← Back to Worth Flow
Privacy Policy
Last updated: June 2026 — Worth Flow is a personal hobby project, not a commercial service.
All financial calculations run entirely in your browser. No financial data is ever sent to an application server, and Worth Flow itself never reads your saved plans.
What we collect
- Email address - collected by Amazon Cognito when you create an account. Used only for authentication and password-reset emails.
- Financial plan data - stored in Amazon S3 only if you explicitly save your plan. Your data is written to a private cloud storage prefix that is scoped exclusively to your account; no other user or the application can access it.
- Auth tokens - short-lived session tokens stored in your browser's memory / localStorage by aws-amplify, used to authenticate S3 requests. They are cleared when you sign out.
What we do not collect
- No analytics or tracking cookies.
- No advertising or third-party data sharing.
- No passwords - authentication is handled entirely by Amazon Cognito.
- No financial values, projection results, or any content of your plans (beyond the encrypted file you choose to save).
Third-party services
Worth Flow uses the following AWS services for accounts and cloud saves:
- Amazon Cognito - user authentication, email verification, and password reset.
- Amazon S3 - encrypted storage for your saved plans, in a private per-user prefix.
- Amazon SES - delivery of Cognito transactional emails (sign-up verification, password reset).
These services are governed by AWS's privacy policy.
Data retention & deletion
- Delete individual saves - from your Profile inside the app.
- Delete your account & all data - open an issue on GitHub and your Cognito user and S3 data will be removed.
Cookies & local storage
Worth Flow uses browser localStorage to store your active plan state and auth session tokens locally.
No tracking cookies are set. If you clear your browser's storage, your local plan state is erased
(cloud saves are unaffected).
Changes to this policy
As a hobby project, this policy may be updated occasionally. Significant changes will be noted on this
page with an updated date. Continued use of the app after changes constitutes acceptance.
Contact
Questions? Open an issue on
GitHub.