Privacy Policy

Last updated: June 2026

This Privacy Policy describes how UtilityWorth ("the App", "we", "us") collects, uses, and protects your information when you use our application and visit our website. We are committed to being transparent about our practices.

1. Data Controller

The data controller responsible for your personal data is:

Matteo Gibin
Email: support.utilityworth@gmail.com

2. Data We Collect and Why

2.1 Account Data (Firebase Authentication)

To use UtilityWorth, you create an account with your email address and a password. This information is processed by Firebase Authentication (Google LLC) to verify your identity and allow you to log in securely across devices. We do not store passwords — they are handled entirely by Firebase.

Legal basis: Performance of a contract (providing the App service you signed up for).

2.2 Financial Data (Firebase Firestore)

The financial data you enter in the App — transactions, income, expenses, portfolio holdings, savings goals, budgets — is stored in Firebase Firestore (Google LLC), a cloud database. This allows your data to be available on multiple devices and protected from loss if you change or reset your device.

We do not read, analyze, or share your financial data. It is accessible only to you, identified by your account.

Legal basis: Performance of a contract (providing the core features of the App).

2.3 Stock Price Lookups

When you use the Portfolio feature, the App sends requests to Yahoo Finance to fetch live stock and ETF prices. These requests contain only the ticker symbols you have added (e.g., "AAPL", "MSFT") and your device's IP address, which is a standard part of any internet request. No personal or financial data is included.

2.4 Website

Our website (utilityworth.app) does not use cookies, analytics scripts, or any form of tracking technology. No personal data is collected when you visit the website.

3. Data Storage and Security

Your account and financial data are stored on Google's Firebase infrastructure, in the europe-west6 region (Zurich, Switzerland). Firebase is certified under ISO 27001, SOC 1, SOC 2, and SOC 3 standards. Data is encrypted in transit (TLS) and at rest.

Access to your data is protected by your account credentials. We strongly recommend using a unique, strong password and keeping your device secure.

4. Data Transfers

Your data is stored in Switzerland, which has been granted an adequacy decision by the European Commission under GDPR. This means your data benefits from equivalent protection to that required within the EU/EEA, and no additional transfer safeguards are required.

For more information about Firebase's data practices, see Firebase's privacy information.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, your financial data and account information will be permanently deleted from Firebase within 30 days.

If you simply delete the App without deleting your account, your data remains stored on Firebase so you can access it if you reinstall the App.

6. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete the account promptly.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at support.utilityworth@gmail.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice. The updated policy will always be available at this URL with the revision date shown at the top.

9. Contact

For any privacy-related questions or requests, please contact us at:

support.utilityworth@gmail.com