← Wonderful

Privacy policy

In effect from October 13, 2026. Updated October 31, 2026.

What Wonderful keeps

Your login: your email address and name. You sign in with a code sent to your email; there is no password. It also keeps the days of the last month you opened the app (dates only) and your answer if it asks whether you're enjoying it, so it asks only people who keep coming back, and only once. And when you first sent Ask Wonderful a message (the time, not what you asked), so Home stops suggesting a first question.

Your money: the accounts you connect, their balances and transactions, and anything you upload or type in: paychecks, bills, goals, budgets, notes, and your answers to the questions the app asks (like your state, birth date or filing status).

Files you import: the transactions in them, kept like any other. The file itself isn't kept. Wonderful also keeps the column names of the file and which column was which, so the next file with the same columns reads right, and for 90 days a short record of each file read (its column names, how it was read, and whether it came in). Those never include a row of the file, an amount or the file's name. A kept layout notes which households confirmed it; the record of files read doesn't say who sent them.

Bank access: the token Plaid gives Wonderful to read your accounts is stored encrypted. It can read transactions; it can't move money.

What you tell it to remember: when you tell Wonderful something about your life in Ask Wonderful or by text ("we're saving for a house"), it keeps it in your words, stored encrypted, and uses it in its answers after that. It says so each time, word for word. Every one is listed on Plan under What Wonderful knows, where you can change or delete it, or you can text "forget that". One with an end ("until we're married") leaves its answers on that day, stays greyed on the list for 90 days, and is then deleted. They're all deleted with your account or your household.

Texts with Wonderful's number: if you turn on texts, Wonderful keeps a copy of each text between you and its number for 30 days: what it sent you, what you texted back or tapped, and that a photo came (never the photo). With each answer it also keeps what it looked up in your own Wonderful data to write it (the numbers it was shown, like a month's totals). It's kept so that when an answer is wrong, Wyatt can see what was said and fix the cause. It isn't shown in the app, isn't sent to any analytics, and isn't used to train anything. After 30 days it's deleted, and all of it is deleted with your household. Separately, the last day of texts (up to 16) is kept with your household so a reply still makes sense after Wonderful restarts; each one is dropped after a day.

Your chat with Ask Wonderful is shown from your own browser. While it goes on, the server holds the conversation in its memory so each answer follows from the last; it's dropped after a day without a message, or when the server restarts, and it's never written to the database or the logs.

AI apps you connect: if you connect an AI app like Claude or ChatGPT to Wonderful yourself (Settings, AI apps), it can read what you see in Wonderful, as you: your plan, spending and transactions, bills, accounts and net worth, taxes, reminders, and what you've told Wonderful to remember. It can't change anything or move money, and an account your partner set to totals only or hidden stays that way. Before anything goes to it, email addresses are taken out and any long number (an account, card or phone number) is cut to its last four. What you ask that app, and what Wonderful sends it to answer, goes to that app's company under its own privacy policy and terms, which Wonderful doesn't control. Wonderful keeps which apps you connected and when, and which of its tools each one used and when, never what you asked or what it answered, so Settings can show you. Disconnect one in Settings, AI apps and it stops at once, and that record is deleted with it.

A link you paste into Can I buy this? is opened once by Wonderful's server to read the product's name and price, with tracking parts of the link removed. The store sees a request from Wonderful's server, not from you, and Wonderful keeps neither the link nor the answer.

Wonderful doesn't use advertising trackers, and it never sells your data. It counts page views and a few steps in the app with PostHog, named below, and nothing more.

When a person looks

Wonderful is run by one person, Wyatt. What it keeps isn't encrypted against him: like the owner of any app, he could read it in the database. This is when he does, and when he doesn't.

He doesn't browse households. The app has no screen for looking at anyone else's money, and he doesn't use the database to.

He looks at one household's data only when someone in it asks for help with it, to fix something broken for that household, or when the law requires it. Then only what that needs, and when you asked for help, he tells you what he looked at.

To learn how Wonderful is used, he reads counts across households, like how many connected a bank, never one household's transactions.

The server's logs record what kind of thing happened ("answered a text", "sent 3 alerts"), never your amounts, places, names or messages. When something fails, the error is written down with the values taken out.

Sharing with a partner

In a household of two, each account you connect starts out shown to your partner in full. One account at a time, you can set it to totals only, so your partner sees each charge's amount, day and category but not where it was, or hide it entirely. What you mark as shared, the two of you both see.

Partners can see and change each other's plan: paychecks and what comes out of them, pay before tax, savings, debts, bills, goals and the split, and say whose a charge on the other's card is. When your partner changes something of yours, your Home says what and when until you dismiss it. Two things stay with their own person: an account set to totals only or hidden keeps its places from your partner, and only you can remove a bank login that holds your own accounts, since removing it deletes their history.

Something you tell Wonderful to remember stays yours unless you share it. Something about the two of you is shared, and Wonderful says so when it saves it. Your partner sees one you shared with your name on it, and can hide it from their own view but not change it. What you keep to yourself, your partner never sees, not even how many there are.

Who else sees it

Wonderful uses these services to run. Each gets only what it needs for its job, and each has its own privacy policy.

PlaidConnects your bank accounts. You sign in to your bank inside Plaid's window; Wonderful never sees your bank password. Plaid sends back your accounts, balances and transactions.
Together AIRuns the model behind Ask Wonderful (in the app, and when you text Wonderful's number), sorting merchants, the written advice, reading tax answers you type in your own words, and the daily review that looks over your recent charges for mistakes and possible fraud. When you use those, your question or what you typed or texted, and the numbers needed to answer it (transactions, your plan, and what you've told it to remember), go to it. The daily review sends your last few months of charges once a day, only the ones you can see in the app. If you text Wonderful a photo (a receipt, a bill, a payment request), the photo goes to it to be read for the place, amount and date; the photo itself is never kept by Wonderful. When you import a file whose layout Wonderful doesn't know, its column names and first 10 rows go to it, to work out which column is which. Wonderful's account has zero data retention turned on, so Together AI doesn't store what it's sent or what it answers. Together doesn't train models on a customer's data without that customer's consent, and Wonderful doesn't give it.
ExaSearches IRS and state tax pages when the assistant looks something up, and a company's own site for how to cancel it when you ask. Only general search words or that company's name go to it, never your name, amounts or employer.
ResendSends the sign-in codes, a welcome note from Wyatt after you sign up, email alerts and the Sunday money date, so it has your email address and what each email says.
GoogleOnly if you choose Continue with Google: you sign in on Google's page, and Google tells Wonderful your name and email address. Wonderful asks for nothing else from your Google account. Separately, when Plaid has no logo for a bank or a place you pay, Wonderful's server asks Google's icon service for the icon of its public website (like netflix.com), sending only that web address, never anything about you or who pays it.
DuckDuckGoWhen Google's icon for a bank or a place you pay is too small to show sharply, Wonderful's server asks DuckDuckGo's icon service for it instead, sending only the public web address (like xcelenergy.com), never anything about you or who pays it.
AppleOnly if you choose Continue with Apple: you sign in on Apple's page, and Apple tells Wonderful your name and email address, which can be a private address that forwards to yours. A passkey never involves Apple or Google: it stays on your device, and Wonderful keeps only its public key.
TelegramWhen you send feedback from the app, or reply to Wyatt's answer, a message on Wyatt's phone says so: your first name, whether it's a bug, an idea or a note, and its title. Never your email, the rest of what you wrote, or a screenshot; those stay in Wonderful and the email to Wyatt. If Wyatt answers by replying to that message in Telegram, his answer passes through Telegram on its way to you in the app.
StripeTakes the card and charges the subscription, on its own pages; Wonderful's server never sees the card number. It has the email of whoever added the card, the card, and the receipts, and keeps the receipts after a household is deleted, since payment records have to be kept.
NeonHosts the database where everything Wonderful keeps is stored.
Fly.ioRuns the app's server.
VercelServes the app's pages and this site.
PostHogCounts which pages of this site and the app are opened, when, and for how long, where a visit came from (the site that linked to it, or an ad's campaign name), and whether it was the website or the iPhone app. On this site it counts how far down a page was read, which button into the app came into view and which was pressed (by a fixed name for the button, such as the Sign in at the top), and that the split calculator was used (never the numbers). In the app it counts each thing you do by its name only (like adding a goal, turning an email off, or opening a panel), whether it worked and how long it took, never what you typed or chose. It also counts a few steps by name: signing in (whether it was a new account, and whether by email code or Apple or Google), a sign in step not working (which step, and only whether the server couldn't be reached, said too many tries, or said no), seeing, finishing or skipping a setup step and finishing all of setup, connecting a bank or the bank window closing without one (with Plaid's reason, never which bank), partner invites and a partner joining, subscribing, cancelling, coming back or switching between monthly and yearly (from Wonderful's server, when Stripe says so), your answer to whether you're enjoying the app, a thank you for coming back being shown and its free month unlocked (as days or money off, never an amount), a reply on feedback (by you or by Wyatt, and from where, never what it said), sending a guest pass link (copied or shared, not to whom), sending Ask Wonderful a message (where it started, never what it said), a thumbs up or down on an answer (and, after a down, which of a few fixed reasons), where you heard about Wonderful (as one of a few fixed choices), seeing money worth a look in setup (how many things, not how much), and handling or waving off a daily review finding. From Wonderful's server it counts each Ask Wonderful answer and each use of the AI (how long it took, which of the app's own tools it used, and how much of the model it used, never the question or the answer), each email or text sent, or not sent (by kind and the email service's error name, never to whom), and each one turned off (by kind), a number being confirmed for texts (never the number), an offer of texts turned down (and where it was), a question about a charge being texted (never which charge), a tap on one of those questions (which kind, and yes or no), a text about room to spend or spending running fast (which kind), and when you open the app from a link in one, which kind it was, a bank failing to update (Plaid's reason, never which bank), a bank's first update working (how many transactions came, never what they were), a card payment not going through (never the card or the amount), and a household being left or deleted, or a partner who never signed in being taken out, connecting or disconnecting an AI app (which app, such as Claude or ChatGPT), and each time a connected AI app uses one of Wonderful's tools (which app and which tool, never what was asked or answered). Once a day it notes counts about each household: how many people sign in, how many banks and whether one needs fixing, how many goals and budgets, and whether it's on a guest pass or paying. When one of the server's own regular tasks fails, it counts that by the task's name. When something in the app breaks, it gets the kind of error with every number taken out, which page it was on by the page's name (like the sign in page, never the address in your browser), and where in the app's own code it broke. It keeps one cookie, set by Wonderful on this site and the app, holding a random id for your browser, so a visitor is counted once and a visit is joined to the sign in it led to. It records no screens, and never gets an amount, a merchant, a bank's name or a person's name. In the app, a signed in person is known to it only by an internal id, never an email or a name, and a household by its own id. On this site it also counts visits from AI companies' crawlers (such as GPTBot or ClaudeBot), by the crawler's name and the page only; those are programs, not people.
PhotonSends texts, only if you add your number and confirm it, and passes on texts you send to Wonderful's number. It gets your phone number, each text Wonderful sends you (including its answers and any question with choices to tap), and anything you text back, tap or send, photos included. A text from you confirms your number, turns texts off when you text STOP, or, from a confirmed number, is answered by Ask Wonderful through Together AI, named above. Wonderful keeps a copy of the texts between you and its number (what it sent, what you texted or tapped, and that a photo came, never the photo), with what it looked up in your Wonderful data to write each answer, for 30 days, so a wrong answer can be found and fixed, then deletes them; see What Wonderful keeps. Once your number is confirmed, each kind of text below is on, and the first text says how to stop: text STOP to end them all, or tell Wonderful which kind you'd rather not get ("no texts about spending"), and it's remembered and not sent again. Alert texts say what happened, with the place and the amount, since texts show on a locked phone; tell Wonderful to leave those out and they only say what kind of thing is waiting. Texts about each new charge on your own cards over $100 (or the amount you tell it) name the place and amount too. Wonderful may text a question with choices to tap: about a charge it isn't sure of (at most one every two days), a charge the daily review found odd ("was this you?"), a bill charged twice, a bill whose price went up (keep it at the new price, or take it off your plan), or pay that came in at a different amount than your plan has (put the new amount on your plan, or keep it). Those name the place and the amount, so they can be answered. It also texts room left to spend near the end of a month, where last month's leftover should go, a heads up when spending runs fast, and big charges on a joint or shared account. When you ask Wonderful to remind you before a recurring charge ("remind me before Netflix renews"), it keeps the reminder (the charge, its expected date and how many days ahead) and sends it once, by text and email, only to you. When you ask it to watch a place for new charges ("tell me if the gym ever charges me again"), it keeps which place and tells only you, by text and email, each time a charge from it that you can see comes in, until you say stop. It never cancels or disputes anything. When you ask about something you just bought, Wonderful may check your banks for new charges first. Cash you tell it about by text is added to your transactions, under a Cash import you can remove in Settings, Accounts.

Wonderful shares your data with anyone else only if the law requires it.

Deleting it

In Settings you can disconnect any bank, which ends Wonderful's access at Plaid. You can leave a household, which deletes what was only yours and, if you choose, your login. You can delete the whole household, which ends its subscription so nothing more is charged, disconnects every bank, and then deletes everything it kept, and your login too if you choose; in a household of two who both sign in, it takes both of you asking. If you leave and the subscription is on your card, your card comes off it and nothing more is charged to you; it runs to the end of what's paid, and the one staying adds their own card to keep it.

Every email Wonderful sends about your money or getting started has a link at the bottom that turns that kind of email off, and the same switches are in Settings, Alerts. Emails about your subscription always come, since they say what happens to your card and banks.

One thing stays after a bank is disconnected or a household is deleted: a one-way print of each account connected (scrambled from the bank's name, the kind of account, its last four and its name, with a key only Wonderful's server has), with which household had it and when. It can't be turned back into the account, and it's only used to stop the same bank account from earning free days again in a new household.

If a household's guest pass or subscription ends and nobody pays, Wonderful emails a warning, and about a week after it ended disconnects its banks and removes the transactions they brought in. The rest of the household stays until you delete it.

Not advice

Wonderful gives general information from published sources, each linked where it's used. It isn't a financial or tax advisor.