Skip to content
Wallyn
Create account

Privacy Policy

Last updated: November 11, 2026

This policy explains which personal data Wallyn processes, why, and what your rights are, under the Brazilian General Data Protection Law (Law No. 13,709/2018, the LGPD). The data controller isWallyn Sistemas Financeiros. It applies to the website www.wallyn.com.br and to the app at app.wallyn.com.br.

1. Which data we process

  • Sign-up data: name, e-mail and, if you upload one, a profile photo. If you sign in with Google, Microsoft or Facebook, we receive your name, e-mail and photo from those providers.
  • Financial data you record: accounts, cards (nickname, brand, limit, closing and due days and, if you provide them, the last 4 digits), entries, categories, budgets, goals, transfers and expense splits.
  • Sharing data: e-mails of invited holders and linked accounts, when you use those features.
  • Technical data: access logs (date, time and IP address) and basic browser information, needed to keep the service secure and running.

Wallyn does not connect to your bank account, does not ask for your banking password and does not store the full number, expiry date or security code of your cards.

2. What we use the data for

  • Create and authenticate your account and keep your session active.
  • Provide the service: calculate balances, invoices, installments, budgets and goals from what you record.
  • Send service e-mails and notifications, such as sign-up confirmation, password recovery and invitations.
  • Protect the service against abuse, fraud and improper access.
  • Meet legal and regulatory obligations.

The legal bases are performance of the contract with you, compliance with legal obligations and the legitimate interest in keeping the service secure. We do not sell your data and do not use it for third-party advertising.

3. Who we share it with

Data is only shared with those who need it for the service to work:

  • Infrastructure providers that host the app, the database and authentication, and that send the service e-mails. They process data on our behalf and may be outside Brazil.
  • An anti-bot verification service, used on the sign-up screen.
  • AI assistants and apps you connect, only after your authorization (see section 4).
  • People you choose: holders of the same account and linked accounts see the data you share or split with them.
  • Authorities, when there is a legal obligation or a court order.

4. AI assistants and other connected apps

You can connect your Wallyn account to an artificial intelligence assistant (such as Claude, ChatGPT or Cursor) or to another app compatible with the MCP protocol. This connection only happens if you start it: the app opens a Wallyn screen asking for your authorization, showing the app name and the address you will return to, and you choose Allow or Deny.

  • What the assistant can access: with your authorization, it acts on your behalf and can see and change the same data you see in Wallyn: name and e-mail, accounts, wallets, cards, invoices, entries, categories, budgets, goals, transfers, and your account’s holders and invitations. There is no partial permission: the authorization covers all of this.
  • Deletions and reversals: the connector only carries out a deletion or reversal after your explicit confirmation in the conversation.
  • What we log: the identifier of the connected app, and the type and address of each call, for security and to tell the app’s access apart from access through your browser. We do not store the content of your conversation with the assistant.
  • What the assistant does with the data: data that Wallyn hands to the assistant is then handled by it, under the privacy policy of the company responsible, which is independent of Wallyn. Authorize only apps you trust.
  • How to disconnect: you can remove the connection in the assistant itself and can delete your Wallyn account whenever you want. For help, write to the contact e-mail below.

5. Cookies and browser storage

This website stores in your browser only your theme preference (light or dark). The app also stores your session data to keep you signed in. We do not use advertising cookies.

6. How long we keep it

We keep the data while your account exists. You can delete the account from Profile, inside the app. After deletion, we may keep for a limited time only what the law requires, such as access logs.

7. Your rights

The LGPD guarantees you, among others, the rights to:

  • confirm whether we process your data and access it;
  • correct incomplete, inaccurate or outdated data;
  • request deletion of the data and portability to another service;
  • know with whom the data was shared;
  • withdraw consent and object to processing you consider unlawful.

To exercise these rights or ask questions, write to atendimento@wallyn.com.br. You can also file a complaint with the Brazilian National Data Protection Authority (ANPD).

8. Security

Access to the app requires authentication, communication uses an encrypted connection (HTTPS) and each account’s data is isolated from the others. No system is completely immune to failures: if an incident occurs that may cause relevant risk or harm, you and the ANPD will be notified.

9. Changes to this policy

This policy may be updated. The date at the top shows the version in force, and relevant changes will be communicated through the app or by e-mail.