Privacy policy

DataWollet cares about your privacy and is designed to collect only the information that's absolutely necessary.

Website and mobile app operator

This website is operated by Obon Life Limited, a company incorporated in Wales with registered number 13971920. Our registered address is Iungoworks, West Bute House 33-35 West Bute Street, Cardiff Bay, Cardiff, United Kingdom, CF10 5LH. You can contact Obon Life Limited by email at support@datawollet.com.

The types of information we collect

Our website and mobile apps currently collect and process the following information:

IP addresses associated with an approximate (city) location and the pages accessed on our website.
Contact email addresses for our newsletter and waiting list.
Crash reports and anonymous statistics on the usage of our app.
Your email address and name if you register to use DataWollet's cloud services or become a customer.
General information about payments you make to us, but not your card details as our payment provider handles this.

Our mobile app processes this information, but our system is designed so this data isn’t shared with DataWollet servers, systems or staff, with processing performed on your mobile device:

Personal or financial information that you enter in the DataWollet app, or is added to the app automatically as a result of files, emails or financial connections.
Your email account username, password, or any other details of your email account if you choose to link an account in the DataWollet app.
Any documents you add to DataWollet, unless you agree to share them with the development team to help us improve our artificial intelligence, which is entirely optional.

How we obtain the personal information and why we have it

Website

We receive some personal information indirectly, from your accessing our website, such as your IP address and an approximate city-level location.

We use the information that you have given us in order to contact you with emails, if you sign up to a mailing list, and to ensure our website remains secure, and to help us understand how many and how people use the website.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is our legitimate interest keeping our systems secure and measuring the performance of our website. If you provide us with your email address to join a mailing list, we’ll ask you to provide consent.

Web components and affordability toolbox

Our functionality is embedded in some other websites, such as Confused.com. It's also used by some service providers such as lenders and mortgage brokers. We provide additional functionality on their websites or to their staff, and in doing so we receive some personal information indirectly from the browser connecting to our servers, such as the IP address and an approximate city-level location.

We use this information both to keep our services secure, and to support our customer in providing a service to you such as accessing price comparison services, applying for a loan, or assessing affordability.

We normally act as a data processor rather than a data controller for any documents and other data you provide through these websites, unless otherwise stated. This means we only process the data following the instructions of the provider of the website that embedded our functionality, or the service provider you're using - you’ll therefore need to take a look at their privacy policy to see how they use personal information.

DataWollet does not retain your personal information as part of an AI training dataset, nor will other AI providers have access to your information.

Mobile apps

The personal information collected by our mobile app is normally provided directly by you (e.g. your name or a document you scan), or the connections you choose to add in the app (e.g. to your email account or bank account).

If a DataWollet user chooses to share information with you, we’ll use the contact details they provide for you to allow you to receive and accept or reject the request.

We use your email address and name if you are a customer of DataWollet's to protect your account, for example notifying you when there is a new sign-in and allowing you to reset your password.
We might contact you to provide support, which will normally be in response to a request you make, or if we need to speak to you about issues with a payment or billing.
We might contact you about offers and new features that may be of interest if you're an existing customer.
Our mobile app attempts to extract information from documents, emails and financial transactions to populate information in the app. An example of this is identifying your broadband provider or insurance policy details using an email or document scan. We do this to make our app easier to use by reducing manual entry. When we do this, the processing takes place on your mobile device only, and we don't share the information extracted without your consent.
Our mobile app allows you to connect financial accounts. If you choose to connect an account, we'll collect some information about the banks and account types you've connected (we need this to provide the service) but your transactions, balances, and account details aren't stored on DataWollet's servers. Our cloud services might be used to help deliver updates to your mobile device when new data becomes available, but we don't pass the detail of your accounts or transactions through our servers.
Our mobile app collects information on crashes or unexpected problems and sends these to the development team. This is normally anonymous data as we try to remove any personal information from logs before they're sent.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing information in the mobile app and is legitimate interests when you first register for an account, sign up for a subscription, or use core functionality like adding documents, where the processing all takes place on your own mobile device.

However, for some parts of the mobile app (e.g. connecting financial accounts, or sharing personally-identifiable data with others), we’ll provide a detailed explanation of how the functionality works and ask for your consent before proceeding. You can revoke your consent at any time.

Who we share information with

When we process bank account transaction data, we either use open banking standards or extract data from statements. In order to establish connections, satisfy regulatory requirements, and categorise spending we share some data with Moneyhub Financial Technology Ltd who are the legal provider of the Account Information Services (AIS) connections we use for open banking. When we extract data from a bank statement, we share a limited amount of data with Bud Financial Technology Ltd to assign a category to the transaction.

Our mobile app can be used to share information including:

You can choose to share some information with other DataWollet app users, such as sharing your household bill information with your partner. You can stop sharing at any time, but they might still have access to information from before you stopped sharing.
You can choose to connect a financial account to DataWollet, for which we'll need to share some basic information with Moneyhub Financial Technology Ltd ("Moneyhub"), who provide the API services that allow this data to be linked to DataWollet. You'll be given more information about this in the app before you link an account. They are authorised by the Financial Conduct Authority to provide account information services, and if you use this functionality they'll share information with DataWollet so we can display your account and transaction data in the mobile app and provide automation and insights.
You can choose to share information with service providers using DataWollet so you don't have to re-enter information elsewhere, such as to receive an insurance quotation. When you do this, we'll show you exactly what information you'll be sharing and who with.
You can choose to export data from DataWollet to be stored elsewhere, such as Google Drive or a W3C Solid Pod, as a backup or for you to use in other systems. This will only happen if you configure the app to do this.

How we store your personal information

Your information is securely stored. Access logs on our servers are encrypted, and our mobile app is designed to encrypt data until the device is first unlocked, or you can optionally enable further protection with biometrics, FaceID or TouchID.

We keep access logs for up to five years, and contact email addresses until up to three months after you ask us to stop contacting you. We will then dispose of your information unless you were a customer, where we’ll dispose of your data except that which we’re obliged to retain (e.g. details of any payments you made to us for legal and tax reasons).

Data you enter in the DataWollet app is not transmitted to DataWollet, except where explicitly stated in the app (such as if you volunteer to send us a file to improve our artificial intelligence).

If you send us documents to help us improve our artificial intelligence, we’ll keep these for no more than a year, and normally less time until we've added support for the document type.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us by email at support@datawollet.com if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us by email at support@datawollet.com.

You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address is Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Their helpline number is 0303 123 1113, and their website is www.ico.org.uk.