Dworra ("Dworra," "we," "us," or "our") provides a private household-finance tracking application (the "Service"). This Privacy Policy explains what information we collect, how we use, store, and protect it, and the choices and rights you have. It forms part of, and is incorporated into, our Terms of Service. We request acceptance during account setup and for material updates. Where applicable law requires separate consent for a new purpose, we will request it before that processing begins.
In short: Your financial data is stored in your own private, isolated account. We don't sell your data, we don't run ads, and we don't use third-party marketing analytics or cross-site tracking. You can export your financial data or request account deletion; limited retained records and backup copies are described below. Access to your data by our personnel is restricted, purpose-limited, and only for legitimate operational, support, security, or legal reasons. We provide the Service "as is" and cannot guarantee absolute security (see Section 5 and our Terms).
The Service is operated by Dworra, based in Canada and available to users across Canada. This Policy applies to information processed through the Service. It does not apply to any third-party websites or services that we do not control. For privacy questions or requests, contact our Privacy Officer (see Section 15).
We collect only what is needed to operate the Service:
Account holders must be at least 18. Adults may optionally enter limited information about children for household planning (see Section 9).
We use your information solely to: provide, maintain, secure, and improve the Service; authenticate you and sync your data across your devices; process and manage any paid subscription; send essential account and transactional emails (such as verification, password resets, and legal-acceptance receipts); maintain records of your acceptance of our Terms; respond to your support requests; and comply with legal obligations. We do not sell, rent, or share your personal or financial information with third parties for marketing, advertising, or any unrelated purpose.
We process information for the purposes described above with meaningful consent or as otherwise permitted or required by applicable Canadian law. Financial and household information can be sensitive; enter only information you are authorized to provide. We do not make optional new uses a condition of receiving unrelated services. You may withdraw consent at any time by deleting your account, subject to any processing already performed and any records we must retain by law.
Your data is stored using Supabase (hosted database and authentication) and served through Cloudflare. Protections include:
While we take commercially reasonable measures to protect your information, no method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You use the Service and provide information at your own risk, and you are responsible for keeping your own backups (via the export function) and for safeguarding your credentials.
Backups: our current database plan does not include point-in-time backups. If information is lost, we may be unable to recover it. Use the in-app export to keep your own copies.
We rely on a small number of infrastructure providers who process data only to help us run the Service:
These providers act as our processors and may store or process data on servers located in Canada, the United States, or elsewhere. By using the Service you consent to such processing and cross-border transfer. We remain accountable for personal information handled on our behalf as required by applicable law.
Your information may be stored and processed outside your province or country, including in the United States, where data-protection laws may differ and where information may be accessible to foreign authorities under applicable law. Where required, we take steps to ensure appropriate safeguards. By using the Service, you consent to this transfer and processing.
You are in control of your data at all times. You can:
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation (including Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, and the private-sector laws of Alberta and British Columbia), you have the right to access and request correction of your personal information, to withdraw consent, and to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial regulator. Depending on your province, you may also have the right to data portability (to receive your data in a structured, commonly used technological format — which our in-app JSON export provides) and additional rights regarding automated processing. To exercise any of these rights, contact our Privacy Officer (Section 15). We may need to verify your identity before responding, and we may charge a reasonable fee only where permitted by law.
Account registration is intended for adults aged 18 and older. Adults may enter limited dependent information, such as a child’s name or nickname and birth date, for household estimates. Do so only as an authorized parent or guardian or with appropriate consent, and omit unnecessary identifying details. Contact us to address an unauthorized minor account or dependent entry.
We retain your data for as long as your account exists. When you delete your account, your data is permanently removed from our active systems; our current database plan keeps no point-in-time backups; if backups are enabled in future, residual copies are deleted as those backups expire under the provider's retention schedule. Exported files on your own devices are not deleted by account deletion. We may retain limited records (such as acceptance logs and, where applicable, billing/tax records required by law) where necessary to comply with legal obligations or resolve disputes.
We may delete an account that has not been signed into for twelve (12) consecutive months, after at least thirty (30) days' notice to the account's email address (see our Terms). Legal acceptance records are kept, with personal identifiers scrubbed after account deletion, for as long as needed to evidence agreement and resolve disputes.
The hosted app stores authentication tokens in session storage to survive refresh within the current browser tab. Browser session restoration may preserve a tab; use Sign out on shared devices. If you choose “Trust this device” at sign-in, the authentication token is instead kept in that browser’s local storage for up to 30 days so you stay signed in after closing the browser. This is optional and off by default, applies only to the device you enable it on, and can be revoked at any time using Forget this device in Settings or by signing out. No financial records are stored by either option. If browser storage is blocked, sign-in may last only until refresh. Verification and password-recovery sessions are held in memory. Hosted financial records are loaded from the server into memory, not saved for offline use. A separately configured local-only copy stores financial data and preferences in local storage. Downloads and exports remain on the device until you delete them. We do not use advertising or cross-site tracking cookies.
In the event of a security breach involving personal information under our control that poses a real risk of significant harm, we will take reasonable steps and provide notification as required by Applicable Law. This includes, as applicable, notifying affected individuals and reporting to the Office of the Privacy Commissioner of Canada under PIPEDA, and — where any affected individual is a Quebec resident — reporting to Quebec's Commission d'accès à l'information (CAI) as required under Law 25. Except as required by law, and to the maximum extent permitted, our liability in connection with any breach is subject to the limitations set out in our Terms of Service.
RRSP figures are manually entered from your CRA records and adjusted using the deposits you record. Dworra does not connect to CRA, request CRA credentials or collect full Notices of Assessment through this feature. Do not paste SINs or full tax documents into notes or support messages.
The Service performs automated calculations and estimates (such as net worth, contribution room, and tax estimates) based solely on the information you enter and publicly available rate tables. These are informational estimates only, are not decisions that produce legal or similarly significant effects about you, and are described further in our Terms of Service. You remain responsible for verifying all figures.
We may update this Policy from time to time. Material changes will be reflected by updating the "Version" and "Effective" date above and, where appropriate, by requiring renewed acceptance. For material changes we request renewed acceptance, and obtain additional consent where required by law. Changes do not retroactively authorize unrelated uses of information.
We have designated a Privacy Officer who is accountable for our compliance with this Policy and applicable privacy law. You may contact our Privacy Officer for any privacy question, to exercise your rights, or to make a complaint:
The Privacy Officer
Dworra
Canada
privacy@dworra.com · support@dworra.com
We will acknowledge and respond to privacy requests within the timeframes required by Applicable Law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, if you reside in Quebec, the Commission d'accès à l'information du Québec, or your applicable provincial regulator.
This document is provided for general informational purposes and does not constitute legal advice. Dworra is an independent tool; the figures it produces are estimates only. See our Terms of Service.