Privacy Policy for GhostWealth

Effective Date: May 15, 2026

GhostWealth ("we," "our," or "us") is committed to protecting your privacy while empowering your Sovereign Agent to realize hidden wealth. This Privacy Policy explains how we handle your data within the GhostWealth ecosystem, including the App, App Clips, and our Autonomous Settlement Engine.

1. The Sovereign Data Philosophy

Unlike traditional financial apps, GhostWealth is built on a "Local-First" architecture. We believe your data is your property. Our agents operate under the principle of Zero-Egress Reasoning whenever possible.

2. Information We Process

A. Behavioral Exhaust

To find wealth leaks (loyalty penalties, overcharges, arbitrage opportunities), our agents analyze your "Behavioral Exhaust," which may include:

• Email & SMS Notifications: Processed locally on your device via the Neural Engine (NPU) to identify merchant receipts and billing alerts.
• Transaction Metadata: Summary-level data used to initiate Universal Commerce Protocol (UCP) negotiations.

B. Agent Identity Card (AIC)

To authenticate your agent with third-party merchants, we generate an Agent Identity Card (AIC). This is a cryptographic token bound to your device's hardware signature (Secure Enclave). This ensures only your authorized agent can negotiate on your behalf.

C. Financial Information

Payments for Success Fees are processed securely via Stripe. GhostWealth does not store your full credit card details on our servers.

D. Biometric Authentication (Face ID / Touch ID)

GhostWealth uses local biometric authentication (Face ID or Touch ID) exclusively to verify your identity before unlocking the app and displaying sensitive financial details. The app relies entirely on standard Apple APIs (LocalAuthentication framework) for this verification. GhostWealth does not access, collect, record, store, transmit, or share any face data, facial maps, or biometric templates. The biometric scanning, matching, and validation are handled strictly by the iOS operating system and the device's Secure Enclave. The app only receives a success or failure indication from the operating system.

3. Data Sharing (UCP Protocol)

When your agent initiates a Squad Quest or a Sovereign Settlement, it shares limited, anonymized metadata with merchants via the Universal Commerce Protocol (UCP). This is strictly limited to the information required to secure a group discount or settlement.

4. Local Reasoning (NPU)

GhostWealth utilizes on-device AI (ExecuTorch/MLX) to parse sensitive data. This means your raw emails and messages never leave your device. Only the resulting "Arbitrage Opportunities" are sent to our Cloud Run backend for settlement execution.

5. Your Rights

• Sovereign Control: You can terminate your agent and delete all associated AIC tokens at any time from the Settings menu.
• Audit Logs: You have access to the full "Sovereign Audit Log" within the app to see exactly what your agent has negotiated.

6. Contact Us

For support or privacy inquiries, contact us at: support@ghostwealth.app