What this policy covers
This policy covers the PrismWorth iOS app, its widget, and the PrismWorth-operated backend used for optional financial-institution connections. PrismWorth does not require an account with a name, email address, or password.
Data PrismWorth handles
Information stored on your device
Financial records you enter or import—including accounts, balances, transactions, budgets, goals, recurring items, subscription insights, and investment records—are stored locally by PrismWorth on your device. The widget reads a limited snapshot from the app’s private Apple app-group container.
Optional connected-account information
If you choose to connect a supported institution, PrismWorth uses Plaid to request read-only account, balance, transaction, recurring, and eligible investment information. Availability depends on the institution and the products enabled for that connection.
The PrismWorth backend retains a random app user identifier, session records, encrypted Plaid access tokens, and connection metadata such as item identifiers and synchronization cursors. Financial account data passes through the backend to your device; the audited backend does not persist transaction or holdings payloads after servicing the request.
Security and operations data
PrismWorth may process an app-instance attestation key digest when Apple App Attest is enabled, along with rate-limit counters and ordinary infrastructure logs needed to secure and operate the service. Infrastructure logs may include request timestamps, network addresses, response status, and bounded diagnostic details. PrismWorth support diagnostics are designed to exclude credentials, access tokens, account numbers, holdings, and transaction amounts.
Support communications
If you choose to email support, PrismWorth receives the email address, message, and attachments you send. This information is used to answer your request, protect the service, and meet applicable legal obligations. Do not include passwords, one-time codes, full account numbers, or other unnecessary financial details.
How information is used
- Provide the features you request, including syncing an optional institution connection.
- Authenticate the app instance, isolate connection records, prevent abuse, and investigate failures.
- Respond to support and privacy requests you choose to send.
- Comply with law and protect users, PrismWorth, and its service providers.
PrismWorth does not use connected financial information for advertising, does not build advertising profiles, and does not sell personal information.
Your choices and controls
- Stay manual: PrismWorth can be used without connecting a financial institution.
- Disconnect: Use Settings in PrismWorth to revoke a connected institution. PrismWorth asks Plaid to remove the item and deletes its encrypted token, sync cursor, and related connection metadata. Existing local account and transaction history remains on your device as disconnected records until you delete it.
- Delete local data: Delete individual records in the app where controls are available. Removing the app deletes its local app data, subject to iOS behavior and any device backup you control. Disconnect linked institutions before removing the app if you also want to revoke provider access.
- Plaid choices: Plaid may offer separate connection-management and data-rights tools through Plaid Portal.
To make an access, correction, deletion, or other privacy request that applies in your location, contact PrismWorth support. PrismWorth may need to verify the request and may retain limited information where required for security, fraud prevention, or law.
Retention and security
PrismWorth keeps backend information only for as long as reasonably needed to provide and secure the service, honor your choices, resolve disputes, and meet legal obligations. Retention varies by record: sessions expire, connection records remain while a connection is active, and security records may remain longer when needed to prevent identity conflicts or abuse.
PrismWorth uses encryption in transit, encryption for Plaid access tokens at rest, access controls, rate limiting, and Apple App Attest support. No system can guarantee absolute security, so keep your device and Apple Account protected and report suspected issues promptly.
Children, changes, and contact
PrismWorth is a general personal-finance tool and is not directed to children. PrismWorth does not knowingly use the service to solicit personal information from children.
This policy may change as PrismWorth evolves. Material changes will be reflected by updating the effective date and, where appropriate, by providing an additional notice.
For privacy questions or requests, email support@prismworth.com.