What WIMM Does Not Do With Your Data, and Why It Matters

If you read a finance app's privacy policy and your eyes do not glaze over, you usually find one of two things. Either the company sells aggregated data, anonymized data, or "non-personal" data to advertisers, lenders, or unspecified "partners". Or the company has spent so much on lawyers writing the policy that you cannot tell whether it does or not.

A lock over a laptop, representing the privacy of your data

WIMM's privacy posture is short enough to put on one page, and it boils down to this. The only money WIMM makes is the subscription you pay. No ads. No data sales. No "non-personal" anything sold to anyone. The reason WIMM can credibly say that is not that the founders are nobler than the next person. It is that the business model does not require a data revenue stream.

What is not in the WIMM app

Most finance apps run third-party analytics inside the app. That is what powers the "personalized offers" you see, and what gets sold downstream. WIMM does not.

You can verify this yourself. Pull up app.wimm.money in your browser, open the Network tab in DevTools, and watch what loads. You will see WIMM's own API calls, Plaid Link when you connect a bank, Sentry's error-only tracker, and that is it. No Google Analytics tag. No Meta Pixel. No LinkedIn Insight Tag. No advertising third parties of any kind.

The marketing site at wimm.money is a separate property. It loads PostHog for visitor counts so we know which articles people actually read. PostHog is configured with no behavioral cookies and no user identification. It never runs inside the logged-in app. You can disable it with any tracker blocker without affecting the product.

What WIMM does pay for

This is the question that matters. If a company is not making money from your data, where is the money coming from? Here is the full list of third parties WIMM pays so the app works:

Plaid: the bank connection that pulls your transactions when you opt into sync. Per-bank, real cost. WIMM pays roughly $5 a year per linked bank.
Anthropic, OpenAI, DeepSeek: the three AI providers behind transaction categorization, AI strategy advice, and the natural-language queries. Per-call, real cost.
Resend: transactional email only (password resets, household invitations, bill reminders if you are on Premium). Never marketing email without your opt-in.
Vercel: web hosting.
Neon: the Postgres database that stores your encrypted data.
Cloudflare: DNS, TLS, and bot protection.

Every line on that list is a service that costs money to run and that WIMM cannot avoid. None of them get to read your raw financial data in a form they could resell. Plaid sees your bank credentials only during the link flow and never stores them in WIMM. The AI providers see only transaction text and only at the moment of categorization. Resend never sees your transactions at all. That is the whole list.

What WIMM does NOT spend money on

Equally important is what is not on the list.

Ad networks. No Facebook Ads, no Google Ads, no LinkedIn campaigns. Customer acquisition is word of mouth, our /reviews page, and search.
App store fees. WIMM ships as a Progressive Web App precisely so it does not have to give Apple or Google 30 percent of every subscription.
VC investors who need a return. WIMM is bootstrapped. Investors do not get to insist on a data-monetization strategy, because there are no investors.
Bank affiliate kickbacks. WIMM is a Plaid customer, not a Plaid partner. There are no "recommended" loans or credit cards in the app that pay WIMM a referral fee.

Most of the privacy concerns in finance apps trace back to one of those four lines. Not having any of them is unusual, and it is the reason WIMM can credibly say "no data sales" without hedging.

What is encrypted, and where

A person typing on a keyboard behind frosted glass, evoking encryption and digital privacy

The technical disclosures, for completeness:

All data at rest is encrypted with AES-256-GCM, including your Plaid access tokens, your TOTP secrets, and your hashed backup recovery codes.
All data in transit is TLS 1.2 or higher, enforced at the Cloudflare edge.
Every database query is scoped to your userId at the application layer (defense in depth on top of database-level access controls).
Two-factor authentication is TOTP based, with bcrypt-hashed backup codes.

If WIMM ever shuts down, every user gets a final data export and 90 days of read-only access. That commitment is in writing on the /security page and in our customer agreement.

The honest counterpoint

A person reviewing a printed receipt, representing clear and transparent billing

The honest version of "no data sales" is that WIMM's business model only works if enough people pay for it. If the subscription tier collapses, the company collapses. There is no fallback ad business.

For most people, that is a feature, not a bug. The pressure to keep you paying is the pressure to make the product genuinely useful, not the pressure to keep your eyeballs on the screen long enough to sell another impression.

Try it now

If you want to look under the hood before deciding, the /security page lists every third party WIMM uses and what each one sees. The marketing /about page gives the funding and ownership story. The live demo opens with a sample household so you can use the app without creating an account: app.wimm.money/demo.