Financial values are encrypted at the column level inside the database, not merely on the disk underneath it, and decryption happens through a controlled function that never hands the key to the caller. Every table holding your data has row-level security enforced in PostgreSQL, so a fault in application code cannot show your rows to another account. Encryption keys are rotatable and have been rotated across every encrypted row. Account deletion is driven by a maintained registry of every table holding personal information, and the test suite fails if a table is missing from it.
When you ask a connected assistant a question, the calculation runs inside Wiggle Budget against your own encrypted data. The assistant receives a receipt describing what was worked out, plus at most a count, a date, or a yes or no. Balances, amounts, category names and account names stay in the app. This is enforced rather than promised: a list of forbidden fields is checked on every response before it leaves the server, and the build fails if a value that should not travel appears in one. Full disclosure is available if you want figures in the conversation, and it is off unless you switch it on.
We comply with PIPEDA, the federal privacy law of Canada, naming a real person accountable for your information and answering requests within the statutory 30 days. Where Quebec, Alberta or British Columbia privacy law gives you more, the more generous rule applies. For card payments we sit in the narrowest PCI DSS category, SAQ A, because Stripe receives card details directly and no card number, expiry or security code exists in our code or database. You can export your data, correct it, or delete your account from inside the app at no charge. Wiggle Budget is not intended for anyone under 16.
We have not been through a SOC 2 audit and we will not imply otherwise. We do not hold ISO 27001. Both are certifications issued by an outside auditor, and there is no version of either a company can award itself. There is also no bank connection, which is a design decision rather than a gap: no third party holds standing read access to your transactions on our behalf.
Write to privacy@wigglebudget.com with what you found and how to reproduce it. We will confirm receipt and will not threaten anyone who reports a problem in good faith.