Privacy policy

Wiikly is operated by Think Lab Apps (“Think Lab Apps,” “we,” or “us”). This policy explains how we handle personal information when you visit the Wiikly website or use the Wiikly app.

Depending on how you use Wiikly, information may include:

• Account details such as your name, email address, sign-in provider, and profile preferences.
• Financial records you enter or import, including descriptions, dates, amounts, currencies, categories, budgets, savings goals, and review notes.
• Settings and choices, including notification preferences, privacy preferences, and MCP tool permissions.
• Information needed to deliver the service, protect accounts, troubleshoot errors, and process support or data requests.

Wiikly does not automatically connect to your bank. You enter account details yourself. For account numbers, Wiikly stores a masked value ending in the last four digits; do not enter card numbers, PINs, bank passwords, or other financial credentials.

Wiikly saves workspace information in your browser using IndexedDB and uses browser storage for preferences. If you sign in and enable account sync, your workspace is also synced to your Wiikly account. Guest workspace data stays on that browser unless you choose to sync it during sign-in. Clearing browser storage can remove local data that has not synced.

You can export workspace data from Settings. The downloaded file is stored on your device and is your responsibility to protect and delete when no longer needed.

Statement files are parsed and reviewed in your browser. The import flow does not upload the source document; if you ask for AI category suggestions, the selected transaction descriptions are sent as described below.

• To provide sign-in, save and sync your workspace, and show your financial summaries and tools.
• To respond to actions you request, such as importing activity, sending a sign-in code, or creating a report.
• To protect the service, prevent misuse, resolve support requests, and meet legal obligations.
• To generate requested category suggestions and, when enabled in Settings, personalized insight descriptions.

If you ask Wiikly for AI category suggestions during an import, the transaction descriptions, activity types, and allowed category names for those rows are sent to Google’s Gemini API to produce suggestions. Review the suggestions before saving imported activity.

When Personalized insights is enabled in Settings, Wiikly may send aggregate financial figures and category information to Google’s Gemini API to rewrite insight text. If you disable that preference, Wiikly uses its standard insight text instead. These tools can be inaccurate and are informational only.

We use service providers to operate Wiikly, including Firebase for account sign-in and workspace services, Cloudflare for website and app hosting, Resend to deliver email sign-in codes, and Google Gemini for the optional AI features described above. If you choose Google sign-in, Google also processes information needed to authenticate your account. These providers process information as needed to provide their services to Wiikly.

If you connect an MCP client such as ChatGPT, that client can receive the information returned by tools you invoke and may change records when you have enabled the relevant permissions. The client is operated by a third party and its own privacy terms apply. You can disable Wiikly MCP permissions or revoke a connection in Settings.

We do not sell personal information.

We handle information to provide the service you request, meet legal obligations, protect and maintain Wiikly, and honor your choices for features such as AI suggestions and connected tools. Our providers may process information in countries outside Nigeria. We apply any additional safeguards required by applicable data protection law for those transfers.

Workspace data remains in your browser until it is removed there, and synced data remains in your account while needed to provide the service or meet legal obligations. Retention periods for provider logs, backups, and security records may differ. Exported copies are not removed when you change data in Wiikly.

You can review and correct records in the app, change privacy and MCP permissions in Settings, and export your workspace. To request account data deletion or exercise another privacy right, contact Think Lab Apps through the official links on the Wiikly home page. Requests may require verification. A deletion request does not immediately erase browser copies or exported files.

Depending on applicable law, you may also ask to access, correct, erase, restrict, or object to processing of your personal information, or request a portable copy. You may complain to the Nigeria Data Protection Commission through its official website.

We use technical and organizational measures designed to protect information. No online service or storage method can be guaranteed completely secure, so keep your sign-in access private and secure any exported files.

Wiikly is intended for adults and is not designed for children under 18. If you believe a child has provided personal information to Wiikly, contact Think Lab Apps so the request can be reviewed.

We may update this policy when Wiikly or applicable requirements change. The date at the top shows when this version was last updated. For account data requests or other privacy questions, contact Think Lab Apps through the official links on the Wiikly home page.