Privacy policy
Last updated 27 October 2026. Covers the Worthberry website and app.
- We collect what you give us and what you choose to link, and use it only to run Worthberry for you.
- Bank access is read-only, through Akahu. We never see your bank password and can't move money.
- Your data is stored in Australia and encrypted. We don't sell it. The free plan shows adsfrom partners, but your financial information is never used to choose them or shared with advertisers.
- The money digest is a weekly and a monthly email with a summary of your figures. When you set up Worthberry we ask whether you'd like it, with both ticked to start with. Untick them to leave it off, and turn it off any time.
- You can export or delete everything at any time.
Who we are
Worthberry is run by Rowl Limited, a New Zealand company ("we", "us"). We are responsible for your personal information under the Privacy Act 2020. Our privacy officer can be reached at privacy@worthberry.co.
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Name, email address, password (stored only as a one-way hash) | You, when you sign up | To create and secure your account and contact you about it |
| Bank, KiwiSaver and investment accounts: names, balances and transactions | Your banks and providers, with your consent, through Akahu, or statements you upload | To show your net worth, budgets and spending |
| Things you enter: property values, home loans, holdings, contribution rates, budgets, categories, notes | You | To include them in your figures |
| Public crypto wallet addresses | You | To read balances from public blockchains |
| Sign-in activity: time, IP address, browser and device type | Your device | To keep your account secure and show you where you're signed in |
| Feedback and support messages | You | To answer you and improve Worthberry |
| Waitlist email address | You, on our website | To invite you to Worthberry and email you while you wait |
We don't collect your bank passwords, card numbers or IRD number. You don't have to give us any financial information, but Worthberry can't show figures it doesn't have.
How we use it
- To run Worthberry: syncing your accounts, categorising transactions, working out totals, projections and reminders.
- To keep your account and our systems secure, including detecting unusual sign-ins.
- To send emails you need: confirming your address, password resets, security alerts and reconnect reminders.
- To send welcome and getting-started emails, and the occasional offer, while you're on the waitlist or in the private beta. Every one has an unsubscribe link.
- To send your money digest, if you keep it on: a weekly and a monthly email with the figures you choose to include. We offer it when you set up Worthberry, ticked to start with, and you can untick it then, or change it or turn it off at any time in Settings or from the link in every digest.
- To understand how Worthberry is used so we can improve it. Any product analytics we use never include your balances, transactions or other financial values.
We don't sell your information, use it to target advertising, or use it to make credit or lending decisions about you.
Your money digest
The money digest is a weekly email (on Mondays) and a monthly email (on the 1st) with a summary of your figures. When you set up Worthberry, we ask whether you'd like it, with both ticked to start with. Untick either to leave it off. After that, you can change what's in each, or turn either off, at any time in Settings or with the link in every digest. We only ever send it to an email address you've confirmed.
You choose what each digest shows: your net worth and how each part of it changed, or your spending totals, spending by category and your budgets. It never includes account numbers, individual transactions or a link that signs you in, and there are no figures in the subject line. We send it through Resend, our email provider, and never through Klaviyo, advertisers or anyone else.
Email isn't as private as the app: anyone who can read your inbox can read the digest. Only keep it on for an email address that only you use.
Ads on the free plan
The free plan (Seedling) shows ads from partners we work with directly. There are no ad networks, ad cookies or tracking pixels in Worthberry. Which ad you see depends only on the section of the app you're looking at and the country you've set in Worthberry's Settings, so you see offers available where you live and prices in your currency. Your country is never shared with partners. We count how many times each ad is shown and clicked, per section and per day, without recording who saw it, and those totals are all a partner receives. Clicking an ad takes you to the partner's own website, where their privacy policy applies. Paid plans have no ads.
Visits to our websites
Our websites, worthberry.co.nz and worthberry.co, use Google Analytics to see which pages are viewed, where visitors came from, and the type of device and browser. Analytics cookies, which let us tell new visitors from returning ones, are only set if you choose Accept in the cookie banner; otherwise visits are counted without cookies. You can change your choice any time with Cookie settings at the bottom of any page. Google receives your IP address, as with any website, and uses it to estimate your country and city. The app never uses Google Analytics, so nothing from your Worthberry account is ever sent to Google. See our cookie policy.
Who we share it with
We share information only with the services we need to run Worthberry, and only what each needs:
| Service | What they do | Where |
|---|---|---|
| Akahu | Open banking connection to New Zealand banks and providers, under your consent with Akahu | New Zealand |
| Google Analytics | Measures visits to our websites (pages viewed, where visitors came from, device and browser), with cookies only if you accept them; never anything from the app | United States and others |
| Stripe | Takes payments for paid plans (we never see your full card number) | United States, Ireland and others |
| Fly.io | Hosts the app, database and encrypted backups | Sydney, Australia |
| Resend | Sends our emails, including your money digest if you have it on (your email address and the message, which for the digest includes the figures in it) | United States |
| Klaviyo | Sends our waitlist and private beta welcome emails (your email address, first name, whether you're on the waitlist or in the beta, and whether you open or click its emails; never anything about your money) | United States |
| CoinGecko and public blockchain nodes | Crypto prices and wallet balances (coin names and public wallet addresses only) | Various |
The full, current list is on our service providers page.
Where information goes overseas, we only use providers that protect it in ways comparable to the Privacy Act, as required by information privacy principle 12. We'll also share information if the law requires it, or to protect someone's safety.
How we protect it
- All connections use HTTPS. Your data is stored in Australia on encrypted disks.
- The tokens that let us read your accounts through Akahu are encrypted separately with AES-256.
- Passwords are stored as one-way scrypt hashes. Two-step sign-in is available to everyone.
- Only the people who run Worthberry can access production systems, and only when needed to support you or keep the service running.
If a privacy breach is likely to cause serious harm, we'll tell you and the Privacy Commissioner as soon as we practicably can.
How long we keep it
- Your account data: while you have an account. When you delete your account we delete your data from our live systems straight away and withdraw our access through Akahu. Copies in encrypted backups are overwritten within 30 days.
- When you disconnect a bank, you choose whether to keep the history it brought in or delete it.
- If our access through Akahu ends without you disconnecting in the app (for example, you withdraw consent at my.akahu.nz), we stop syncing and delete the access token straight away. The accounts and transactions it brought in are deleted after 30 days unless you reconnect, so you don't lose your history by accident.
- Sign-in and security records: up to 13 months.
- Waitlist emails: until we invite you, or sooner if you ask.
- Your email address and first name in Klaviyo, our email service: until you delete your Worthberry account or ask us to remove them. Unsubscribing stops the emails straight away.
Your rights
You can ask to see the personal information we hold about you and ask us to correct it. Most of it you can see, change or export yourself in Worthberry (Settings → Your data). For anything else, email privacy@worthberry.co and we'll respond within 20 working days.
If you're not happy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and local storage
We don't use advertising cookies. Our websites set Google Analytics cookies only if you accept them in the cookie banner. The app keeps your sign-in and a few display choices in your browser's local storage. Our cookie policy lists each one.
Who Worthberry is for
Worthberry is for people aged 18 and over in New Zealand.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.