Wain privacy policy
In short. Wain reads the bank statements and bank SMS you give it and shows you where your money went. Your data is stored only on your phone, encrypted and left out of backups. Wain has no accounts, no analytics, no advertising and no tracking. It never connects to your bank and never moves money. Some features send data to an AI model, through our server and OpenRouter, to a host that keeps nothing after it replies, and that processing is not kept inside the UAE. The only thing our server keeps is a record that your copy of Wain is genuine, deleted on request.
Who is responsible
Wain is built and operated by its developer, who is the controller of the data described under “What leaves your phone”. Questions, requests and complaints: saiftalzaabi2@gmail.com. We reply by email.
What stays on your phone
Everything you import and everything Wain works out: statements, transactions, balances, the last 4 digits of cards and accounts, categories, your merchant rules, and the mobile number you enter for the SMS test. It lives in one database on the phone, encrypted with SQLCipher; the key stays in the phone’s Keychain or Keystore, for that device only. The database is excluded from iCloud and Android backups, so a new phone means importing again. A statement file you pick is deleted when the import finishes; only a fingerprint (hash) of it is kept so the same file is not imported twice. No statement password is ever stored.
Settings › Delete all data removes the database, its key, and any statement copy, export file or waiting bank SMS still on the phone. Deleting the app removes its data too. Notifications are created on the phone, not by a push service; a bank-SMS notification can show the amount and merchant, and is removed when you pick a category.
What leaves your phone, and to whom
Data leaves your phone only for the features below, and only when you use them. Each request goes over HTTPS to Wain’s own server, which passes it to OpenRouter, which passes it to an AI model host.
| Feature | What is sent |
|---|---|
| PDF import | The PDF goes to our server, which sends its full text to the model as printed: the holder’s name and address, account and card numbers, and every transaction line with any names in it. Wain stores none of the identity fields, only the transactions and the last 4 digits. |
| CSV import | Usually nothing. When Wain cannot tell the columns apart, it sends the column headers and the shape of the values (for example “looks like a date”), never the values. |
| Categorizing | The merchant and payee names Wain cannot file by itself. Rows that look like health, education or family spending (clinics, pharmacies, schools, domestic workers) are never sent. |
| Bank SMS | With the iPhone automation on, the whole text of a bank alert, after Wain masks card, account and IBAN numbers (including the last 4 digits), your name in the greeting, reference numbers, links, and any code or PIN. Amounts and balances stay. One-time codes, declined-payment alerts, health and education messages, and messages from senders that are not a bank are never sent. |
| Ask | Your question, the conversation so far, today’s date, the currency, which months have data, and the figures Wain looked up on the phone to answer: totals, sums per category and merchant, and at most 20 transaction rows per look-up (date, the start of the description, merchant, category, amount). Descriptions can include people’s names. |
| Insights | The month’s totals per category and the names of well-known brands. Never single transactions or the names of people. |
Who receives it:
- Wain’s server, a Cloudflare Worker we run on Cloudflare, Inc. (USA). It is stateless: nothing from a request is written to disk, and we keep no logs. Cloudflare keeps request metadata (status, timing).
- OpenRouter, Inc. (USA), which routes the request to a model host. We have not enabled its prompt logging; OpenRouter keeps billing metadata such as timestamps and token counts.
- The model host: only hosts that commit to zero data retention and no training on what they receive, so they keep nothing after the reply. At present Fireworks AI, Inc. (USA), or another host of the same model with the same commitments. A request is never sent to a host that may keep it.
- Apple, when your copy of Wain is first verified as genuine and again if that verification is lost (App Attest, next section). Apple’s privacy policy applies.
The model never produces a number you see: every total and chart is computed on your phone from your own database. The model only reads statement lines, proposes categories, or explains figures Wain already computed.
Processing outside the UAE
Wain’s server runs on Cloudflare’s global network and the model hosts are in the United States, so the processing above is not kept inside the UAE. Wain makes no claim to process data in the UAE. Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) this transfer rests on your explicit consent: each screen that sends data says so before you use it, and using it is your consent. You can withdraw it at any time (see “Your choices and rights”).
The install record
Before its first AI request, your iPhone proves to our server that it is a genuine copy of Wain, using Apple’s App Attest. Our server then keeps one record per installation: the App Attest public key and its identifier, the environment (production or development), a counter, a revoked flag, and when the installation was first and last seen. Its purpose is to let only genuine copies of Wain use the AI features, which cost us money per request. It holds no name, no Apple ID, no advertising identifier and nothing from your statements. A device that cannot attest (Android, at present) gets no AI features and leaves no record.
The record is kept until you ask us to delete it. Delete all data and deleting the app do not delete it, and the phone may keep using the same key afterwards, since the key lives in the phone’s Keychain. To have it deleted, email us and say roughly when you first and last used Wain’s AI features; we will find the record, delete it and confirm by email.
What Wain never does
- No accounts, no sign-in, no email address or phone number collected by us.
- No analytics, crash reporting, advertising or tracking code. Nothing is sold or shared for marketing.
- No connection to your bank. Wain reads only the files you give it and the SMS you choose to forward. It cannot see your accounts, hold money or move money.
- No financial advice. Wain shows what your statements say and explains figures it computed. It does not recommend products or tell you what to do with your money.
Your choices and rights
Consent. Every screen that sends data says what leaves the phone before you use it. The AI features have no separate switch. To withdraw consent, stop using them: import CSV instead of PDF, leave Ask alone, turn off the bank-SMS automation in the Shortcuts app, and delete all data in Settings if you want nothing left.
Your rights under the UAE Personal Data Protection Law include access, correction, erasure, a portable copy, restriction of or objection to processing, objection to automated decisions, and a complaint to the UAE data protection authority. Because your data is on your phone, you exercise most of them yourself: view and edit any transaction, export your transactions as CSV (Settings › Your data), and delete everything with Delete all data. Categorizing is automated but has no legal effect on you, and you can change any category. For the install record, or anything else, email us.
Security
The database is encrypted at rest with a key that never leaves the phone. Every request to our server uses HTTPS, the server accepts AI requests only from attested installations, and the model API keys live on the server, never in the app. There is no copy of your data anywhere else: if the phone is lost or the app deleted, the data is gone.
Changes
Changes are posted on this page with a new effective date. The app links here from Settings › Your data and from its first-run screen.