertising, marketing profiles or credit decisions. We disclose information to authorities only when the law requires it (for example a valid court order), and only what is required. If the site or business is ever transferred to a new owner, this policy continues to apply to any information that exists at that time.

International transfers

Our providers may process information in the United States and in other countries whose data protection laws differ from yours. Where the law requires it (for example for people in the EU, the UK or Switzerland), these transfers are covered by recognised safeguards such as the European Commission’s Standard Contractual Clauses, the UK addendum to them or the EU-US Data Privacy Framework, under our providers’ data processing terms.

Cookies and similar technology

We do not use advertising or analytics cookies and we do not track you across other sites.

Your browser’s storage keeps things on your own device: your tone and language, the link to your most recent report (so you can get back to it for 48 hours), a Premium or Max pass if you buy one and, if you ask for it, a monthly check-up summary (spending per month, category totals, top places and your score). None of it is sent to us on its own. You can delete it at any time by clearing your browser data, and check-ups with “Forget all saved check-ups” in a report.

Bot protection checks technical signals from your browser when you upload, only to stop automated abuse. Payment pages from Razorpay, PayPal or Stripe may use their own cookies for security and fraud prevention. Because we do not sell or share your information, there is nothing to opt out of; browser signals such as Global Privacy Control are respected by default.

Our Cookie Policy lists everything stored in your browser and why.

Automated decisions

Your report, including the score and the persona, is made automatically from your statement. It is a playful summary of spending habits. It is not a credit score or an assessment of creditworthiness, it has no legal or similarly significant effect on you, and we never give it to lenders or anyone else. The commentary is written with AI and can be wrong.

Your rights

Depending on where you live (for example under the EU or UK GDPR, India’s DPDP Act, Brazil’s LGPD, Canada’s PIPEDA or US state laws such as California’s), you may have the right to:

know what information we hold about you and get a copy of it;
have wrong information corrected or completed;
have your information deleted;
object to or restrict some processing, and receive your data in a portable format;
withdraw your consent at any time;
name someone to exercise your rights if you die or become unable to (India);
appeal our answer to a request (some US states);
not be treated differently for using these rights;
complain to a data protection authority.

Because there are no accounts and reports delete themselves after 48 hours, we usually hold nothing we can link to you after that. To delete a report straight away, use “Delete this report now” near the end of it. To make any other request, email privacy@wdmmg.app or use the contact form and choose “Privacy request”. We may need to check that the request is yours, for example by asking for your report link or the email on your payment receipt. We answer within one month, or sooner if your local law requires it, and we do not charge for this.

Complaints

If you are unhappy with how we handle your information, please tell us first through the contact form (choose “Complaint”). We acknowledge complaints within 48 hours where possible and always within 30 days, look into them properly and tell you the outcome. You can also complain to a data protection authority, for example the Information Commissioner’s Office (UK), the supervisory authority in your EU country, the Data Protection Board of India, the ANPD (Brazil) or your state Attorney General (US).

Grievance Officer (India)

Under India’s Information Technology Act rules and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer is Vaibhav, who you can reach at grievance@wdmmg.app or through the contact form. We acknowledge grievances within 48 hours and resolve them within one month.

Consumer health data notice (US)

This notice is for people covered by laws such as Washington’s My Health My Data Act and Nevada’s consumer health data law.

What we may collect: transaction descriptions in your statement that could relate to health, for example the name of a pharmacy or clinic and the amount spent there.
Where it comes from: only from you, when you upload your statement.
Why: only to make the report you ask for. We never use it for advertising and we never sell it.
Who receives it: only the service providers listed above (hosting, AI processing and database), to make your report. No affiliates receive it.
How long: it is deleted with your report after 48 hours.
Your rights: you can ask whether we hold such data, get a copy, have it deleted or withdraw your consent by emailing privacy@wdmmg.app or through the contact form (choose “Privacy request”). If we turn a request down, you can appeal by replying to our answer.

Children

The site is only for people aged 18 or over (or the age of majority where you live, if that is higher). We do not knowingly process children’s information. If you think a child has used the site, contact us and we will delete anything we hold.

Security

We use encryption in transit, keep data for short periods, remove account and card numbers and contact details before analysis, limit access to our systems and choose providers with strong security practices. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities where the law requires it.

Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, show a notice on the site. Because reports delete themselves after 48 hours, changes apply to new uploads.