Privacy Policy
Last updated: October 2026
1. Overview
This Privacy Policy explains how WylNxt ("WylNxt", "we") collects, uses, shares and protects your personal data when you use the WylNxt web and mobile apps.
WylNxt is used in India, the United States, the UK and EU, the Gulf countries and elsewhere. This policy applies wherever you live. Where your local law gives you additional rights, we honour them.
2. Information we collect
- Account details. Name, email, phone number, optional date of birth, billing country and state, and sign-in data (password hash, two-factor settings, and Google or Apple sign-in identifiers if you use them).
- Financial records you enter. Loans, insurance policies, assets, investments, bank accounts, nominees, notes and documents you add or upload.
- Credit and debit cards. For each card you add: the bank, card name, network, whether it is credit or debit, the first 6 to 8 digits of the card number, the expiry month and year, and the card's insurance and protection benefits. The first digits identify the bank and card product, not your individual card. For some older cards we also keep the last 4 digits. We never ask for or store your full card number, CVV, PIN or OTPs, and you should never enter them anywhere in WylNxt, including notes and documents.
- Emergency access details. If you use emergency access: your emergency contact's name, phone number and email, your sharing level, your secure note and your last message to family.
- Payments. Payments are handled by Razorpay, the Apple App Store or Google Play. We receive transaction IDs, amounts, plan details and the tax information needed for invoices. We do not receive your full card details.
- Usage and device data. App version, device type, IP address, technical logs and crash reports, used for reliability, security and fraud prevention.
3. How we use information
We use your data only to run WylNxt. For users in the UK and EU, the legal basis for each use is shown in brackets.
- To provide the service: your account, data sync, reminders, document storage and core features (performance of our contract with you).
- To identify your card product from its bank, name and first digits, and look up its insurance and protection benefits when you ask us to (performance of our contract with you).
- To keep accounts secure: OTP delivery, abuse and fraud prevention, and security monitoring (our legitimate interests).
- To run emergency access and optional features you turn on, such as document scanning (your consent, which you can withdraw at any time).
- To process payments and keep billing and tax records (legal obligation).
- To send service messages about your account. We send marketing emails only where allowed, and every marketing email has an unsubscribe link.
4. Emergency access and your emergency contact
- Emergency access is optional. When you turn it on, switch to full details, or change your contact, we ask for your consent and keep a record of it: the date and time, the consent wording version, your sharing level, your contact's name and the last 4 digits of their phone number, and your device and IP address.
- Please tell your emergency contact before you add them. We may message them by WhatsApp, SMS or email to let them know they have been nominated and, if you stay inactive, to start the emergency access process.
- Your emergency contact can only view what your sharing level allows, read-only. They can never sign in to your account or move money.
- With full details, this includes your cards: the bank, card name, type, masked card number and insurance benefits, so your family knows which card insurance to claim.
- If you have been added as someone's emergency contact and want to be removed, email privacy@wylnxt.com.
6. Legal disclosures
We may disclose information when required by law, court order or a valid government request, or when needed to protect the rights, safety and security of our users and the platform.
7. International data transfers
Our providers operate in India, the United States and other countries, so your data may be stored or processed outside the country where you live. Where the law requires it (for example for users in the UK and EU), we rely on safeguards such as our providers' standard contractual clauses. We follow any transfer restrictions notified under India's Digital Personal Data Protection Act.
8. Data security and retention
Data is encrypted in transit, and sensitive fields such as your secure note and last message to family are encrypted at rest. No system is perfectly secure, but we work to protect your data and limit access to it.
We keep your data while your account is active. When you delete your account, we delete or anonymise your data, except records we must keep: billing and tax records for as long as tax law requires, and security and consent records needed to show what was agreed and to prevent fraud.
9. Your rights and choices
You can update most information in the app, export your loan, insurance and expense records from Settings, switch off emergency access and delete your account at any time. For anything else, email privacy@wylnxt.com. We will verify your identity and reply within 30 days, or sooner if your local law requires.
- India (DPDP Act 2023): access a summary of your data, correction and erasure, grievance redressal, withdrawing consent, and nominating someone to exercise your rights if you die or become incapacitated.
- UK and EU (GDPR): access, correction, erasure, restriction, portability, objection, withdrawing consent, and complaining to your local data protection authority.
- United States (including California): to know, access, correct and delete your data. We do not sell or share personal data for targeted advertising, so there is nothing to opt out of. We will not treat you differently for using your rights.
- Other countries (including the UAE and Saudi Arabia): the rights your local data protection law provides.
For step-by-step deletion instructions, see User Data Deletion Instructions.
10. Children's privacy
WylNxt is meant for adults managing their own finances. We do not knowingly collect personal data from children (under 18 in India, under 13 in the United States, or under the minimum age where you live). If you believe a child has given us personal data, contact us and we will delete it.
12. Policy changes
We may update this policy from time to time. If we make significant changes, we will tell you in the app or by email before they take effect.
13. Contact and Grievance Officer
For privacy questions or requests, email privacy@wylnxt.com. Users in India can also contact our Grievance Officer, who will acknowledge complaints within 24 hours and resolve them within 15 days:
- Email privacy@wylnxt.com