Privacy Policy

Wanance ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our personal finance platform available at wanance.com and our mobile applications.

The controller of your personal data is Stiven Diaz, a natural person identified with Colombian citizenship card (C.C.) 1004360303, owner of Wanance (wanance.com), domiciled in Santa Marta, Colombia. Contact: email wanance.app@gmail.com, phone +57 300 377 9033. Requests and notifications are received at that email. We process personal data in accordance with Colombian Statutory Law 1581 of 2012 on personal data protection, its regulatory Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the instructions of the Superintendence of Industry and Commerce (SIC). This document is our data processing policy.

We process your data to: (a) create and run your account; (b) record, categorize and analyze the financial movements you enter or authorize; (c) send you the notices you configure (alerts, summaries, bank-email notices); (d) process payments for paid plans; (e) give you support; and (f) send news only if you accept it.

We collect the following categories of information:

• Account data: email address, first and last name, and country (required at sign-up). Optionally, a phone number, address, city or province, profile picture and time zone, which you can fill in or clear from Settings. If you sign in with Google we also store your Google account identifier and profile photo.
• Telegram (optional): if you link Telegram to receive alerts, we store your Telegram chat identifier so the bot can message you. You can unlink it at any time from Settings.
• Financial data: wallets, transactions, categories, and movement records you create within the app. This data belongs to you.
• Usage data: how you interact with the app (features accessed, session duration), used to improve the product.
• Device data: browser type, operating system, and IP address, used for security and fraud prevention.
• AI capture data: when you use AI capture, the receipt photo or voice note you submit is processed to extract movement details (amount, date, category, wallet). This only happens when you choose to use the feature.
• Bank alert emails (optional): if you forward your bank's notification emails to your personal Wanance address, we store the sender, subject and a short excerpt of each email, and AI extracts the movement details (amount, merchant, date, last four digits of the card). Only the emails you choose to forward reach us, and only after you authorize it. By default the movement is recorded automatically (you can require review in Settings), and you can delete this data.
• AI assistant (optional): the questions you ask the assistant (in the app or on Telegram) and its answers are kept as your conversation history so it can follow up; you can clear it at any time. To answer, it reads summaries of your own records (totals, movements, balances, budgets); it cannot create or change anything.
• Calendar feed and Google Sheets (optional): the calendar link is private and contains only your due dates; you can replace it at any time. If you turn on Google Sheets sync, a copy of your movements is written to a spreadsheet in YOUR Google Drive.
• Sessions and security: each time you sign in we record the device type (browser and operating system), IP address and last activity of that session, so you can see where your account is open, close sessions remotely and get an alert when a new device signs in.
• Support and consents: the messages you send through Help & support, the version of these Terms and Privacy Policy you accepted and when, and whether you accept news and promotional emails (every promotional email has an unsubscribe link).
• Device permissions (mobile): with your consent, the mobile app may access your camera, microphone, and photo library or files — solely to capture the receipts or voice notes you choose to submit.

We use your information to:

• Provide and maintain the Wanance service.
• Send transaction confirmations and security alerts related to your account.
• Send product updates and announcements (you may opt out at any time).
• Detect and prevent fraudulent or unauthorized access.
• Comply with legal obligations.

We do not use your financial data to serve advertising or to profile you for third-party marketing purposes.

When you create your account you give us your prior, express and informed authorization to process your data for the purposes described here, and we keep proof of it (version and date of acceptance). Your financial information (balances, movements, debts) is not sensitive data under Law 1581, but we protect it as if it were.

Bank emails require a separate authorization. Before your personal address starts processing the alerts you forward, the app asks you to expressly authorize it. With that authorization the AI reads each forwarded email to record the movement (by default automatically; you can require review in Settings). You can revoke it at any time by stopping the forwarding or rotating your address, and you can delete what was received.

The Wanance League is optional. If you join it, other users and the public Hall of Fame can see your league profile: the alias and avatar you choose, your country, your league, your weekly and season points and your streak. Your name, email, amounts, categories and movements are never shown. Points are calculated from your activity (for example, the days you log), not from how much money you have. You can leave the league whenever you want, and your profile is deleted along with your account.

We take security seriously and implement the following measures:

• Hashed credentials — passwords and recovery codes are stored as bcrypt hashes, never as readable text.
• HTTPS/TLS in transit — all communication between your device and our servers is encrypted.
• Managed cloud hosting — servers and database run on a managed cloud provider with restricted access.
• Two-factor authentication — available on all accounts for an additional layer of protection.

We do not sell your data. We may share your information only in the following limited circumstances:

• Payment processors (MercadoPago): billing information is processed by MercadoPago under their privacy policy.
• AI provider (Anthropic): receipt images and voice transcriptions submitted through AI capture, the bank emails you forward, and — when you use the AI assistant or the monthly summary — your question plus the summaries of your records needed to answer it are sent to Anthropic to return the result. Per Anthropic's API terms, these inputs are not used to train their models and are not retained beyond what is needed to process your request.
• Google Drive (optional): if you connect Google Drive, the receipts and documents you attach to your movements are stored in your own Google Drive account, under Google's terms. We keep only a reference (file name, size, type and link) so the app can list them; we do not keep a copy of the file.
• Telegram (optional): if you link Telegram, the alerts you asked for are delivered through Telegram's servers under their privacy policy. We only send there what you asked for: the text of your alerts, your monthly summary if you chose Telegram as its channel, and the assistant's answers to the questions you ask the bot.
• Email delivery: account emails (verification, password recovery, payment notices) are sent through our automation service and an email provider, which process the recipient address and the message content in order to deliver it.
• Google Analytics (website only): our public website uses Google Analytics, and only after you accept it in the cookie banner. The Wanance app itself carries no analytics.
• Infrastructure providers: hosting and the database run on a managed cloud provider with restricted access.
• Legal authorities: only when required by applicable law, court order, or valid legal process.

Some of the providers listed above (AI, email delivery, Google services and payment processing) store or process data on servers outside Colombia, mainly in the United States. By accepting this policy you authorize those transfers and transmissions, which are made only to providers bound by confidentiality and security obligations, and only with the data needed for each service.

As the owner of your data, under Article 8 of Law 1581 of 2012 you have the right to:

• Know, update and correct your personal data, including partial, inaccurate or incomplete data. You can do most of it yourself in Settings.
• Request proof of the authorization you gave us.
• Be informed, on request, about how we have used your data.
• Revoke the authorization and request deletion of your data when it isn't being processed according to the law. You can delete your account yourself from Settings — the deletion is immediate and permanent.
• Access your data free of charge: download a full backup (Settings → Your data) or a complete export of your account, and your movements and reports in Excel on the plans that include it.
• File complaints with the Superintendence of Industry and Commerce (SIC) after you have first contacted us.

How to exercise them: write to wanance.app@gmail.comor use Help & support in the app, saying who you are and what you request. We answer inquiries within 10 business days (extendable by 5) and claims within 15 business days (extendable by 8), as set by Articles 14 and 15 of Law 1581.

Retention: we keep your data while your account is active. When you delete it, we erase it, except for what the law requires us to keep (for example, invoices).

We use the following types of cookies:

• No session cookies: we do not use cookies to sign you in. Your session token is kept in your browser's localStorage and is sent with each request.
• Analytics cookies (website only): set by Google Analytics on our public website, and only if you accept them in the cookie banner. You can withdraw that consent from the same banner by clearing your browser data for the site.

We do not use advertising cookies or sell cookie data to third parties.

Wanance is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child under 16 has provided us with their data, please contact us at wanance.app@gmail.com and we will promptly delete the information.

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes at least 14 days before they take effect. Continued use of Wanance after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions or requests, please contact us at wanance.app@gmail.com or visit wanance.com.