Your data, in plain language.

DRAFT — pending legal review. This text is a placeholder written to describe the software accurately. It has not been reviewed by a lawyer, it does not name the operating company, and it is not yet a binding policy. Questions about it can go to the address on our contact page.

When you sign up we store your name, email address and a one-way hash of your password (never the password itself), and your role (for example member, student or educator). During onboarding we store the answers you give: your location (state, city, postcode), age band, interests and career interests, and — for adult members only — income, investing experience, home-buying interest and lifestyle choices.

If you request Premium or are enrolled by a school, we store that request or enrolment, and your school's educators can see your progress in their cohort.

To make the platform work we store what you do in it: lessons and challenges completed and quiz scores, where you stopped in a video, goals, saved items and calculator scenarios, your paper-trading portfolio, trades and watchlist (practice money only), and a daily Wealth Score snapshot so we can show your trend.

We also store what you submit: questions you ask an expert from a video page or ahead of a live session (with any answer, and whether a moderator approved them), and your RSVPs to live sessions.

Calculator results and the Wealth Score are educational estimates, not financial advice.

We set one cookie of our own for everyone who signs in: a session cookie (wp_session) that keeps you signed in. It is HTTP-only, lasts up to 30 days, and is removed when you sign out. On our side we store the session with its expiry time and your browser's user-agent string. If you're one of our administrators using the "View as" preview, we also set a short-lived preview cookie (wp_view_as); it lasts at most two hours and is removed when the preview ends or you sign out.

To protect accounts from password guessing and abuse, we record attempts to sign in, reset a password, join the newsletter or send one of our forms with the email address entered and your IP address; for sign-up attempts we record only the IP address, unless you enter an access code, when we also record the email address you are signing up with. Redeeming an access code in your account, or sending beta feedback, records your account and your IP address. We use these records only to limit repeated attempts. Records more than a day old are deleted the next time the site tidies them up, which happens during normal use rather than on a fixed schedule.

We record product events — for example that a lesson was completed or a calculator was used — together with the page and, if you are signed in, your account. We use them to understand which parts of the platform help people, not to sell or target advertising.

Every page also loads a third-party real-user monitoring script from project-hq-nine.vercel.app. It receives technical information about your visit, such as the page address, load timing and browser details, so we can find errors and slow pages.

Our team, the administrators who run Wealth Playbook, can see your account's activity: when you were last active, when you signed in and on what type of device (for example "Chrome on Mac"), and the pages and tools you used, such as videos watched, lessons and quizzes, calculators and paper trades. They can also see the details you give us and the data you save: your profile and onboarding answers, goals, saved scenarios and plans, saved items, watchlist and paper portfolio, and the requests, forms and feedback you send. They use it only to give you support and to keep the service safe and working.

Only our administrators can see this, in the admin area. When one of them opens a member's activity page it is recorded in our audit log, at most once per administrator every 10 minutes. We keep the time and device type of your last 50 sign-ins, never your IP address with them, and we don't look up your location. Your educators see only your learning progress in their class. We do not sell any of it. When you delete your account, your sign-in history is deleted and your activity is no longer linked to you, as described below. A student's details are never included in the files our team downloads from the admin.

The app does not take payments and does not collect card or bank details. Premium access is granted on request by our team or through a school licence.

If you join the newsletter from the site footer we store your email address and when you signed up; signing up again with the same address simply keeps you subscribed. To be removed, contact us.

Account emails, such as password-reset and password-changed messages, are written to a message log in our database, including their full text (a reset message contains its one-time link). No email delivery service is connected yet, so these messages are stored but not currently sent.

When you send one of our forms (the contact form, the schools and educators form, the Next Gen school-interest form, a waitlist such as the Academy's Electrical waitlist, the newsletter sign-up or an RSVP to a live session) we store what you entered, for example your name, email address, organisation or school and your message, along with which form it was, when you sent it and your account if you were signed in. We use it only to reply to you and follow up on what you asked for, and we note whether our team has been in touch.

If you're testing the platform with a beta access code, you can send us feedback from a button on each page. We store your message, any rating you give, the path of the page you sent it from (never the part of its address after a "?") and your account, and use them only to improve the platform.

Only our administrators can see form submissions and feedback, in the admin area. When you delete your account, the submissions linked to it or sent with its email address, and your feedback, are deleted with it; if you sent a form without an account, contact us to have it removed. A student's details are never included in the files our team downloads from the admin.

We do not sell your personal information. It is processed by the hosting and database providers that run the service, and shared with your school only if you joined through one.

You can update your details in Settings, and delete your account there yourself (Settings → Security → Delete account; it needs your password). Deletion takes effect at once and can't be undone. It removes your name, email address, password and profile answers; your goals, saved scenarios and saved items; your video, lesson and challenge progress, XP, streaks and Wealth Score history; questions you asked, event sign-ups, watchlist and paper portfolio; class memberships, access requests and any membership; messages and forms you sent us (the contact, schools, Next Gen school-interest and waitlist forms, live-session RSVPs and your newsletter sign-up), whether you sent them signed in or with your account's email address; any beta feedback you sent; and the account emails stored for you. If an access link was set up for your email address only, deleting your account also switches that link off for good and removes your address from it. You are signed out everywhere and the account can't be signed in to or restored.

What we keep can't identify you: product usage events, no longer linked to any account, and our team's audit log of admin actions (for example that a request was approved) with your details removed. An empty record of the account remains so those counts stay consistent. Classes a teacher created belong to the school and stay, with their students' progress.

To ask for a copy of your data, contact us. The reviewed policy will set out retention periods and your rights under the laws that apply to you.