We can look. We can't touch.
Worthken sees your balances so it can add them up. It can never move a cent. Here's exactly how we protect your data, what laws we design for, and what we're doing next.
Six promises, kept in code.
Read-only, by design
Worthken can see balances. It can never move money, place trades or hold funds. That is an architectural rule, not a setting.
Passkeys first
Sign in with Face ID, Touch ID or a security key. Two-factor is mandatory, and sensitive actions ask you again.
Encrypted everywhere
Provider tokens are encrypted with keys held in a managed KMS. Vault documents are end-to-end encrypted on your device.
Nothing sensitive in logs
No account numbers, balances or tokens in logs, traces or error reports. Ever.
Your data is never the product
No ads. No selling or sharing data. Export everything to CSV or a PDF statement whenever you like.
Information, not advice
Worthken explains what changed. It never tells you what to buy, and never has a product to sell you.
Privacy isn't a setting. It's the architecture.
Most finance apps are free because you're the product. Worthken is built the other way round: read-only by design, encrypted end to end where it matters, and paid for by people who use it, not by advertisers.
Read-only
No money movement means no payment credentials, no trading permissions, nothing to steal that can move a cent.
Data minimisation
We collect what the product needs, keep it only as long as it needs it, and publish the schedule.
Your rights, self-serve
Export, correct or delete your data from inside the app. No support ticket, no retention maze.
No advice, no conflicts
We never recommend investments or earn commissions, so nothing in the product is nudging you.
Built for the laws where your money lives.
Worthken is designed from day one around the privacy and security rules of the countries we serve. Being read-only and advice-free is a deliberate choice that keeps your data out of the riskiest categories entirely.
| Region | Law |
|---|---|
| India | DPDP Act 2023 & Rules Clear consent notices, a grievance officer, breach reporting, verifiable parental consent for under-18s. |
| United States | GLBA / FTC Safeguards Rule, state privacy laws (incl. CCPA/CPRA), COPPA A written security programme, a named security lead, regular risk assessments, no data sales. |
| EU & UK | GDPR / UK GDPR Lawful basis for every field, data-subject rights, 72-hour breach notification, safeguarded transfers. |
Independent assurance roadmap
We’ll publish reports here as each one lands. We don’t claim certifications we haven’t earned.
- 01Independent penetration testBefore public launch
- 02SOC 2 Type IIYear one
- 03ISO 27001As we scale
- 04Public bug bountyAfter launch
Sub-processors for this website
The app’s full list is published before launch.
Vercel
Website hosting, cookieless web analytics · Global edge
Found a vulnerability?
Please tell us first. Email security@worthken.com. We’ll acknowledge within two business days and won’t pursue good-faith research. Our security.txt has the details. See also our Privacy Policy.
Questions, answered.
Can Worthken or its staff move my money?
No. Worthken only ever requests read-only access. There is no code path that initiates payments, transfers or trades, and no staff role that can.
Does Worthken store my bank password?
No. Accounts connect through regulated, read-only data providers that give Worthken an access token, never your credentials. Tokens are encrypted with keys held in a managed KMS.
Can Worthken read my vault documents?
No. Vault documents are encrypted on your device before upload, with keys we don't hold. If you lose your keys, the recovery kit you set up is the only way back in.
Do you sell or share my data?
Never. Worthken makes money from subscriptions only. We don't sell data, run ads or share it for marketing, and we don't use it to recommend financial products.
How do I delete my data?
In the app: Settings → Privacy → Delete account, which removes your data on a published schedule. If you emailed us for early access, ask at hello@worthken.com and we'll delete that correspondence.
Early access · free
Private by design. Ready when you are.
Drop us a line. We’re inviting people in small batches, starting with anyone whose money lives in more than one country.
Free during early access. We read every one.
This opens your email app; the site itself stores nothing. We’ll only use your email to reply and invite you, and you can ask us to delete it anytime. See our Privacy Policy.