Privacy Policy

Last updated: July 20, 2026 · Русская версия

Wallt is a personal and family finance tracker (the “Service”; available at wallt.ru, app.wallt.ru and in the Wallt mobile apps for iOS and Android). Wallt is built around one simple principle: your financial records belong to you. We don’t sell your data, don’t share it with ad networks, and don’t build profiles on it.

What data we store

Account data: your email address, your name (as you enter it), and a password hash (passwords are stored only as an irreversible PBKDF2 hash).
Your financial records: accounts, transactions, categories, budgets, exchange rates, and any images you upload for accounts and categories. You enter this data yourself; we do not connect to your banks and do not read bank statements.
Security log: sign-in times, IP address, and browser of recent sign-in events — shown to you in Settings so you can spot unauthorized access.
Technical server logs (IP address, request time) — kept for a limited time for abuse protection and diagnostics.

What we don’t do

We don’t sell or share your data with third parties for advertising or analytics.
We don’t use third-party trackers or ad scripts in the app.
We don’t request access to your bank accounts.
We don’t read the contents of your records — staff access to the database is limited to infrastructure maintenance.

Cookies and local storage

The app uses local storage (in your browser or in the mobile app) for your session (sign-in tokens), your preferences (theme, language), and offline mode: a copy of your latest data and a queue of transactions created while offline are stored on your device so the app keeps working without an internet connection. This data lives only on your device, is never sent anywhere except the Service, and is fully removed when you sign out. The marketing site wallt.ru does not set advertising cookies.

How your data is protected

All connections are HTTPS-only (TLS), including the API.
Passwords are stored as irreversible hashes (PBKDF2); API keys are stored only as SHA-256 digests.
Database backups are made daily and kept on our infrastructure with rotation.
Shared budget access is granted only to people you invite yourself, and only with the role you assign.

Emails

We send transactional emails only: an address verification code and a password recovery code. No newsletters, no ads.

Deleting your data

You can delete your account yourself in the app: Settings → Danger zone → Delete account. This deletes the account and all associated data: accounts, transactions, categories, budgets, images, API keys, and the activity log. The action is irreversible. Copies in backups disappear as they are rotated out (up to 14 days).

Your rights

At any time you can: export your transactions (CSV/Excel in the app), change your profile data, or delete your account entirely. For any questions about your data, write to us at privacy@wallt.ru.

Changes to this policy

If we make material changes, we will update this page and the date above. Continuing to use the Service after changes means you accept the new version.

← Back to home