Introduction
Mindil Wealth ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how data is handled when you use our application, available on iPad and Apple silicon. The App is published by Mindil Advisory Services Limited (NZ company no. 9392892).
Mindil Wealth is a local-first application. Most of the data you work with in the App lives on your device and never reaches us. Three distinct categories of data exist, each handled differently. They are described below.
Data You Enter Into the App
When you use the App, you enter information including portfolio holdings, transaction data, brokerage credentials, bank account details, banking transactions imported from connected accounts, watchlist selections, goal parameters, property and mortgage details, handwritten annotations, third-party API keys, and any text typed or spoken to the AI chat assistant or in-app support chat.
This data is stored locally on your device in a local-only store, protected at rest by iOS Data Protection — hardware-backed encryption tied to your device passcode. Credentials and API keys are stored in the Apple Keychain. There is no cloud database holding your data. When you speak to Arya, speech is recognised on your device and raw audio does not leave it.
You may create an encrypted backup to iCloud Drive. Backups are encrypted with AES-256-GCM before they leave the device, under a passphrase the App generates; that passphrase is saved to your iCloud Keychain so you can restore on a new device. If you turn on Device Continuity, updates are sealed with AES-256-GCM under a key held by your devices before being written to your own iCloud Drive, so the stored copy is unreadable without your devices' key. Data you store in iCloud Drive or iCloud Keychain is also subject to Apple's privacy policy.
You may also transfer a portfolio to another device nearby. Nearby transfers run over an authenticated, encrypted connection directly between the two devices with no server in between.
We don't receive or keep copies of this data, apart from the limited proxy items described below.
Data That Transits Mindil Wealth Infrastructure
Bank and SnapTrade connections, market data and news, and app verification (Apple App Attest) pass through an edge proxy we operate. It doesn't log request contents and keeps only what those connections need: bank activity notifications for up to an hour until your device collects them, connection credentials and your device's verification key for up to a year after last use, and cached public market data. None of it is linked to your name or email address.
AI requests do not transit Mindil Wealth infrastructure. Requests to Anthropic or OpenAI go directly from your device to the provider using your own key. Apple Private Cloud Compute and Apple's on-device model are accessed through Apple's frameworks, and a self-hosted model is reached directly on your own network.
Data You Send to Mindil Wealth Directly
If you contact us — for example by emailing contact@mindil.app — the contents of that correspondence are received and stored by our email provider. Emails are retained for the period reasonably necessary to respond to your enquiry and to maintain records of professional correspondence. Email contents are not shared with third parties except where required by law.
This is the only category of data of which Mindil Wealth is the controller in any meaningful sense.
How the App Uses Your Data
The App uses the data you enter to provide its core functionality on your device: portfolio tracking, performance analysis, AI-powered insights, banking and spending insights, net worth tracking with What-If projections, deterministic projection modelling, research tools (including FX and commodities), tax analysis, real estate analysis, mortgage detection, annotation interpretation, voice conversation, in-app support, report generation, encrypted peer-to-peer sharing, and Device Continuity between your own devices.
The App does not use your data for advertising, profiling, or any purpose unrelated to delivering its features. Where you have configured a third-party AI provider, the App may transmit relevant context directly from your device to that provider, scoped according to your in-app consent settings. Such transmission is governed by the provider's own privacy policy.
Third-Party Services
The App may connect to third-party services you explicitly configure, including brokerage integrations (Sharesight, SnapTrade), open banking providers (Akahu, Finverse), AI model providers (Apple Private Cloud Compute, Anthropic, OpenAI, Apple's on-device model, or a self-hosted model on your own network), and a provider-blind managed market-data and news surface. Data transmitted to these services is governed by their respective privacy policies. External connections are encrypted in transit using TLS.
Data Sharing
We do not sell, rent, or share your personal data with third parties. Your portfolio data is not stored on Mindil Wealth-operated servers. Data leaves your device only for the connections and AI requests described above, or when you generate an encrypted .wealthpackage to share with a recipient of your choosing — in which case the package is end-to-end encrypted under a passphrase you set.
Data Security
We employ layered security including a local-only data store protected at rest by iOS Data Protection, AES-256-GCM encryption for backups, shared packages, and Device Continuity data before they leave the device, Apple Keychain for credential storage, TLS on external connections, app lock (Face ID / Touch ID / Optic ID / passcode) with the app hidden in the app switcher, prompt-injection sanitisation on all AI inputs, and consent-tier governance over what data reaches the AI layer.
Data Retention & Deletion
All data is stored on your device. You can delete all App data at any time by removing the App from your device, or by using the in-app data management features. Encrypted backups and Device Continuity data you have stored in your own iCloud Drive remain there until you delete them. Apart from the limited proxy items described above, we retain no copies of your data on any server.
Children's Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children.
Beta Programme
Mindil Wealth is currently in private beta. While security architecture and data handling are designed to production standards, beta software may contain defects affecting data integrity. Users should maintain independent backups of financial data and exercise additional caution when relying on outputs during the beta period.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date above and made available within the App and on this page.
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at contact@mindil.app.