Privacy Policy

Effective date: November 3, 2026

Last updated: November 3, 2026

This Privacy Policy explains how Ingrafta Inc. (“Ingrafta”, “we”, “us” or “our”) collects, uses, shares and protects personal information, and the choices you have. “You” means anyone who visits our website, uses our app, or asks for or buys anything from us.

It covers our “Services”, as our Terms of Use define them: our website at ingrafta.com; the Wealth Architecture membership; the Wealth Dashboard app, on the web at app.ingrafta.com and, once available, on iOS and Android, listed in the app stores as “Wealth Architecture”; the 30-Minute Wealth System Playbook and The 7 Wealth Systems Checklist; the Library in the app and, once available, the walkthrough videos in it; live workshops and Q&A sessions, and recordings of the founder’s workshop presentations; our emails; and any related content, features and support we provide. It also covers our contact form, the questions we ask before you book a call, consultations and calls with us, and 1:1 work with the founder. One policy covers the website and the app. Where this policy describes the iOS and Android apps or the walkthrough videos, it applies to them once they are available.

A “member” is someone with an active Wealth Architecture membership, whether paid or provided by us. “Your entries” are the figures, names, notes and other information you type into the Wealth Dashboard. Our Terms of Use include them in “Your Content”.

Your use of the Services is also governed by our Terms of Use at ingrafta.com/terms. Consulting and 1:1 work with the founder run under their own written agreement.

The short version

• We collect mainly what you give us: your email address for the Checklist (and for the follow-up emails, if you ask for them); your answers to a few questions and your booking details if you book a call; your first name, email address and password for an account; and the figures and notes you type into the Wealth Dashboard. Our providers also keep the technical records any website or app needs to run and stay secure, such as IP addresses in server logs and sign-in records (section 2.3).
• You type every figure yourself. The app does not connect to your bank, never asks for bank logins or account numbers, and cannot move money.
• Your entries are used to run your dashboard, and otherwise only to keep the Services secure, meet the law and handle legal claims (section 4). We do not sell personal information, use it for advertising or share it with advertisers, and we never use your entries to train artificial intelligence.
• Our website sets no cookies of its own and runs no analytics or advertising trackers. It keeps one note in your browser tab: that you have seen the welcome window. Its fonts are served from our own host, so loading a page sends nothing to another company. If you open the booking calendar, it comes from Calendly, which may set its own cookies (section 6). The app contains no advertising, analytics or tracking tools.
• You can correct your entries at any time, download everything you have entered, and delete your account (section 10).
• When your membership ends, your account and everything in it are deleted. We remind you to download your data first (section 8).
• Your account and entries are stored in the United States by our database provider, Supabase.
• The Checklist, the membership and the app are for adults 18 and over.
• Questions: info@ingrafta.com.

1. Who we are

Ingrafta Inc., a Texas corporation, is responsible for your personal information under this policy. Wealth Architecture and the Wealth Dashboard are products of Ingrafta Inc.

You can reach us at info@ingrafta.com or at Ingrafta Inc., 5473 Blair Rd. Ste. 100, PMB 726808, Dallas, Texas 75231-4227, USA; by mail to PO Box 800334, Dallas, TX 75380, USA.

What this policy does not cover.

• Consulting engagements. When we work with your company, how we handle your company’s data is set by our written engagement agreement with you. This policy still covers the personal information we collect about you as a contact, for example through our contact form or booking link.
• Other companies’ services. The Apple App Store, Google Play, Google sign-in, Stripe, Calendly, Zoom and websites we link to have their own privacy policies. Sections 2.4 and 5 explain what they share with us and what we share with them.

2. What we collect

2.1 Information you give us

The free Checklist. Your email address, and whether the box for the follow-up emails was ticked. Kit, our email service, also records when you signed up and whether you confirmed your address.

Your account. Your name (the sign-up form asks for your first name), your email address and a password, unless you sign in with Google (see 2.4). We never see or store your password in readable form. Our sign-in provider keeps only a scrambled, one-way version of it (a “hash”).

Your agreement to our terms. When you tick the box at sign-up, on the screen the app shows after you sign in if we have no record of your agreement, or on our join page, we record when you did it, which versions of our Terms of Use and this policy were in effect, your account ID, the email address on your account at that moment, how you reached the box (creating an account with an email address or with Google, after signing in, or on the join page), and whether you were on the web, iOS or Android. We keep a similar record when you agree to automatic renewal on Stripe’s checkout page, where we also record the checkout reference and the price and billing period you agreed to. We keep these records after your account is deleted, for the time section 8 gives, so that we can show what you agreed to.

What you enter in the Wealth Dashboard. You type every figure yourself. Depending on the pages you use, this includes:

• Settings and targets: your cash-flow split, Risk Buffer target, Growth Engine and Opportunity Fund targets, number and date format, and currency label.
• Cash flow: the income sources you name, amounts received, dates, notes, and how each amount was split.
• Growth Engine and Opportunity Fund: the names you give your holdings and deals (for example “Brokerage”, “Home” or “Duplex Renovation”), starting values, balances, money put in and paid out, dates, and whether a holding can be turned into cash quickly.
• Liabilities: the lender’s name, balance, interest rate, minimum payment, maturity date and payments made.
• Risk Buffer: balances and deposits.
• Budget: categories, planned amounts and actual spending.
• Decision Journal: your decisions, reasoning, expected and actual outcomes, review dates and notes.
• Weekly review: the date of each weekly close, the optional closing line you write about your week, the change in your liquid net worth that week, and the last date you marked “No decision this week”.
• Network: details you enter about other people (see 2.2).

The app does not connect to your bank or to any financial account, and it never asks for account numbers, bank logins or card details.

Membership and payment. When you join, you enter your payment details on Stripe’s checkout page. They go straight to Stripe. We never receive or store your full card number. Stripe’s page also asks for your billing address. Before you go to it, our join page asks where you live: “In the EU, the EEA or the UK” or “Somewhere else”. The membership is not yet available in the EU, the EEA or the UK (our Terms of Use, section 3), so you can go on to Stripe’s checkout page only if you choose “Somewhere else”. We store your answer with your membership at Stripe, together with your account ID. We use it, with the country of the billing address you give Stripe, to check that you live where the membership is offered. Section 2.4 explains what Stripe tells us.

Workshops. Members receive the date and link for each live workshop by email. During a workshop, what you choose to share (your display name, camera, voice, chat messages and questions) can be seen by the founder and the other members in the session. We ask members to keep what others share private (our Terms of Use, section 16.3), but we cannot control what they do.

Workshop recordings. We record the founder’s presentation so members can catch up, and nothing else. We stop recording before questions and answers. While recording is on, members’ microphones are muted, and the recording does not show members’ names, faces or chat. We say when recording starts and stops. We do not use AI note-takers or meeting summaries in workshops. After each workshop we email members a link to download the recording, which is hosted by Zoom. A member who downloads a recording keeps that copy, and we cannot recall it. What members may do with it is set by our Terms of Use (section 11.4).

Consultations, the contact form and bookings. Our contact form asks for your name, work email, company (optional), your company’s revenue band and a message. Messages reach our inbox through our form service, Basin (Moonshot Ventures Inc., Canada), which screens them for spam, emails them to us and deletes its copy after 30 days, with its backup copies removed within about five more weeks and its logs within six months (section 8). Sending a message does not add you to any mailing list, and we never sell it. When you press a button to book a call, our website first asks a few one-tap questions. For a consultation it asks your company’s yearly revenue, what prompted the call, how important it is to resolve it in the next 90 days, and the budget you could put toward it. For an introductory call it asks whether the call is for business or personal matters, what you would like to work on, the same 90-day question, and the budget. If a call is not the right first step, the window says so and suggests the free Checklist or the membership, and your answers go nowhere. If a call is the right next step, Calendly’s booking calendar opens in the same window, and our website passes your answers to it, with the name of the button you pressed, so that they reach us with your booking. When you book, Calendly collects your name, email address and the time you choose, your answers to our questions, anything you write in its optional “What is going on?” box, and the email address of anyone you add as a guest, and it creates the Zoom link for the call. What you tell us in calls and in 1:1 work with the founder is used to provide that work, and is also covered by any written agreement we sign with you. We do not record calls, and we do not use AI note-takers or meeting summaries on them.

Messages and reviews. When you email us, we keep your message and your email address so we can reply. If you give us a review, we publish it only with your permission, using your first name and last initial unless you agree to more.

2.2 Information about other people you add

The Network page lets you keep notes on people you know: their name, title, where you met, who introduced you, phone number, email address, what they need, how you can help, notes and dates. The app does not read your phone’s contacts. Everything on the page is typed in by you.

Please add only details you have a right to keep, and keep them accurate. If you use the list for business, you may have your own legal duties to the people on it.

We keep these details only to run your Network page, and otherwise only as section 4 allows. We never market to the people on your list, and we contact them only to answer a request they make to us. We share their details only in the limited ways section 5 describes, such as with the providers that host the app for us.

If you think a member has stored your details and you want them removed, write to info@ingrafta.com. We will handle your request as the law requires, which may mean asking the member to remove your details or removing them ourselves.

2.3 Information collected automatically

On our website.

• Our website host, Hostinger, records standard server logs when it delivers each page: IP address, browser type, the page requested, the referring page, and the date and time. We use them only to run and secure the site, and we do not copy them. They are kept only for the period Hostinger’s systems keep them, which Hostinger sets.
• The website’s fonts are served from our own host, so loading a page makes no request to another company.
• If you ask for the Checklist, the page sends your email address straight from your browser to Kit, our email service, to the sign-up form that matches your choice about the follow-up emails. Nothing else you type goes to Kit. Kit also receives your IP address, as any website you send something to does.
• If you send the contact form, the page sends what you typed straight from your browser to Basin, our form service, which also receives your IP address.
• If you press a booking button, the questions open in our own page, and your answers stay there unless a call is the right next step. Then the page loads Calendly’s booking calendar and passes your answers to it (sections 2.1 and 6).
• Section 6 covers cookies and similar technologies. In short, the website sets no cookies of its own and keeps one note in your browser tab; Calendly’s booking calendar, if you open it, may set Calendly’s own.

When you use the app.

• Sign-in records. Our sign-in provider records when you sign in and how (email and password, or Google), and, for each active session, the IP address and the type of device or browser. These are used to keep you signed in, to protect your account, and to enforce our Terms of Use, for example to look into a login shared with others or automated access. The app’s screens do not show or use them.
• Number format and currency. The first time you sign in, the app reads your device’s language and region settings to suggest a date and number format and a currency label. We save only the format and currency you end up with, and you can change both in Privacy & Settings. We do not store your time zone or your device’s full list of languages. The currency is only a label: we never convert your figures.
• Technical logs. Our database provider keeps short-lived logs of requests to our servers, including IP addresses, to operate and secure the service. They are kept for up to 7 days. Our web app host, Hostinger, keeps standard server logs for app.ingrafta.com, like the website’s, for the period section 8 gives.
• No usage tracking. The app contains no advertising, analytics, crash-reporting or tracking tools. Apart from the short-lived technical logs above, which record each request to our servers, we do not record which screens you open or how long you spend in the app, and the app does not track you across other companies’ apps or websites.
• Device permissions. The app asks for one permission: notifications, and only if you turn on the weekly reminder. It does not use your camera, photos, microphone, contacts or location.
• App stores. If you download the app from the App Store or Google Play, Apple or Google may give us statistics about downloads and, if you have agreed in your device settings to share them with developers, crash reports. They do this under their own privacy policies.

In our emails. The emails we send through Kit, our email service (the Checklist email and the follow-up emails), contain a small image and tracked links that tell us whether an email was opened and which links were clicked. Turning off images in your email app stops the image from loading; clicks on links are still counted. These emails may also include a picture linking to our film on ingrafta.com. The emails we send through Postmark (our account, membership and workshop emails), and the emails we write to you ourselves, do not track opens or clicks.

2.4 Information we receive from others

• Google. If you choose “Continue with Google” (offered on the web and on Android), Google shares your name, email address, profile picture link and Google account ID with us. We use them only to create your account, sign you in, and keep the record of your agreement to our terms (section 2.1). We do not receive your Google password or any access to your Gmail, contacts, Drive or other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Stripe, our payment processor. Stripe tells us whether a payment went through, and gives us a customer reference, your membership status, your renewal date, whether you have canceled, the amount of your last payment, whether a payment was refunded or disputed, and the country of your billing address (section 2.1 says how we use it). In its dashboard we can also see your name, email address, billing address, the brand, last four digits, expiry date, issuing country and type (credit or debit) of your card, your payment history, and the results of Stripe’s fraud checks on your payments, including the IP address and approximate location you paid from. We use this for receipts, refunds, tax records, payment disputes and support.
• Booking and video tools. Calendly tells us who booked a call and when, with the answers and notes on the booking and the email address of any guest added. Zoom tells us who joined a video call with us, and when.
• Kit, our email service. Kit tells us whether you confirmed your address, whether you asked for the follow-up emails, whether you unsubscribed, and whether you opened our emails and clicked their links (section 2.3).
• Other members. A member may add your name and contact details to their private Network list (see 2.2).

2.5 Please leave sensitive information out

The Wealth Dashboard does not need, and you should not enter:

• bank, brokerage or card account numbers, PINs, or online banking usernames or passwords;
• Social Security numbers or other government ID numbers;
• details about your health or anyone else’s, or other sensitive matters such as religion, sex life, sexual orientation, citizenship or immigration status, in names, notes or the Journal.

Notes and the Journal are free text, so we cannot stop you typing something sensitive. If you do, we treat it like the rest of your entries: we store it and show it back to you, and nothing else.

Some default budget categories, such as “Doctor”, can say something about how you spend. We treat those amounts like any other figure: we use them only to show you your budget, and we never use them, or anything else you enter, to infer anything about your health.

3. How we use information

We use personal information to:

• Provide the Services. Create and run your account; store your entries and keep them in step across the web and your phone; calculate the figures and charts on your dashboard; give you the Library (the Playbook, the Checklist and the walkthrough videos); send you the Checklist; and, when you join, email you your copy of the Playbook. The copy we email you may have your name printed in it, to show it is licensed to you. Your email address is never printed in it.
• Run your membership. Confirm your membership, take payment through Stripe, send receipts, renewal notices and price-change notices, and handle cancellations and refunds.
• Communicate with you. Send service emails, reply to your messages and booking requests, and send the Checklist and the follow-up emails you asked for (see section 7).
• Run workshops and calls. Host sessions, share recordings with members, use the answers you give before booking to see whether a call is the right next step and to prepare for it, and prepare for and deliver consultations and 1:1 work.
• Keep the Services safe. Verify sign-ins, protect accounts, prevent spam, fraud, account sharing and other misuse, enforce our Terms of Use, and investigate and fix problems.
• Improve the Services. Mostly from what members tell us: questions, feedback and support requests.
• Meet legal duties. Keep tax and accounting records, respond to lawful requests, and establish, exercise or defend legal claims.
• Anything else, with your consent. If we want to use your information for a purpose not described here, we will ask you first.

We do not make decisions about you by automated means alone that have legal or similarly significant effects. The dashboard calculates figures from your own entries to show them to you. It does not rate, score or decide anything about you. Before you book a call, our website uses your answers to suggest whether a call is the right first step; nothing else is decided by it.

4. What we never do with your numbers

The figures, names and notes you enter in the Wealth Dashboard are used to run your own dashboard, and otherwise only as this section allows. We:

• never sell them;
• never use them for advertising, and never share them with advertisers;
• never use them to train artificial intelligence models, and never put them into artificial intelligence tools, including the tools we use to build and maintain the app;
• never total, average or otherwise combine them with anyone else’s figures, even in de-identified or aggregate form;
• never use them, or images of them, in our marketing, workshops, testimonials or examples;
• never share them with anyone except as section 5 describes: with the service providers that host the app for us; at your direction, for example when you send your data download to someone; with our professional advisors, who must keep them confidential; with a buyer or successor in a business transfer, who must honor this policy; or where the law requires it, or it is needed to enforce our Terms of Use or protect rights and safety; and
• do not look at them, except when you ask us for help and give us permission, when we need to investigate a security problem, a fault affecting your account or suspected misuse (including a suspected breach of our Terms of Use), when we need to establish, exercise or defend a legal claim, or when the law requires it.

Your entries are not end-to-end encrypted. Our systems can read them, because they have to store your entries, calculate your dashboard and show it to you. A small number of authorized people at Ingrafta can technically reach the database to run and protect it. The rule above is how we limit that access.

The app does not connect to banks, does not ask for bank logins, and does not move money or place trades.

5. How we share information

We do not sell personal information. We do not share it for cross-context behavioral advertising or targeted advertising (ads picked for you from what you do on other companies’ websites and apps). We do not share it with other companies for their own marketing.

We do not collect, use or sell personal information of any kind to train large language models or other artificial intelligence models, and we do not allow our service providers to use it for that.

We share personal information only in these ways.

Service providers. These companies run parts of the Services, our emails, our contact form and our call bookings for us:

We give each provider only what it needs to do its job. Each may use that information only to provide its services to us, to keep its services secure, to meet its legal duties, to deal with legal claims and to produce statistics that identify no one, apart from what the next paragraph says, and we require each by contract to protect it at least as well as this policy does.

Companies that also act for themselves. These companies receive some information about you and decide for themselves how to use it, under their own privacy policies. We do not control them, and we share with them only what the Services need:

• Google, when you choose Continue with Google (section 2.4), and when Kit’s quick check before sending the Checklist uses Google’s reCAPTCHA (section 6). Its privacy policy is at policies.google.com/privacy.
• Apple and Google, when you download the app from the App Store or Google Play.
• Stripe, which processes your payment for us and also uses payment information for its own purposes, such as preventing fraud and meeting its legal duties (stripe.com/privacy).
• Calendly and Zoom, for any information they collect under their own privacy policies when you book a call or join a call or workshop, for example through their own apps or accounts, or through the cookies Calendly’s booking calendar may set (section 6).

Google and Apple process information in the United States and other countries.

Other members, when you choose. At a live workshop, other members can see and hear what you share. We do not record it.

At your direction. When you download your data or share a file from the app, it goes wherever you send it.

For legal reasons and safety. When we believe in good faith that it is needed to comply with the law, a court order or a lawful request from public authorities; to enforce our Terms of Use; or to protect the rights, property or safety of our members, the public or Ingrafta.

Professional advisors. Our lawyers, accountants and auditors, who must keep it confidential.

Business transfers. If Ingrafta is involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, personal information may be transferred as part of that deal. We will require the recipient to honor this policy for the information transferred, and we will tell you before your information becomes subject to a different privacy policy.

With your consent. In any other case, only if you agree.

6. Cookies, device storage and similar technologies

Our website.

• It sets no cookies of its own. It keeps one item in your browser’s session storage: a note, holding only the time, that you have seen the welcome window in that tab, so that it does not open again when you reload the page. Your browser removes it when you close the tab.
• It runs no analytics, advertising pixels, tag managers, session recording or chat widgets.
• Its videos are served from our own website host. There are no YouTube or other embedded players.
• It checks your browser’s data-saver setting and connection speed to decide whether to play the background video, and its time zone to decide whether the follow-up box on the Checklist form starts ticked (section 7). These checks happen in your browser, and nothing is sent to us.
• Its fonts are served from our own host, not from Google or any other company.
• If we ever add analytics or another non-essential technology, we will update this section before it goes live, and ask for your consent where the law requires it, for example if you are in the EU or UK.

Our booking calendar. Pressing a booking button opens a few questions on our own page. Only if a call is the right next step does the page load Calendly’s booking calendar into the window, from Calendly’s servers. From then on Calendly receives your IP address and browser details, and it may set its own cookies and similar technologies, under its own cookie banner and privacy notice. Calendly says most meetings can be booked without accepting its cookies. If the calendar cannot load, a link opens Calendly’s booking page in a new tab instead.

Kit’s quick check. Occasionally Kit, our email service, asks for a quick check before it sends the Checklist. That check is Kit’s own page, shown inside ours. It uses Google’s reCAPTCHA, so Kit and Google may use cookies or similar technologies and receive information about your browser and device, under their own privacy policies.

The web app (app.ingrafta.com). The web app sets no cookies of its own. It uses your browser’s storage to keep:

• your sign-in session, so you stay signed in (a sign-in token and a copy of your basic account details, such as your email address);
• your light or dark theme choice;
• whether the “This week” card is open or closed, and whether the setup card is finished or you have hidden it;
• for each account that has signed in on that browser, its account ID and whether the app last found its membership active, so that the app can open without waiting for our servers (our servers still check your membership); and
• only while you sign up with Continue with Google, a note in that browser tab that you ticked the box (just the time), so that we can record your agreement when Google sends you back. It is removed when you come back signed in, or when you close the tab.

Your session is removed from the browser when you sign out. The theme, card and membership notes stay until you clear your browser’s site data. The session is needed for the app to work. The theme and card settings only remember choices you made, and the membership note only lets the app open sooner. None is used to track you. On a shared computer, sign out when you finish.

The mobile app. On your phone, the app keeps the same items in its private storage, plus your weekly reminder settings (on or off, day and time). Your figures are not saved to permanent storage on your phone, apart from a data file you download yourself: they are loaded from our servers and held in the app’s memory while it is open. On Android, a temporary copy of a downloaded data file stays in the app’s private storage until you next open the app, download again or sign out.

Signals and tracking.

• Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information. We do neither, so nothing else changes.
• Do Not Track. We do not track you across other websites or apps, so we do not do anything differently when your browser sends a Do Not Track signal.
• Tracking by others. No other company collects information about your activity over time and across different websites through our Services, except Stripe, which uses device and browsing information to prevent fraud when you pay on its checkout page; Calendly, whose booking calendar, if you open it, may use cookies and similar technologies under its own cookie notice; and Google, whose reCAPTCHA check Kit sometimes shows before it sends the Checklist.

7. Emails and notifications

Emails you ask for.

• The Checklist. When you ask for it, Kit, our email service, sends you a confirmation email: its button confirms your address and opens the Checklist. If you never press it, we send you nothing more. The form also has a separate box for a short series of follow-up emails about putting the seven systems to work and about the membership. The box starts ticked for most visitors. It starts unticked if your device is set to a time zone used in Europe (including the UK and Switzerland), in Canada or elsewhere in the European Economic Area, or to one the website cannot match to a place. The website goes by your device’s time zone, not your location (section 6), so it can guess wrong, for example while you travel. You can tick or untick the box before you submit the form. We send the follow-up emails only if the box is ticked when you submit it, and you get the Checklist either way. If it is not ticked, we send you no other emails through Kit; Kit keeps your address on our list, marked as not wanting the follow-up emails, until you ask us to delete it; if you unsubscribe, Kit marks it as unsubscribed instead (section 8). The form says which emails follow and links to this policy before you submit it. We rely on your consent for the follow-up emails where the law requires it, and elsewhere on our legitimate interest in following up on your request for the Checklist. You can object or unsubscribe at any time.

Service emails. While you have an account, we send you the emails needed to run your account and membership: sign-up confirmations, password resets, password-change codes, email-change links, your welcome email with your copy of the Playbook, receipts, renewal and price-change notices, confirmations of a cancellation or withdrawal, a reminder before your membership ends and a notice when it has ended, workshop invitations and recordings, and security or legal notices. These are part of the Services, so you cannot unsubscribe from them while you have an account. They stop when your account is deleted.

Unsubscribing. Every marketing email contains an unsubscribe link and our postal address. You can also email info@ingrafta.com. We act on unsubscribe requests promptly, and always within 10 business days. Unsubscribing does not stop service emails. If you live outside the United States, we send you marketing emails only with your consent, or where your local law otherwise allows them.

The weekly reminder (iOS and Android). The reminder is off until you turn it on, from the This week card on your dashboard or in Privacy & Settings > Weekly reminder. When you do, the app asks for permission to show notifications and schedules one notification a week on your phone, on the day and at the time you choose. It is not sent from our servers, and we never receive a push token or any device identifier for it. The notification names your weekly review and says “Thirty minutes. Update your balances and log a decision.” It never shows your figures. You can turn it off in the app or in your phone’s settings. The reminder is canceled when you sign out or delete your account. If your account is deleted because your membership ended, the reminder stops the next time you open the app, or you can turn it off in your phone’s settings. The web app does not send reminders.

8. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or longer where the law requires.

Removing versus deleting.

• Items you delete, such as a balance reading, a cash-flow entry, a payment, a Risk Buffer entry, a budget amount, a Journal entry or a Network contact, are removed from our live database straight away.
• Some things are archived instead of deleted, so that your history stays accurate. Removing an income source or a budget category archives it. A holding with history can be archived but not deleted. Archived items stay in your account and in your data download until your account is deleted.
• Every balance you record is also written to a history log, which stops a reading sent twice over a poor connection from being counted twice. Deleting a single reading removes it from your dashboard and totals, but its line in the history log stays in your account and in your data download until your account is deleted. (A holding that still has readings, or a debt that still has payments, can only be archived. If you delete every reading and payment for a holding and then the holding itself, its history log goes too.)

After your account is deleted. Your account and every entry in it are removed from our live database at once. Copies may remain in backups for up to 7 days until they are overwritten. If we ever restore a backup, we will delete again any account that was deleted after that backup was made. We keep only the other records listed in the table above, for the times given there, such as payment records, the record of your agreement to our terms (with the email address you agreed with), your record in Kit if you unsubscribed from our emails, and emails with us. If we emailed you a copy of the Playbook, it stays with you, under the license in our Terms of Use.

9. How we protect information

We use reasonable technical and organizational measures suited to the information we hold. They include:

• Encryption in transit. Every connection between the app and our database is encrypted with TLS (HTTPS). The website is served only over HTTPS.
• Encryption at rest. Our database provider encrypts stored data at rest.
• Access limited to your own account. Database access rules (row-level security) let each account read and change only its own records. The database enforces these rules itself, not only the app.
• Password protection. Passwords must be at least 10 characters and mix lowercase and uppercase letters, a number and a symbol. They are stored only as a one-way hash. If your last sign-in was more than 24 hours ago, changing your password needs a code we email you.
• Privacy at sign-in. The password-reset screen gives the same answer whether or not an email address has an account, so no one can use it to find out who is a member.
• Private files. The Playbook and the walkthrough videos in the Library are not on the public web. They open only through short-lived links that our server issues after checking your membership.
• Less to lose. We do not collect bank logins, account numbers or card numbers, and the app contains no advertising or analytics tools.
• Limited staff access. Only a small number of authorized people can reach the database, using accounts protected by multi-factor authentication. See section 4 for when we look at member entries.

No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. If a security breach affects your personal information, we will notify you, and the authorities where required, as the law requires.

Your part. Use a password you do not use anywhere else, and keep it private. Sign out on shared devices. Your data download includes the details of the people in your Network, so keep it somewhere private.

10. Your choices and rights

In the app

• See and correct. Everything you enter is on your screens, and you can edit it at any time. You can change your name, email address and password in Privacy & Settings. When you change your email address, we email you a confirmation link at both your old and your new address, and the change takes effect only after you confirm. Stripe sends its receipts and its emails about renewals, failed payments and expiring cards to the email address on your billing record at Stripe. Changing your email address in Privacy & Settings does not change that one: to change it, use Manage billing in Account & Billing in the web app.
• Download your data. Privacy & Settings > Your data > Download my data (or, once your membership has ended, Download my data on the screen the app shows you instead) gives you one file, in JSON (a common format that other programs can read), with everything you have entered: your account email and name, your membership status and dates and any access we have given you outside a paid membership, your settings, and all your entries, including archived items, past weekly closes, the balance history log, and the record of each time you agreed to our Terms of Use and this policy. It includes the details of the people in your Network. It does not include technical sign-in records such as IP addresses; email us if you want those.
• Delete your account. You can delete your account at any time. “Deleting your Wealth Architecture account” below explains how, and what we delete and keep.
• Reminders. Turn the weekly reminder on or off from the This week card on your dashboard or in Privacy & Settings > Weekly reminder.

Other requests

Email info@ingrafta.com with “Privacy request” in the subject, or write to PO Box 800334, Dallas, TX 75380, USA. You can ask us to:

• confirm whether we process your personal information, and give you access to it or a copy of it (including the sign-in records the data download leaves out);
• correct it;
• delete it;
• give it to you in a portable, machine-readable format;
• stop sending you marketing emails;
• opt out of the sale of personal information, targeted advertising and profiling (we do none of these, but you can still record your choice);
• withdraw any consent you have given; or
• reconsider a decision on your request (an appeal).

Verifying your request. To protect you, we check that a request comes from you. Usually we ask you to write from the email address on your account, or to confirm a link we send there. We may ask for a little more if we cannot verify you that way. We will never ask for your password.

Timing. We respond within 45 days. If we need more time, up to 45 more days, we will tell you why. If you are in the European Economic Area, the UK or Switzerland, see section 12.

Authorized agents. Someone you authorize can make a request for you. We will ask for your signed permission, and we may ask you to confirm your identity with us directly, unless the agent holds a valid power of attorney.

Appeals. If we decline all or part of a request, we will explain why. You can appeal by replying to our decision or by emailing info@ingrafta.com with “Privacy appeal” in the subject. We will answer within 45 days and explain the result. If we deny your appeal, you may contact your state attorney general.

No discrimination. We will not deny you the Services, charge you a different price or give you a lower level of service because you used a privacy right. Some requests, such as deleting your account, do mean we can no longer provide the Services to you.

Limits. We may decline a request where the law allows, for example when we cannot verify you, when it would reveal someone else’s personal information, or when we must keep information for legal reasons. We will tell you why.

Deleting your Wealth Architecture account

This applies to the Wealth Architecture app by Ingrafta Inc. (the Wealth Dashboard), on the web, iOS and Android.

How to delete your account.

• In the app: open Privacy & Settings > Delete my account. You will be offered a copy of your data first and asked to type DELETE to confirm.
• Without the app: email info@ingrafta.com from the address on your account, with the subject “Delete my account”. This works from any device.

Deleting your account removes your sign-in and all your entries from our live database at once, and it cannot be undone. Download your data first if you want a copy. In the app, you see a confirmation as soon as it is done. If you email us, we confirm by email when it is done, within 14 days of your email. Deleting the app from your phone does not delete your account.

If you have a membership. If you have an active membership, deleting your account also cancels it straight away, and billing stops. Your access ends at once, and unused time is not refunded, except as our Terms of Use (section 7.7) say. To use the rest of the period you have paid for, cancel your membership instead: your account is then deleted when that period ends.

What we delete. Your account and sign-in records, your name and settings, and everything you entered: cash flow, holdings and balances (including archived items and the balance history log), liabilities and payments, Risk Buffer, budget, Decision Journal, Network contacts and weekly closes.

What we keep, and for how long. Payment, billing and tax records, including your customer and membership records at Stripe and our record of the membership notices about you, for 7 years; the record of when you agreed to our Terms of Use, with the email address on your account when you agreed, for at least three years, or one year after your membership ends if that is longer; your record in Kit, marked as unsubscribed, if you unsubscribed from the Checklist emails, so that we keep honoring that choice; emails and messages you sent us, for 3 years after our last contact; technical logs at our database provider for up to 7 days, and our host’s server logs for the period section 8 gives; copies of the emails we sent you, held by Postmark, for 7 days (and any backup copies for the period Postmark sets); your email address on Postmark’s list of addresses we do not email, if one of our emails to you bounced or you marked one as spam; and copies in database backups for up to 7 days, until they are overwritten. Section 8 has the details. If you signed up for the Checklist emails, deleting your account does not unsubscribe you: use the unsubscribe link in any of those emails.

Deleting some data only. You can delete individual entries in the app at any time, or email us to ask us to delete specific data without closing your account.

11. US state privacy rights

Several US states give their residents privacy rights. We give the rights in section 10 to everyone, wherever they live. This section adds what particular states ask us to tell you.

Texas

We give Texas residents the rights described in the Texas Data Privacy and Security Act, whether or not the Act applies to us: to confirm and access, correct, delete and obtain a portable copy of their personal data, and to opt out of its sale, targeted advertising and profiling. You can use these rights by email, by mail or, for your data download and account deletion, in the app. As Texas law requires of every business, we will not sell sensitive personal data without your prior consent. We do not sell any personal data, and we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects. If we deny your appeal, you may contact the Texas Attorney General at texasattorneygeneral.gov.

California

We give California residents the following rights, whether or not the California Consumer Privacy Act applies to us: to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for using these rights.

What we collect. We collect these categories of personal information, from the sources in section 2, for the purposes in section 3. Section 8 says how long we keep each.

Sale and sharing. We do not sell or share personal information, as California law defines those terms, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

Sensitive personal information. We use it only to provide the Services and for the other purposes California law permits, so we do not offer a separate “Limit the Use of My Sensitive Personal Information” link.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.

Nevada

We do not sell covered information as Nevada law defines it. Nevada residents may still send an opt-out request to info@ingrafta.com.

Other states

If you live in another state with a consumer privacy law, such as Colorado, Connecticut, Oregon or Virginia, you have the rights in section 10, and we will handle your request under your state’s law and timelines.

12. Residents outside the United States

EU, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, this part applies to you as well. The membership is not yet available in the European Economic Area or the UK (our Terms of Use, section 3). If you are there, this part still applies to any information we hold about you.

Controller. Ingrafta Inc., 5473 Blair Rd. Ste. 100, PMB 726808, Dallas, Texas 75231-4227, USA; by mail to PO Box 800334, Dallas, TX 75380, USA; info@ingrafta.com. We have not appointed a Data Protection Officer. Send privacy questions to info@ingrafta.com.

Legal bases. In plain words, we use your information because we need it to give you what you signed up for (contract), because the law requires it (legal obligation), because it is needed to run and protect the Services and does not override your rights (legitimate interests), or because you said yes (consent). We rely on these legal bases:

Where we rely on legitimate interests, you can ask us how we weighed them against your rights. We do not ask for special categories of data, such as health information. If you choose to type such information into a note, we use it only to store it and show it back to you.

What you must give us. To create an account you need to give your first name, an email address and a password, or sign in with Google. Without them we cannot provide the Wealth Dashboard. Everything else you enter is up to you.

Your rights. You have the right to access your personal data; to correct it; to have it erased; to restrict its processing; to object to processing based on legitimate interests; to object at any time to direct marketing; to data portability; and to withdraw consent at any time, without affecting processing that happened before. We make no decisions about you based solely on automated processing that have legal or similarly significant effects on you. Before you book a call, our website uses your answers to suggest whether a call is the right first step (section 3). We respond within one month, and if a request is complex we may extend that by up to two more months and will tell you why.

Complaints. You can complain to us first at info@ingrafta.com. If you are in the UK, we will acknowledge your complaint within 30 days and deal with it without undue delay. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority where you live, work or think the problem happened; in Switzerland, the Federal Data Protection and Information Commissioner.

Other countries

We accept members in the countries our Terms of Use (section 3) describe, including Australia, Brazil, Canada, Hong Kong, India, Japan, Mexico, New Zealand, the Philippines, Singapore and South Africa. The membership is not yet available in the European Economic Area (the EU countries, Iceland, Liechtenstein and Norway) or the UK. Swiss residents can join, and the part above applies to them. Wherever you live, you can use the rights in section 10: to access, correct, delete and download your personal information, to withdraw consent and to stop marketing emails. If the privacy law where you live gives you further rights, we honor them, and you can also complain to your country’s data protection authority. Section 13 explains how your information is transferred to and stored in the United States. The person responsible for protecting personal information at Ingrafta, including under Quebec’s privacy law, and our privacy contact under Brazil’s data protection law, is our founder, Matthew J. Grey, at info@ingrafta.com or (972) 885-7469.

13. International transfers

We are based in the United States, and your account and entries are stored in the United States, in Oregon. If you use the Services from outside the US, your information will be processed in the US, where privacy laws may differ from yours. When information about people in the European Economic Area, the UK or Switzerland goes to our service providers, we rely on the European Commission’s Standard Contractual Clauses (with the UK International Data Transfer Addendum and the Swiss amendments), or on the provider’s certification under the EU-US Data Privacy Framework, its UK Extension or the Swiss-US Data Privacy Framework, as each provider’s data processing terms provide. For our form service, Basin, which is based in Canada, we rely on the decisions of the European Commission, the UK and Switzerland that Canada protects personal information adequately. These are contract terms approved by the European Commission and the UK, a certification the provider holds, or such a decision, and each requires your information to be protected to the standard your law sets. You can ask us for a copy of these safeguards.

14. Children

The Services are for adults. You must be 18 or older, and the age of majority where you live if that is higher, to ask for the Checklist, create an account or become a member. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, email info@ingrafta.com and we will delete it.

15. Changes to this policy

We may update this policy as the Services or the law change. The date at the top shows when it last changed. If we make a material change, we will tell you at least 30 days before it takes effect, by email if you have an account and in the app, and we will post a notice on our website. We will not use information we already hold in a materially different way, for example by sharing it, using it for advertising or using it to train artificial intelligence, without your express consent. Earlier versions of this policy are available on request.

16. Contact us

For questions about this policy, or to make a request:

• Email: info@ingrafta.com
• Mail: Ingrafta Inc., Attn: Privacy, PO Box 800334, Dallas, TX 75380, USA
• Phone: (972) 885-7469
• Street address: 5473 Blair Rd. Ste. 100, PMB 726808, Dallas, Texas 75231-4227, USA