Wealthy Habitat Privacy Notice
Effective 29 September 2026. This notice applies to wealthyhabitat.com and its app, operated by WealthyHabitat.com. It is written to be true in every sentence, and it applies to everyone in the United States the same way, whichever state you live in.
The short version
We do not show ads, do not sell or share your personal information for advertising, and do not run tracking or analytics scripts. Most of what you type stays on your own device unless you sign in and choose to sync it. A student on a class roster never gives us an email, and their teacher sees which lessons they finished, their five question scores, their My goal result, and how their practice game ended, never a number from any money page.
What stays on your device
The app keeps your habitat, road progress, notebook, decisions, bookmarks, tool inputs, and practice game runs in your browser's local storage on your own device. We cannot read that storage. Clearing your browser data removes it. If you bring a tax document to the Last year's return tool, the document is read on your device, the Social Security number is removed on your device, and only the extracted facts are sent to our server to answer the three questions.
What we collect if you create an account
Your email address and a password, stored only as a hash. If you sync your place, a copy of the data listed above is stored in our database so it follows you between devices, and a history row is kept each time your habitat changes so the site can show you its seasons. If you buy a membership, our payment processor collects and keeps your card; we keep only a customer reference, your plan, and its renewal date.
What we collect about a student on a class roster
A student never creates an account and is never asked for an email address, phone number, photo, or location. A teacher enters the student's display name and, if the school requires it, a parent's name. From then on we keep only which of the six youth road lessons the student finished, whether the arithmetic check passed and on which try, how each practice game ended as three whole dollar figures, and the date of the last visit. The youth road runs on practice numbers. Anything a student types about their own money stays on their device and is never sent to the teacher or to us. We treat every student as a child under the Children's Online Privacy Protection Act: we collect only what is needed to run the class, we use it for no other purpose, we never sell it or use it for advertising, and we delete it when the teacher removes the student, when the class is deleted, or when a parent asks. Where a school provides the roster, we act as the school's service provider and the school's consent stands in for the parent's, as COPPA allows for educational use; the school remains responsible for any notice its policy or state law requires.
What we collect from everyone
Our hosting provider keeps standard server logs, including IP address, pages requested, and browser type, for thirty days, for security and rate limiting. We do not use analytics services, advertising pixels, cookies for tracking, or device fingerprinting. The site keeps one count per page per day of how many times that page was shown, like a turnstile: the count holds no cookie, no address, and no person, and cannot tell two visits from one visitor. The only cookies we set are the ones that keep you signed in and, for a student, the one that keeps them in class mode.
When you ask a question in the companion, the What if door, the year end tool, or the return tool, your question and the numbers you include are sent to our server and then to Anthropic, our AI model provider, to draft the answer. Anthropic processes that request under its commercial API terms, does not use it to train its models, and keeps it only for the period its standard API retention policy states (thirty days at the time of writing, and longer only where its safety systems flag a request or the law requires it). When the operator has turned on United States only inference, the model runs on Anthropic's US infrastructure; the status page says whether that setting is on. We do not use your questions to train anything either.
When you hand a file to a reader on the site, the file is opened in your own browser: a password you type for a locked file never leaves your device, and only the text of the pages, or small pictures of pages that have no text, is sent to our server and on to the model. The server keeps a signal about the attempt, meaning the kind of file, its size bucket, how it was opened, and whether the reading worked, and never the file, its text, or anything typed. For the deal reader it also keeps which fact boxes a document left empty, as field names only, and the subject of a follow up question as one word from a fixed list, never the question itself. Signals are swept after ninety days.
To enforce the free monthly counts described on the plans page and the per minute rate limits, the server keeps a counter per calendar month and per minute: for a signed in person it is keyed to the account, and for everyone else to the network address. The counter holds a number and a period, never the question or the numbers in it, and rows older than two months are removed.
Who we share with
Only the companies that run the site: Supabase for the database and sign in, Vercel for hosting, Stripe for payments, and Anthropic for the AI tools named above. Each may use the data only to provide its service to us. We disclose personal information to no one else unless a law, subpoena, or court order requires it, or to protect someone's safety, and we will tell you if the law allows.
How long we keep it
Account data until you delete your account. Student records until the teacher removes the student, the class is deleted, or a parent asks. Server logs thirty days. Payment records as tax law requires, at the processor.
Your rights, in every state
Whatever state you live in, you may ask us to tell you what personal information we hold about you, to give you a copy in a portable form, to correct it, or to delete it, and you may withdraw sync at any time by deleting your account. We will confirm a request within ten days and complete it within forty five days, and we will not treat you differently for asking. If you ask us to delete, we delete your profile, place, history, and account; the processor keeps only what tax law requires. A teacher removes a student from the teacher page, and may ask us at the contact below to delete a class. A parent may ask us to see or delete their child's record by naming the school and class at the contact below; we will verify with the teacher and act within ten days. We do not sell personal information, do not share it for cross context behavioral advertising, and do not process sensitive personal information for any purpose beyond providing the service, so there is nothing to opt out of; if that ever changes, this notice and a "Do Not Sell or Share" link will say so first. You may appeal a denied request by replying to our answer, and you may also contact your state attorney general.
Signed in, the account page does these things without asking anyone: it downloads everything the site holds about you as one file, changes your password and display name, opens the billing portal to change a card or cancel a membership, and deletes the account with everything attached to it, after cancelling any membership first. The facts you tick on the landscape page (for example that you are married or own a home) are kept in your browser, and in your place when you are signed in, so the catalog can show which rules exist for a person like you; they are never used for anything else.
Children
We do not knowingly create an account for anyone under eighteen. The only path for a minor is a class roster, described above. If you believe a minor has an account, tell us and we will delete it.
Security
Passwords are hashed. Data moves over encrypted connections. Keys that can reach the database are held on the server, never in the browser. The site sets security headers and rate limits every route that costs money or touches an account. No system is perfect; if a breach affects your personal information, we will notify you without unreasonable delay and within the time your state's law sets, and notify the authorities your state requires.
Changes
When this notice changes, the date at the top changes. If a change affects what we collect, why, or who we share with, we will tell account holders by email or a notice on the site before it takes effect.
Contact
WealthyHabitat.com. Email: admin@wealthyhabitat.com.