Privacy policy

Last updated: October 18, 2026

This policy covers Winley Finance ("the app"): an iPhone app and the server it talks to. Winley Finance is a private app run by Joshua William Andrews (Josh Andrews) of Austin, Texas, for himself and his household. It is not offered to the public, and the only people whose financial data it holds are the members of that household.

What the app accesses through Plaid

The app connects to the household's bank, credit card and investment accounts through Plaid, using Plaid's Transactions product. The account holder signs in to each institution on Plaid's own pages; the app never sees or stores bank usernames or passwords. For each connected account, the app reads:

• the account's name, its type, the last digits of its number and its currency;
• its current balance;
• its transactions: the date, amount and description of each, and the merchant name, location and category Plaid gives for it.

The app does not use Plaid to move money, to verify identity, or to read full account and routing numbers.

Besides what comes from Plaid, the app holds what Josh adds himself: the categories and notes he writes on transactions, statements he exports from his own accounts, and the order history of his own Amazon account.

How the data is used

Only to run the household's own finances: to show accounts, balances and transactions; to categorize transactions and give them readable payee names; to track spending against the household's goal and net worth over time; to write a short monthly report; and to answer Josh's questions about his own money.

Where it is stored, and who can see it

• The data is stored in a database on Josh's own computer at home. The Plaid access tokens are kept apart from it, in a file only the server can read.
• The iPhone app keeps a copy of what it last downloaded, so it works offline. That copy is excluded from the phone's backups, and the app locks behind Face ID.
• The server is reachable from the internet only through Cloudflare, behind Cloudflare Access, which admits only Josh himself, his iPhone app and his own assistant (below), each with a credential he issued.
• Apart from the services listed below, only Josh and his household can see the data.

Services that process the data

Each service below receives only what it needs to do its one job for the app:

• Plaid, to connect to the financial institutions and fetch the data above. Plaid's handling of it is described in the Plaid End User Privacy Policy.
• Cloudflare, which carries the encrypted traffic between the iPhone app and the server, and hosts this website.
• Anthropic's Claude API, to turn transaction descriptions into readable payee names, to read and act on the notes Josh writes on transactions, and to write the monthly report from the month's spending figures.
• Google's Gemini models, through Google's Antigravity tool, to suggest a category for transactions the app's own rules could not place, and to write a short monthly note on spending against the household's goal.
• Public web search engines (such as DuckDuckGo), which receive the name and town of an unfamiliar merchant so the app can find its proper name. They receive no amounts and no account details.
• Apple Push Notification service, which delivers one morning notification to Josh's iPhone. It says how many transactions are waiting for review, names any bank that needs signing in to again or has stopped syncing, and counts the app's replies to Josh's notes. It carries no balances, amounts or transactions.
• Josh's personal AI assistant, which runs on his own computer. On his request it reads the app's data to answer his questions about his finances, and it manages the app's bank connections for him. Its answers are written by AI models from Anthropic, with xAI and Nous Research as fallbacks.
• Google Drive, which stores the server's backups. They are encrypted on Josh's computer before upload, so Google cannot read them.

What the app does not do

• It does not sell the data, or share it with anyone for advertising or marketing.
• It does not share the data with anyone other than the services above, which process it for the app.

Keeping and deleting data

• The data is kept for as long as the household uses the app, as its own financial records. The server also keeps a nightly copy of its database for 14 days, and the encrypted backups above.
• When a connection to an institution is no longer needed, the app removes it with Plaid (Plaid's Item removal), which ends the app's access to that institution, and deletes its access token.
• Anyone who connected an account can also revoke the app's access at any time, at my.plaid.com (Plaid Portal) or in their bank's security settings for connected apps.
• A household member can ask for their data to be deleted at the address below.

Changes

When what the app collects or who processes it changes, this page changes too, with a new "Last updated" date.

Contact

Joshua William Andrews, Austin, Texas
josh.external@gmail.com

Home · Terms of service