Privacy Policy

Walleaf ("the App", "we", or "us") values your privacy. This policy explains how we handle information related to your use of the App.

Walleaf is designed to minimize our access to your personal financial records. Under normal use, you do not need to provide your name, email address, or directly identifiable account information. Your account names, transaction records, holding costs, debts, other assets, and most preferences are primarily stored locally on your device.

To provide stock prices, exchange rates, and market data updates, the App may send necessary query information to backend services, such as asset type, stock symbol, cryptocurrency symbol, or currency pair. This information is used to query third-party data sources and return results to the App.

We do not receive or store your complete transaction history, account balances, holding costs, net worth details, or data that could reconstruct your personal ledger through normal bookkeeping use.

1. Scope

This policy applies to the Walleaf iOS application, backend services connected for functions such as prices and exchange rates, and policy pages accessed through links in the App. It does not apply to the privacy practices of Apple, iCloud, brokerages, exchanges, quote providers, or other third-party services.

2. Information We Collect and Process

2.1 Information Stored on Your Device

The following data is created and managed by you and is primarily stored locally on your device:

• Account names, account types, and currencies;
• Transactions, holdings, costs, debts, and other asset records;
• Interface preferences;
• Temporary demo data used in demo mode.

If you export a backup file, you choose where to store and protect that file. We cannot access your iCloud account contents and cannot restore a lost backup on your behalf.

2.2 Information Sent to Backend Services

To provide quotes, exchange rates, and service stability, Walleaf may process necessary information through third-party backend databases, API services, and market data sources, such as:

• Anonymous identifiers or access tokens used for basic verification, abuse prevention, and rate limiting;
• Asset types, symbols, and currencies used to obtain prices, historical closes, and exchange rates;
• Request time, status codes, and technical connection logs used to maintain service stability and debug issues.

This data does not include your complete account details, transaction records, holding costs, or personal net worth.

2.3 Device Permissions

• Face ID, Touch ID, or device passcode: When you enable privacy lock, authentication is handled by iOS. We do not collect or store biometric data.
• Photos: Used only when you choose to save shared chart images to your photo library.

2.4 Subscriptions and Payments

Walleaf Plus subscriptions, payments, cancellations, and refunds are handled by the Apple App Store. We use Apple's mechanisms to verify subscription status and do not store your credit card number. Subscriptions are tied to your Apple ID and are separate from your local bookkeeping data.

3. How We Use Information

We use the information described above to provide bookkeeping, asset summaries, gain/loss and trend displays; query and cache prices and exchange rates; support backup and restore; provide privacy lock, themes, and personalization; prevent abuse and maintain service security; respond to support requests; and comply with applicable laws or lawful authority requests.

4. Sharing and Third Parties

We do not sell your personal data. To provide App functionality, we may use third-party backend databases, cloud services, quote and exchange-rate data sources, and Apple services for subscriptions and App distribution. These services are used only for necessary functions such as market data queries, subscription verification, service stability, and support.

5. Retention and Deletion

• Local data remains in the App sandbox until you delete the App, restore over it, or clear it yourself.
• Backup files are managed by you, and you are responsible for deleting or protecting them.
• Backend anonymous identifiers, API logs, symbol queries, and other technical data are retained as needed for operations and service settings, then deleted or anonymized.

If you wish to delete technical data related to backend anonymous identifiers, contact support@walleafapp.com. We will assist within technically feasible limits.

6. Data Security

We use reasonable technical and organizational measures to protect transmission and backend data, such as HTTPS, access controls, and rate limiting. However, internet transmission cannot be guaranteed to be absolutely secure. Please protect your device, backup files, and Apple ID.

7. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have unintentionally collected such information, please contact us.

8. International Transfers

Necessary data may be processed outside your region. We will take required measures under applicable laws, including GDPR, Taiwan's Personal Data Protection Act, and other applicable regulations.

9. Your Rights

Depending on applicable data protection laws, you may have rights to access, review, copy, supplement, correct, stop processing, or delete personal data.

Because Walleaf does not store your complete ledger, these rights mainly apply to technical data needed by our backend, such as anonymous identifiers or query logs.

To request deletion of related technical data, contact support@walleafapp.com. We will respond within a reasonable time and assist within technically feasible limits.

10. Policy Updates

We may update this policy due to changes in features, laws, or services. Material changes will be announced in the App or on the official website. Continued use after an update means you accept the revised policy. The effective date below will be updated accordingly.

11. Contact Us

If you have questions about this policy, contact support@walleafapp.com.

Operator: Hsuan-Wei Hsu

Effective Date: June 14, 2026