The short version

• Without an account, your plan never leaves this device. Everything you type stays in your own browser, on your own device.
• With an account, your plan is saved to a database in Europe — but only after you ask us to, and only what you choose to save.
• There are no adverts and no bank connections, with or without an account.
• We count how the tool is used — but only if you say yes, and never what is in your plan. If you agree, part of that counting is Google Analytics, so Google is told that a device visited a page. If you say no, or ignore the question, nothing at all is recorded, nothing is put on your device, and nothing is sent to Google.
• AI help is off unless you switch it on, and it needs an account. Switched on, the part of your plan you ask about is sent to an AI company to be read — and only then. Switched off, nothing is.
• We never sell anything, and your plan is never shared with anyone for their own purposes — not with advertisers, not with banks, not with anybody. The one time any of it goes elsewhere is the AI company above, doing the thing you asked for, and only if you switched it on.
• You can delete your account and everything in it yourself, at any time.

Who we are

Amwalio is run by the Amwalio team, a not-for-profit project that is not yet a registered company. Contact: hello@amwalio.app.

Your plan stays on your device, until you ask us to save it

• Your plan (money in and out, one-offs, savings goals, debts, what you hold and invest, and settings) is kept in your browser's storage on this device. Unless you create an account and ask us to save it, it is not sent to or kept by Amwalio.
• Reminders you dismiss are also remembered in your browser only.
• Anyone who uses the same browser on the same device may see your plan. Use Clear this device when you finish on a shared computer.
• If you clear your browser data, change device or use private browsing, a plan that was never saved to an account may be lost. We cannot recover it, because we never had it.
• The typical UK amounts in the set-up wizard are built into the page. Showing them does not send anything about you anywhere.

Amwalio is still being built

Amwalio is a small project, not a finished product, and accounts are being tested. Please keep your own copy of anything you would be sorry to lose. Saved plans may be cleared while we are testing. We will say so here before that changes.

If you create an account

Creating an account is optional. Amwalio works fully without one.

• What we store: your email address, and the plan you choose to save — your money in and out, one-off amounts, savings goals, debts, what you hold and invest, your zakat records and your giving record. Your password is never stored, only a form of it that cannot be reversed.
• When: nothing is sent until you tick the box asking us to save your plan. Until then it stays on your device, exactly as it does without an account.
• Where: with Supabase, the database company Amwalio uses. We do not own or run any servers ourselves. Supabase holds this project in its London region, inside the UK and the wider European area, and our account is configured that way; if that ever has to change we will say so here before it does. It is encrypted on the way there and while it sits there.
• Why we may: because you asked us to (UK GDPR Article 6(1)(a), consent). A plan that records your zakat says something about your religion, so it is special-category data and we rely on your explicit consent for it (Article 9(2)(a)). You can withdraw that at any time by deleting your account, and we will not ask you for a reason.
• Who can see it: only you. The database refuses to return one family's plan to anyone else, and that is tested, not just promised.
• How long: until you delete your account. There is no other copy.
• Deleting it: deleting your account removes your account, your saved plan and the record of your consent, immediately and permanently. We cannot recover it afterwards, and neither can you.

If you switch on AI help

AI help is off unless you switch it on, and it is only available if you have an account. Nothing below happens to you until you tick that box, and you can untick it at any time in your account settings.

When it is on and you ask it a question, the part of your plan your question is about is sent to an AI company to be read and answered. It is not sent when you are simply using the planner, and we never send your whole plan because a question needed part of it.

• Who: one company at a time, chosen by us, from Anthropic, OpenAI, Google Gemini, Mistral, Groq, DeepSeek, Together AI, xAI, Fireworks AI and OpenRouter. The one currently in use is named on the switch itself, and again wherever you are about to send something, so you can see it before you decide rather than having to come here.
• What we keep: that a question was asked — which job it was, which company and model answered, how many tokens it used and what it cost. Never your figures, your question or the answer. We keep this to watch what the tool costs and to stop it running away with itself.
• Training: none of these companies may train on what you send. Our account is set to refuse any company whose own policy allows it, so a request is never routed to one.
• How long they keep it: this is the part we cannot promise, so we will not pretend to. Not training is not the same as not storing. Some of these companies hold what they are sent for a set period — thirty days is common — and others do not publish a period at all. That is their policy, not ours, and it is not something we can enforce on your behalf. If it matters to you, leave AI help off; everything else in Amwalio works without it.
• Where: these companies are mostly in the United States, so switching AI help on means your question is transferred outside the UK.
• Lawful basis: your consent (UK GDPR Article 6(1)(a)), given separately from the consent to save your plan, and withdrawable at any time without losing anything else.

What our web host sees

Like any website, when your device loads Amwalio it sends basic technical details, such as your IP address, browser type and the page requested, to our web host, Netlify, Inc.. The host may keep these in short-term logs to keep the site secure and working. These logs never contain your plan.

• Lawful basis: our legitimate interest in running a safe, working website (UK GDPR Article 6(1)(f)).
• Our host may process this data in the United States. It participates in the EU–US Data Privacy Framework and its UK Extension, and uses standard contractual clauses for other transfers.

Cookies and browser storage

We set no cookies of our own. What we keep in your browser is listed below: your plan, because you asked the tool to keep it, and — only if you have an account — the fact that you are signed in. Those are strictly necessary for the tool to work, and are there whatever you answer.

If, and only if, you agree to counting, we also load Google Analytics. Google then sets its own cookies and is told that a device visited a page — a page address, a rough location from the network address, and the kind of browser. We have turned off advertising features, turned off Google's joining of your visit to other sites, and asked Google to shorten the network address before storing it. Google is a processor for us under a data processing agreement, and data may be handled in the United States under the UK extension to the EU–US Data Privacy Framework. Until you answer the question, Google's tag is not loaded at all and no request reaches them. If you later say no, the page reloads without it. There is nothing from Meta or any advertising network, whatever you answer.

Seeing how the tool is used is the one thing that is not necessary, so we ask first rather than assume. If you agree, your browser makes up a random number for itself and we record which pages you open, which parts of Amwalio you use, and when something is downloaded. Today that is visits and spreadsheet downloads; we may add others of the same kind as the tool grows, and they will always be of that kind. What we never record is anything from inside your plan — not a figure, not a label, not a total. The random number is not linked to your account, tells us nothing about who you are, and disappears the moment you clear this site's data or answer no. Nothing is sold, and the only company it is shared with is Google, as described above. If you have not been asked yet, nothing is being recorded at all.

We ask in a banner the first time you arrive, and nothing is recorded or put on your device until you answer it. Both answers are equally easy to press, because an agreement you were nudged into is not worth having. You can change your mind whenever you like, on the storage card on the planner page.

Your rights

Without an account we hold nothing of yours, so it is entirely yours: edit it, or remove it with Clear this device. With an account you can see everything we hold by opening your plan, change it at any time, and delete all of it yourself. You can also ask us about access, correction, deletion or objection at hello@amwalio.app. It is free, and we reply within one month.

Complaints

Please contact us first at hello@amwalio.app. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113.

Changes

If we change how any of this works, we will update this notice before the change goes live. We will always ask for your consent before saving anything of yours.