← Home

Privacy Notice

Last updated: 18 June 2026

1. Who we are

This Privacy Notice explains how JKRR Property Limited ("we", "us", "our"), trading as WealthSphere, collects and uses personal data when you use WealthSphere OS (the "Service"). JKRR Property Limited is the data controller for the personal data described below.

2. Categories of personal data we collect

• Account data — email address, password (hashed), display name.
• Financial profile data — the figures, estimates, account nicknames and notes you choose to enter into the Service.
• Extracted document data — structured figures (balances, holdings, allocations, providers) that our AI reads from a screenshot or statement you upload. The original file is never stored: it is processed in memory only for the duration of the extraction request and then discarded. Only the extracted data you choose to save is retained, as part of your financial profile.
• Support data — messages you send us when contacting support.
• Usage and device data — IP address, browser type, device identifiers, pages visited and basic telemetry needed to operate the Service securely.
• Billing data — collected and processed by Paddle (see "Sharing" below). We do not store full payment card details.

WealthSphere is designed so you can use estimates and nicknames. We do not ask for bank account numbers, sort codes, NI numbers, passport numbers or other government IDs.

3. Purposes and legal bases

• Providing the Service — account creation, storing your profile, generating analytics. Legal basis: performance of a contract.
• Security & fraud prevention — protecting the Service and its users. Legal basis: legitimate interests.
• Service improvement — diagnosing issues and improving features. Legal basis: legitimate interests.
• Customer support — responding to your enquiries. Legal basis: performance of a contract / legitimate interests.
• Billing & tax compliance — managing subscriptions and meeting tax obligations. Legal basis: contract / legal obligation.
• Marketing — only where you have given consent, which you can withdraw at any time.

4. How we share your data

We share personal data only with the following categories of recipients:

• Service providers (subprocessors) — hosting, database, analytics and support tooling acting on our instructions.
• Paddle — our Merchant of Record. Paddle handles checkout, payments, subscription management, invoicing and sales-tax compliance. See Paddle's Privacy Notice.
• Professional advisers — legal, accounting and compliance advisers where necessary.
• Authorities — where required to comply with a legal obligation.

We do not sell your personal data.

5. International transfers

Some of our service providers process data outside the UK / EEA. Where this happens, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision) to protect your data.

6. Data retention

We retain account and profile data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (for example, billing records for tax purposes, typically up to 7 years). Backups are rotated and overwritten in the ordinary course.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• request restriction of, or object to, processing;
• request portability of data you provided to us;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We aim to respond to rights requests within one month.

8. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, encrypted storage, access controls, isolated per-user data and row-level security. No system is perfectly secure, but we work to keep your data safe.

9. Cookies

We use a small number of strictly necessary cookies and local-storage entries needed to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. If we introduce analytics or marketing cookies in future, we will request your consent first.

10. Contact

To exercise your rights or for any privacy question, see the contact details in our Terms & Conditions.