Networthy exists to give you one honest picture of your own money. That only works if we are equally plain about what we do with the data behind it.
1337 ApS, Borggade 4H, 5. TV, 8000 Aarhus C, Denmark, CVR 35039686, is the data controller for the personal data described here. You can reach us at privacy@networthy.finance.
We do not use analytics, advertising or tracking of any kind on this site or in the application.
We process this data to provide the service you asked for — collecting your balances, valuing them and showing you the result over time. The lawful basis is performance of our contract with you. Where a connection needs your explicit consent, such as a bank consent under PSD2, that consent is given at your bank and can be withdrawn there or with us.
We do not sell your data, and we do not share it for anyone else's marketing.
Networthy is a hosted service. Your data lives on infrastructure we run on Cloudflare, and we hold it — not you. Each household gets its own database, isolated from every other.
Connection credentials — the keys and tokens that let us read your accounts — are encrypted with a key belonging to your household alone, which is itself wrapped by a key held outside the database. A copy of the database on its own does not yield them. Nothing else you see here is encrypted beyond what the platform does at rest: your balances and holdings are readable by us, because computing your net worth requires reading them.
Your data stays in the European Union. Each household's database is created under an EU restriction, so it can only ever be placed in a data centre inside the Union, and it does not move afterwards.
The service cannot work without reaching the places your money is. Each of these receives only what that job requires.
For as long as you keep your account, because the point of the service is the history. A daily record cannot be reconstructed later — no bank or broker will tell you what you held two years ago — so we do not delete it on a schedule.
When you delete your account, the encryption key protecting your connection credentials is destroyed, which renders them permanently unreadable, and your records are removed. Our host keeps point-in-time copies for a limited period for disaster recovery, and any remaining trace ages out with those.
Under the GDPR you can ask us to:
Write to privacy@networthy.finance and we will answer within one month. If you are unhappy with the response you can complain to the Danish Data Protection Agency (Datatilsynet).
Access is protected by passkeys. There is no password to guess, reuse or leak, and we recommend registering more than one — a hardware key and a synced passkey, for instance.
If you lose every credential you have registered, we cannot let you back in. There is no password to reset and no backdoor, which is the same property that stops anyone else getting in. Your financial history cannot be rebuilt from your providers either, so please keep a second credential or a recovery code somewhere safe.
If we change this policy we will update the date above, and tell you directly where the change is material.