Privacy Policy
Last updated August 2026
Flow Wealth helps Australian households understand and improve their financial position. This policy explains what information we collect, how we use it, and the choices you have — including when Open Banking under the Consumer Data Right (CDR) becomes available. As of August 2026, Open Banking connection is not yet available in the product; financial information you see today is entered by you.
Who we are
Flow Wealth is operated by Flow Wealth Pty Ltd (ABN 62 699 173 085, ACN 699 173 085). Our website is https://flowwealth.ai. If you have questions about this policy or your data, contact us at support@flowwealth.ai.
When Open Banking is available, we intend to act as a CDR Representative under a representative arrangement with our proposed accredited Open Banking partner. Our Consumer Data Right Policy describes intended CDR handling in more detail.
Information we collect
We collect information you provide and limited technical data. When Open Banking launches, you may optionally connect accounts through our accredited Open Banking partner.
- Email address — used to sign in with your password and to identify your account.
- Waitlist details — email address and optional first name when you join the Flow Wealth beta waitlist on our website. We use these to contact you about beta access.
- Profile information — such as your first name and year of birth, collected during onboarding.
- Financial information you enter — including income, expenses, cash, debts, investments, and other household figures you choose to share.
- Open Banking (CDR) data — when the feature is available and you connect a financial institution, read-only account and transaction information received under your consent via our proposed accredited Open Banking partner. We do not collect or store your banking login credentials.
- Usage analytics — anonymous product events such as which screens you visit and whether onboarding is completed. We do not send dollar amounts, balances, or CDR data to analytics.
- Error monitoring — technical error reports to help us fix bugs. Financial values and onboarding payloads are excluded from these reports.
Open Banking and the Consumer Data Right
Open Banking in Australia operates under the Consumer Data Right (CDR). Open Banking connection is not yet available in Flow Wealth as of August 2026. When available, you will grant consent through our accredited Open Banking partner’s consent flow and authenticate directly with your bank.
We use CDR data only to provide Flow Wealth — for example to refresh balances and transactions, improve your household financial picture, and support Financial Health and educational insights. Flow Wealth does not initiate payments or move money on your behalf.
For data classes, consent management, withdrawal, deletion, complaints, and our CDR Representative arrangement, see our Consumer Data Right Policy at https://flowwealth.ai/legal/cdr-policy.
Consent
Creating a Flow Wealth account requires acceptance of our Terms of Use and this Privacy Policy.
Joining the beta waitlist allows us to contact you about Flow Wealth beta access. Joining does not create an account and does not guarantee a beta place.
Open Banking data is collected only after you give explicit CDR consent through the accredited Open Banking consent interface. You can review active connections in the application and withdraw consent at any time.
If you withdraw Open Banking consent or disconnect an account, we stop collecting new CDR data for that connection and delete or de-identify the CDR-derived data we hold, as described under Retention and data deletion.
How we use your information
We use your information to provide Flow Wealth, calculate your Financial Health overview, generate educational insights, and improve the product.
If you join the waitlist, we use your email (and first name, if provided) to contact you about beta access and related product updates.
We do not sell your personal information or CDR data.
AI processing
Financial scoring and household intelligence are computed inside Flow Wealth before any optional natural-language presentation.
When Ask Flow is enabled, we may send user-entered or pre-computed summaries to our AI provider — not raw Open Banking transaction feeds, account numbers, or banking credentials.
When Open Banking is operational, CDR-derived financial information for connected households will not be sent to our AI provider at initial launch until required legal and governance assessments are complete.
Core features remain available without AI narration where the product offers a non-AI path.
Third-party services
We rely on trusted providers to operate Flow Wealth:
- Wych — proposed accredited Open Banking partner for CDR consent management and read-only delivery (not yet operational).
- Supabase — authentication, database hosting, and secure storage of your account and household data.
- Vercel — application hosting and runtime processing.
- PostHog (EU) — product analytics. Only non-financial events are tracked.
- Sentry — error monitoring. Financial data is scrubbed before transmission; CDR must not be sent.
- OpenAI — optional natural-language narration when enabled. May receive user-entered summaries for Ask Flow; CDR-derived information for connected households blocked at Open Banking launch pending legal clearance.
- Resend — transactional email for waitlist notifications to Flow Wealth (does not receive financial or CDR data).
Storage and security
Your data is stored using industry-standard security practices through our hosting providers, including encryption in transit and access controls on our database. No system is perfectly secure, but we take reasonable steps to protect your information.
CDR data receives additional handling consistent with CDR Privacy Safeguards and our information security practices.
We may update this policy when material changes occur to how we handle personal information or Open Banking data.
Retention and data deletion
We keep your information while your account is active and as needed to provide the service, subject to legal retention requirements.
Waitlist registrations are retained while the beta waitlist is active and as needed to manage invitations, then deleted or de-identified on request or when no longer required.
You may request deletion of your account by emailing us. When you delete your account or use an in-product action that removes your data, we delete or de-identify personal information and CDR-derived data we hold, except where we are required to retain information by law.
When you withdraw Open Banking consent or disconnect a linked account, we stop ingesting new CDR data for that connection and delete or de-identify CDR-derived data tied to that connection, including derived scores and intelligence outputs that depend exclusively on that Open Banking link.
To request access, correction, or deletion, email support@flowwealth.ai. We will respond within a reasonable timeframe.
Your rights
Under Australian privacy law, you may request access to or correction of your personal information. You may also ask us to delete your account or raise a privacy or CDR complaint.
If you are not satisfied with our response to a CDR-related complaint, you may contact the Office of the Australian Information Commissioner (OAIC). See our Consumer Data Right Policy for complaint timeframes and contact details.
To make a request, email support@flowwealth.ai.
Children
Flow Wealth is designed for adults managing household finances. It is not intended for use by children under 18.
Changes to this policy
We may update this policy as the product develops. The date at the top of this page shows when it was last revised. Continued use of Flow Wealth after changes means you accept the updated policy.
Contact
Questions about privacy? Email support@flowwealth.ai.
Open Banking and CDR: https://flowwealth.ai/legal/cdr-policy