Privacy Policy

1. Introduction

MyWealthVault is operated by Eva Wealth ("we", "our", or "us"), a trading style of Clarus Wealth Ltd, an Appointed Representative of Best Practice IFA Group Limited, which is authorised and regulated by the Financial Conduct Authority. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use MyWealthVault.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and email address
• Account credentials
• Financial information you input into tools, journeys and your financial profile
• Quiz responses, risk assessment answers and preferences (including any ESG preference)
• Records of investment advice we provide, including your answers, our recommendation and your acknowledgements
• Messages you exchange with Eva, our AI coach (encrypted at rest)
• Course and challenge progress
• Community posts and interactions
• Documents we generate for you, such as suitability reports

Automatically Collected Information

When you access our service, we may automatically collect:

• Device and browser information
• IP address and location data
• Usage data and analytics
• Cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Personalise your experience and recommendations
• Process transactions and send related information
• Send you marketing communications (with your consent)
• Respond to your comments, questions, and requests
• Monitor and analyse usage patterns and trends
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers acting on our behalf:Supabase (secure database and authentication hosting), OpenAI (processing your conversations with Eva, our AI coach — conversations are not used to train OpenAI's models), Resend (transactional email), and Calendly/Stripe if you book a paid session
• Fundment: our regulated investment platform partner, where you choose to proceed with an investment — they will contact you to open your account and run their own regulatory checks
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: For any other purpose with your explicit consent

5. Data Security

We implement appropriate technical and organisational security measures, including encryption in transit (TLS) for all traffic, AES-256 encryption at rest for your conversations with Eva, row-level security so your data is only accessible to your account, and strict access controls for our team. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active. You can delete your account at any time from within the app (More → Delete my account); this removes your profile, conversations, community content and financial data. One exception applies: where we have provided you with regulated investment advice, we are required by Financial Conduct Authority rules and anti-money-laundering regulations to retain the records of that advice (including your suitability report) for a minimum of five years after our relationship ends. These retained records are held securely and are not used for any other purpose.

7. Your Rights

Under data protection laws, you have the right to:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information
• Restriction: Request restriction of processing
• Data Portability: Request transfer of your data
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

8. Cookies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyse how you use our service
• Deliver relevant marketing (with your consent)

You can manage cookie preferences through your browser settings or our cookie consent tool.

9. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

10. International Transfers

Your information may be transferred to and processed in countries other than the UK. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer
Eva Wealth Ltd
Email: privacy@mywealthvault.app

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are concerned about how we handle your personal information.