Wumbi The app

Privacy

Privacy policy

Last updated: 12 September 2026
Applies to: the Wumbi mobile app for iPhone and Android, and this website.
Short version: the free app has no account and sends your transactions nowhere. The only thing it ever fetches is an exchange rate.

What we collect

From the free app: nothing. There is no sign-up, no email address, no password, no device identifier, no advertising ID and no profile. We do not know who you are, how often you open the app, or that you installed it.

This is not a promise we are asking you to take on faith. The app ships with no analytics SDK, no crash-reporting SDK, no advertising SDK and no attribution SDK, and it declares no runtime permissions: no location, no contacts, no camera, no photos.

What lives on your device

Everything you type into Wumbi stays on the phone:

  • your transactions, amounts, descriptions and tags
  • your wallets and their currencies
  • your subscriptions and upcoming payments
  • your settings, including language, theme and base currency
  • a local cache of exchange rates

It is stored in a database encrypted with AES-256. The encryption key is generated on your device and kept in the platform's secure storage, which is the iOS Keychain or the Android Keystore. We never see the key and there is no copy of it anywhere else, which also means we cannot recover your data if you lose the phone.

Deleting the app removes the database. Inside the app, one tap in Settings wipes everything immediately.

Exchange rates, the one request the app makes

Wumbi converts between currencies, so it needs rates. It gets them from the open-source currency-api project, which is served from public content delivery networks (cdn.jsdelivr.net, with a fallback on currency-api.pages.dev). No API key, no account, no registration.

That request asks for a currency pair and contains nothing else. No transaction, no amount, no description, no tag, no identifier. Like any request to any website, the CDN serving it can see your device's IP address and the time, because that is how the internet delivers a response. We receive none of it: the request does not pass through any Wumbi server, because there is no Wumbi server.

Rates are cached on the device for 12 hours, so the app makes this request rarely, and it works completely offline on the cached values. Every transaction also stores the rate it was created with, so your history never changes when rates move later.

When you first set up the app, Wumbi suggests a currency based on your device's language and region settings. That check happens on the phone. It is not an IP lookup and nothing is sent anywhere.

This website

wumbi.app serves static pages. As of 12 September 2026 it sets no cookies, runs no analytics, embeds no tracking pixel and loads no third-party fonts or scripts: the fonts are served from our own domain precisely so your browser does not have to talk to anyone else.

Your browser stores two things locally, on your device only, which never reach us: the language you picked, so the site opens in it next time, and a note that you joined the waitlist, so the form does not ask twice. You can clear both by clearing site data.

Our host keeps standard server logs (IP address, time, page requested, user agent) for security and troubleshooting, as every web host does.

If we ever add analytics it will be a cookieless, privacy-preserving kind, and this page will say so before it goes live.

If you join the waitlist

You give us an email address. We use it for exactly one thing: one message on the day Wumbi launches. No newsletter, no drip sequence, no sharing it, no selling it, and no passing it to advertisers.

The form is delivered by Web3Forms, which processes the submission and forwards it to us by email. Your address is also stored in your own browser so the form knows you already signed up.

Under the GDPR the lawful basis is your consent, given by submitting the form. Reply to any message from us, or write to support@wumbi.app, and we will delete your address. We keep it until launch, or until you ask, whichever comes first.

Premium, which has not launched yet

Everything above describes Wumbi as it exists today. Premium will add two features that change the picture, and both are optional and off until you switch them on:

  • Encrypted backup. Creating an account so your data survives a lost phone. Only then does anything leave the device, and it leaves encrypted.
  • Bank sync. Connecting a bank so transactions arrive without typing. This involves a regulated third-party provider, and it will have its own clearly written section here.

The free app will never require an account, and neither feature will ever be switched on without you doing it. This page will be rewritten, and dated, before either ships.

Your rights

If you are in the EU, the EEA or the UK, the GDPR gives you the right to access, correct, delete and port your personal data, to object to processing, and to complain to your national data protection authority.

For the app, those rights are mostly something you exercise directly: the data is on your phone, you can read it, edit it and delete it without asking anyone. We hold none of it, so there is nothing for us to hand over or erase.

For the waitlist email address, write to support@wumbi.app and we will act on it.

Children

Wumbi is not directed at children under 13, and we do not knowingly collect anything from them. Since the app collects nothing from anyone, there is nothing to delete, but if you believe a child has given us a waitlist email address, tell us and it goes.

Changes to this policy

When this changes in substance, the date at the top changes and the new version explains what moved. We will not quietly widen what we collect and leave the date alone.

Contact

Email
support@wumbi.app
Operator
The operating entity is not published yet. Ask us at support@wumbi.app and we will tell you.
Address
A postal address is not published yet. Ask us at support@wumbi.app and we will tell you.