Privacy Policy

Who Can Use WeLeap

WeLeap is intended only for individuals who are 18 years of age or older. By creating an account or using our services, you confirm that you are at least 18.

We do not knowingly collect personal information from children under 13, and our services are not directed to children. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@weleap.ai.

What We Collect

• Information you provide: This may include your name, email address, mobile phone number, financial goals, preferences, and basic demographic information.
• Financial data, with your consent: If you choose to connect financial accounts, we may collect transaction, balance, and account information through integrations such as Plaid.
• Communications information: If you sign up to receive email or SMS communications from WeLeap, we may collect your email address, mobile phone number, communication preferences, message delivery status, and related metadata.
• Usage data: We may collect information about how you interact with WeLeap so we can improve the product, personalize your experience, and make our recommendations more useful.

How We Use Your Information

• Generate personalized financial reports, insights, reminders, alerts, and recommendations.
• Help you understand your income, spending, savings, debt, and financial goals.
• Provide onboarding, customer support, product updates, and service-related communications.
• Send email communications through providers such as Postmark.
• Send SMS/text messages through providers such as Twilio, if you opt in.
• Improve our models, recommendations, and services, including through anonymized and aggregated analysis.
• Maintain the security, reliability, and performance of our services.

SMS/Text Messaging

If you provide your mobile phone number and opt in to receive text messages from WeLeap, we may send you SMS messages related to your account, onboarding, product updates, financial sidekick notifications, reminders, alerts, and other service-related communications.

Message frequency may vary based on your account activity, preferences, and use of WeLeap. Message and data rates may apply.

You may opt out of receiving SMS messages at any time by replying STOP to any text message from us. You may request help by replying HELP.

We use Twilio and related service providers to deliver SMS messages. These providers process mobile numbers and message-related information only as needed to provide messaging services on our behalf.

We do not sell, rent, share, or disclose your mobile phone number, SMS opt-in information, or text messaging consent to third parties or affiliates for their marketing or promotional purposes.

Email Communications

We may send you emails related to your account, onboarding, product updates, financial sidekick notifications, waitlist updates, newsletters, and other relevant communications.

We may use Postmark and related service providers to deliver and manage these emails. These providers may process your email address, message content, delivery status, open/click information, bounce information, unsubscribe information, and related metadata only as needed to provide email delivery, analytics, compliance, and security services on our behalf.

You may unsubscribe from marketing emails by using the unsubscribe link included in those emails. We may still send you transactional or service-related emails when necessary to operate your account, provide requested services, or communicate important updates.

How We Share Information

We may share information with trusted service providers that help us operate WeLeap, such as account connection providers, hosting providers, analytics providers, customer support tools, SMS providers, and email delivery providers. Our analytics are limited to understanding how the product is used and improving it — we use PostHog and Google Analytics for that, and we do not use advertising or retargeting pixels.

For example, we may use Plaid to help connect financial accounts, Twilio to send SMS/text messages, and Postmark to send email communications.

These service providers are only authorized to use your information as needed to provide services to WeLeap. We do not permit them to use your personal information for their own marketing purposes.

We may also share information if required by law, to protect our rights, to prevent fraud or abuse, or with your consent.

What We Don't Do

• We do not sell your personal information.
• We do not run advertising or retargeting trackers on our site or app.
• We do not access your financial accounts without your permission.
• We do not sell your financial data.
• We do not share your financial data with third parties for their own marketing purposes.
• We do not sell, rent, share, or disclose your mobile phone number, SMS opt-in information, or text messaging consent to third parties or affiliates for marketing or promotional purposes.

Your Rights and Choices

• You can view, update, or delete your data at any time. Both are available directly in the app under Profile — see Closing Your Account below.
• You can opt out of marketing emails by using the unsubscribe link in our emails.
• You can opt out of SMS messages by replying STOP.
• You can choose not to connect financial accounts or disconnect connected accounts where supported.
• You can update your communication preferences or request help by contacting us.

Closing Your Account

You can close your WeLeap account at any time from inside the app, without contacting us. Go to Profile, then under Security & Data choose Close my account. You do not need to email us, and we will not ask you to complete a further step to make the request effective.

Closing your account does the following:

• Immediately revokes any connections to your financial accounts, so WeLeap stops receiving data from them.
• Removes your profile, financial information, goals, and plan history from our active systems.
• Cancels any further email or SMS communications, other than a confirmation that the deletion took place.

Closing your account is permanent and cannot be undone. Two related controls sit next to it, and they do different things: Delete my data erases the information we hold about you but leaves your account open, and Download my data gives you a copy of it first. If you only want to stop sharing a particular bank account, you can disconnect it on its own without using any of these.

If you cannot access the app for any reason, you can also request deletion by emailing support@weleap.ai from the address associated with your account. This is an alternative route, not a requirement.

How Long We Keep Your Information

We keep personal information only for as long as we need it to provide the service, and then for the limited periods described below.

• While your account is open: we retain your information for as long as your account remains active, so that WeLeap can keep producing your plan and recommendations.
• After you delete your account: we remove your personal information from our active systems within 30 days.
• Backups: residual copies may persist in encrypted backups for up to 90 days after deletion, after which they are overwritten on our normal backup cycle. We do not restore deleted accounts from backups.
• Financial account connections: access tokens for connected accounts are revoked immediately when you disconnect an account or delete your account.
• Records we are required to keep: we may retain limited records for longer where the law requires it, or to resolve disputes, prevent fraud and abuse, and enforce our agreements. Where we do this, we keep only what is necessary for that purpose.
• Opt-out records: if you unsubscribe from email or reply STOP to SMS, we keep a minimal record of that choice indefinitely. This is what allows us to honor your opt-out; deleting it would risk contacting you again.
• Anonymized and aggregated data: information that can no longer be linked to you or your device may be retained indefinitely and is not subject to the periods above.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights set out below. We extend these rights to all California residents who use WeLeap.

• Right to know: to request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to. You can get a copy yourself at any time using Download my data under Profile.
• Right to delete: to request deletion of the personal information we hold about you, subject to the exceptions the law allows. You can also do this yourself at any time using Delete my data or Close my account under Profile — see Closing Your Account above.
• Right to correct: to request that we correct inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not run advertising trackers on our site or app, so there is nothing here to opt out of. If that ever changes we will update this policy and provide a way to opt out before it does.
• Right to limit use of sensitive personal information: financial account information is treated as sensitive personal information under California law. We use it only to provide the service you asked for, and not to infer characteristics about you.
• Right to non-discrimination: we will not deny you service, charge you a different price, or give you a lower quality of service for exercising any of these rights.

Categories we collect. In the past 12 months we may have collected identifiers (such as name, email address and phone number), commercial and financial information (such as account balances and transactions, where you have connected an account), internet and network activity (such as how you interact with our site and app), and inferences drawn from that information to produce your plan and recommendations. The sources, purposes and recipients are described in the sections above.

How to exercise these rights. Use the in-app controls where they exist, or email support@weleap.ai with the subject line “California Privacy Request”. We will verify your request by confirming control of the email address on the account, and may ask for additional information if we cannot verify you from that alone. We will respond within 45 days, and will tell you if we need a further 45 days.

You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you gave them permission, and may ask you to verify your identity with us directly.

Security

We use reasonable administrative, technical, and organizational safeguards to protect your information. This includes encryption, secure infrastructure, access controls, and trusted third-party service providers.

No system can be guaranteed to be 100% secure, but we work to protect your information and use security practices appropriate for the sensitivity of the data we handle.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, in-app notice, or other appropriate means.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: support@weleap.ai