Privacy Policy — Daicho

Effective date: 23 October 2026 Last updated: 23 October 2026

1. Who We Are

Wisertrack Pte. Ltd. ("Wisertrack," "Daicho," "we," "us," or "our"), a company registered in Singapore, provides Daicho, a personal double-entry ledger that you keep through your own connected AI assistant, together with the Daicho website at daicho.app and the account pages at my.daicho.app (the "Service").

This Privacy Policy explains what personal data we collect, why, how we use and safeguard it, and the choices and rights available to you. Wisertrack decides how the personal data described here is used and is responsible for it. For questions, or to exercise any right described below, contact info@wisertrack.com. Our Data Protection Officer can be reached at the same address.

2. How Daicho Handles Data — Our Core Commitments

Your ledger is yours. We do not sell it, use it for advertising, or use it to train artificial intelligence models.
Each ledger is kept separate. The Service keeps every person's ledger apart, so one person's requests cannot read or change another person's ledger.
Daicho records money; it never moves money. We do not connect to your bank or card provider, and we never ask for bank passwords or card numbers.
Nothing in the ledger is edited behind your back. Entries are append-only; a correction is a visible reversal and a new entry.
You can take your data and go. You can export your whole ledger, and delete it, through your assistant at any time.

3. What We Collect

3.1 Account data

Your email address, used to sign you in and to contact you about your account, and the first name, last name and preferred base currency you give us when you create your account, which we use to greet you and to suggest a currency when you create your ledger, and the invite code you used to join the private beta (the code itself is not kept in readable form; we keep only a record that your account redeemed an invite). Daicho has no passwords; see Section 3.8.

3.2 Ledger data

What you or your connected assistant record in your ledger: account names and types, journal entries with their dates, descriptions, amounts, currencies and exchange rates, and settings such as your base currency, card limits, instalment plans and recurring payments. This can include detailed information about your personal finances. Please do not record bank passwords, card numbers or other credentials.

3.3 Connection data

Which AI assistant apps you have approved to connect to your ledger, and when.

3.4 Acceptance records

Which version of our Terms of Service and this Privacy Policy you accepted, and when.

3.5 Billing data

If you subscribe to a paid plan, we keep your plan's status, renewal or end date, whether it is set to cancel, and the customer and subscription references our payment provider gives us. Card and other payment details are collected and processed by our payment provider, not by us; we never receive or store card numbers. The provider handles that data under its own privacy policy and sends receipts and invoices directly.

3.6 Deletion records

When you delete your ledger, we keep a short record that a ledger was deleted, when, and how many entries, lines and accounts it held. It contains none of the ledger's content.

3.7 Device & technical data

Our infrastructure, hosting and sign-in providers may process technical data such as IP address, browser type and diagnostic information when delivering the Service and keeping it secure, including to limit how many requests an account can make in a short time. Daicho does not keep this data in its own records or use it to profile you; any provider logs are kept under that provider's own retention practices.

Daicho has no passwords. You sign in with a one-time code emailed to your address. We send sign-in codes and other account emails as part of operating the Service.

3.9 Your connected AI assistant

Daicho's main interface is your own AI assistant (for example Claude, ChatGPT, or another MCP-compatible tool), which you choose and connect yourself. Once connected and approved by you, your assistant can read your ledger and record entries in it, on your instruction. The assistant you connect is a separate, independent service, governed by its own privacy practices, not ours. Anything that assistant does with the data after receiving it (how it processes your request, what it may retain in its own history) is between you and that assistant's provider. See Section 6 for more on this boundary.

Daicho does not receive or store your conversations with your assistant. We receive only the requests your assistant makes to Daicho on your behalf and the details included in them (for example, an entry to record). We act on those requests and keep the resulting records as described in this policy, but we do not keep a separate copy of the requests themselves, apart from the technical data described in Section 3.7.

3.10 Cookies and browser storage

The Daicho website and account pages use only strictly necessary cookies or browser storage needed for them to work. The account pages keep your sign-in session in your browser's local storage on your device, so you stay signed in until you press Sign out or clear your browser data. We do not use advertising, analytics or cross-site tracking cookies.

3.11 What we deliberately do not collect

We do not collect passwords (there are none), bank or card credentials, or the content of your conversations with your AI assistant. We do not connect to your bank, and we do not collect information about you from other sources.

4. How We Use Your Data

We use the data described above to: provide, operate, and maintain the Service, including responding to your connected assistant's requests; sign you in and keep your ledger separate and secure; send sign-in codes and account emails; administer paid plans; respond to support requests; keep the Service reliable and prevent abuse; tell you about changes to the Service, our Terms of Service or this policy; and meet legal obligations that apply to us and enforce our Terms of Service.

We rely on the following grounds, where the law where you live requires one: performing our agreement with you (running your ledger and your account); your consent, which you can withdraw at any time by deleting your ledger or writing to us; our legitimate interests in keeping the Service secure and working; and compliance with legal obligations (for example, keeping billing records).

We do not sell personal data, and we do not use ledger data to build advertising profiles, share it with data brokers, or train artificial intelligence models. We do not make decisions about you based solely on automated processing, and we do not send you marketing messages; account emails are the only emails we send.

Service providers who help us operate the Service, including database and hosting, infrastructure, and transactional email delivery providers, described categorically here rather than by name to reduce unnecessary security exposure. If you need the specific list of providers, request it at info@wisertrack.com. They process data on our behalf and only to provide their services to us.
Our payment provider, which processes payments for paid plans and sends their receipts and invoices. Like our other providers it is described by category here; its name appears on every receipt.
The AI assistant you choose to connect (Section 3.9), only in response to your own requests, and only after you have approved its connection.
Authorities, only where required by valid legal process and only to the extent required.
A successor entity, in the event of a merger, acquisition, or asset sale, subject to the same privacy commitments described here.

We do not share data with advertising networks.

6. A Note on Third-Party AI Assistants

Daicho's design puts your own AI assistant at the centre of how you use the Service. This is intentional and central to how the product works. Because of that, it's worth being explicit:

The Service is designed to control what an assistant can see or change: only your own ledger, and only through the specific capabilities we expose.
We do not control what that assistant's own provider does with a request or a response once it leaves our systems as part of answering you; that is governed by the terms and privacy practices of the assistant you chose to connect, not by us. Choose an assistant whose privacy practices you are comfortable with.
Explanations, summaries, or charts your assistant generates from your ledger are produced by that assistant, not by us, and are not something we warrant the accuracy of. See our Terms of Service for how this affects what you can rely on.

7. Where Your Data Is Processed

Your ledger and account data are stored primarily in Singapore. Some of our service providers process data in other countries, for example to deliver web requests through a worldwide network or to send emails. Where personal data moves across borders, we use reasonable, industry-standard contractual and technical safeguards with our service providers to protect it in transit and at its destination, to a standard comparable to that required under Singapore law. Where the law of the place you live requires a specific transfer mechanism (for example, standard contractual clauses for data from the European Economic Area or the United Kingdom), we rely on that mechanism with the providers concerned.

8. Data Retention

We keep your ledger until you delete it, and your sign-in until you ask us to remove it. If we close an account under our Terms of Service, we delete its ledger within ninety (90) days of closure, except as listed below or where the law requires us to keep it.

Deletion records (Section 3.6): six (6) years.
Records of acceptance of our Terms of Service and this Privacy Policy (who accepted which version, and when): six (6) years.
Billing records: for as long as Singapore tax and accounting law requires us to keep them, which is currently five (5) years after the end of the financial year to which they relate. Receipts and invoices held by our payment provider are kept under its own retention practices.
Backups: where routine backups are kept, deleted data may remain in them for up to fourteen (14) days before it is overwritten.

9. Your Choices & Rights

You can act on your own data directly:

Access and portability: ask your connected assistant to export your ledger, at any time.
Correction: ask your assistant to reverse a wrong entry and record the correct one.
Deletion: ask your assistant to delete your ledger. To remove your sign-in as well, which also removes your name and currency preference, write to info@wisertrack.com.
Withdrawing consent: delete your ledger, remove your assistant's connection, or write to us.

You may also ask us what personal data we hold about you, how it has been used or disclosed, or to correct, restrict or object to its use, by writing to info@wisertrack.com from the address you sign in with. We will respond within thirty (30) days, and tell you if we need longer and why. We handle personal data in line with Singapore's Personal Data Protection Act 2012. Depending on where you live, you may have further rights, and you may also have the right to raise a concern with a relevant privacy regulator in your jurisdiction.

10. Security

We use reasonable, industry-standard efforts designed to protect personal data, including encryption of data in transit between your assistant, the Service and our database, separation of every ledger from every other, passwordless sign-in with one-time codes, your approval of every assistant that connects, and limits on how many requests an account can make. People who maintain the Service can technically access the database; they do so only to operate, repair or protect the Service, or where the law requires it. No system can be guaranteed 100% secure, and we make no absolute warranty to that effect. If we become aware of a data breach that affects you, we will notify you and the relevant authorities where the law requires.

11. Children's Privacy

Daicho is for adults. It is not directed at anyone under eighteen (18), and we do not knowingly collect personal data from them. If we become aware that we have collected such data, we will take reasonable steps to delete it.

12. Trademark Notice

Any third-party names, logos, or trademarks that may appear on our website or within the Service (for example, in connection with the AI assistants you can connect) are the property of their respective owners. None of these references imply any sponsorship, endorsement, or affiliation between Wisertrack and those owners.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a notice on our website or account pages, with reasonable advance notice where the change reduces your rights, and the "Last updated" date above will be revised. We may ask you to accept the new version before you continue using the Service. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

14. Contact Us

Wisertrack Pte. Ltd. Singapore Email: info@wisertrack.com