Privacy policy
Last updated 17 October 2026. Covers the Worthberry website and app.
- We collect what you give us and what you choose to link, and use it only to run Worthberry for you.
- Bank access is read-only, through Akahu. We never see your bank password and can't move money.
- Your data is stored in Australia and encrypted. We don't sell it. The free plan shows adsfrom partners, but your financial information is never used to choose them or shared with advertisers.
- You can export or delete everything at any time.
Who we are
Worthberry is run by Rowl Limited, a New Zealand company ("we", "us"). We are responsible for your personal information under the Privacy Act 2020. Our privacy officer can be reached at privacy@worthberry.co.
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Name, email address, password (stored only as a one-way hash) | You, when you sign up | To create and secure your account and contact you about it |
| Bank, KiwiSaver and investment accounts: names, balances and transactions | Your banks and providers, with your consent, through Akahu, or statements you upload | To show your net worth, budgets and spending |
| Things you enter: property values, home loans, holdings, contribution rates, budgets, categories, notes | You | To include them in your figures |
| Public crypto wallet addresses | You | To read balances from public blockchains |
| Sign-in activity: time, IP address, browser and device type | Your device | To keep your account secure and show you where you're signed in |
| Feedback and support messages | You | To answer you and improve Worthberry |
| Waitlist email address | You, on our website | To invite you to Worthberry |
We don't collect your bank passwords, card numbers or IRD number. You don't have to give us any financial information, but Worthberry can't show figures it doesn't have.
How we use it
- To run Worthberry: syncing your accounts, categorising transactions, working out totals, projections and reminders.
- To keep your account and our systems secure, including detecting unusual sign-ins.
- To send emails you need: confirming your address, password resets, security alerts and reconnect reminders.
- To understand how Worthberry is used so we can improve it. Any product analytics we use never include your balances, transactions or other financial values.
We don't sell your information, use it to target advertising, or use it to make credit or lending decisions about you.
Ads on the free plan
The free plan (Seedling) shows ads from partners we work with directly. There are no ad networks, ad cookies or tracking pixels in Worthberry. Which ad you see depends only on the section of the app you're looking at. We count how many times each ad is shown and clicked, per section and per day, without recording who saw it, and those totals are all a partner receives. Clicking an ad takes you to the partner's own website, where their privacy policy applies. Paid plans have no ads.
Who we share it with
We share information only with the services we need to run Worthberry, and only what each needs:
| Service | What they do | Where |
|---|---|---|
| Akahu | Open banking connection to New Zealand banks and providers, under your consent with Akahu | New Zealand |
| Stripe | Takes payments for paid plans (we never see your full card number) | United States, Ireland and others |
| Fly.io | Hosts the app, database and encrypted backups | Sydney, Australia |
| Resend | Sends our emails (your email address and the message only) | United States |
| CoinGecko and public blockchain nodes | Crypto prices and wallet balances (coin names and public wallet addresses only) | Various |
The full, current list is on our service providers page.
Where information goes overseas, we only use providers that protect it in ways comparable to the Privacy Act, as required by information privacy principle 12. We'll also share information if the law requires it, or to protect someone's safety.
How we protect it
- All connections use HTTPS. Your data is stored in Australia on encrypted disks.
- The tokens that let us read your accounts through Akahu are encrypted separately with AES-256.
- Passwords are stored as one-way scrypt hashes. Two-step sign-in is available to everyone.
- Only the people who run Worthberry can access production systems, and only when needed to support you or keep the service running.
If a privacy breach is likely to cause serious harm, we'll tell you and the Privacy Commissioner as soon as we practicably can.
How long we keep it
- Your account data: while you have an account. When you delete your account we delete your data from our live systems straight away and withdraw our access through Akahu. Copies in encrypted backups are overwritten within 30 days.
- When you disconnect a bank, you choose whether to keep the history it brought in or delete it.
- If our access through Akahu ends without you disconnecting in the app (for example, you withdraw consent at my.akahu.nz), we stop syncing and delete the access token straight away. The accounts and transactions it brought in are deleted after 30 days unless you reconnect, so you don't lose your history by accident.
- Sign-in and security records: up to 13 months.
- Waitlist emails: until we invite you, or sooner if you ask.
Your rights
You can ask to see the personal information we hold about you and ask us to correct it. Most of it you can see, change or export yourself in Worthberry (Settings → Your data). For anything else, email privacy@worthberry.co and we'll respond within 20 working days.
If you're not happy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and local storage
We don't use advertising or tracking cookies. The app keeps your sign-in and a few display choices in your browser's local storage. Our cookie policy lists each one.
Who Worthberry is for
Worthberry is for people aged 18 and over in New Zealand.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.