Privacy Policy

Information we collect

Chat messages you send are transmitted to our AI provider to generate a reply. Saved scholarships, loans, and products stay in your browser only (localStorage) — there is no account sync. Your country choice (Canada or United States) and optional student profile are also kept in this browser so pages like Marketplace and Guides open on your country. Links to banks and issuers are not affiliate links or paid placements today. We do not send them your profile, saved items, or email; once you open their site, their own privacy rules apply. If we add affiliate links later, we will label them and update this policy to say what the link partner can see.

Digest, Kit, and loan forms

If you join the Kit waitlist, we receive your email and the optional school and country you add. If you send a private-loan interest form, we receive school, level, year, residency, an optional amount, and an optional email, and only with your consent. These reach the WealthNutz inbox by email. The Kit form also keeps a copy in your browser so the page remembers you joined. We do not collect SIN, SSN, date of birth, full address, or credit score.

Deadline digest

The deadline digest is an optional email with upcoming official student aid deadlines. It is not for people under 16. You must tick a box to agree before we take your address.

Before it launches, your signup (email, country, optional school, and that you agreed) reaches the WealthNutz inbox by email. When it launches, we send you one message asking you to confirm. If you don't confirm, we email you nothing more and delete your address, including the copy in our inbox. If you confirm, that inbox email is kept as your signup record for as long as we keep your consent record (below).

The form also saves your email, country, and school in this browser so it is filled in next time. That copy stays on your device; clear your browser data to remove it.

Once it is live, new signups also get just that one confirm message. Unconfirmed addresses are not stored; confirm links stop working after 7 days. When you confirm, we store your email address, when you signed up, when you confirmed, which version of the consent wording you agreed to, and whether you have unsubscribed. The exact text of each version is kept in our records. We do not store your IP address. We use this only to send the digest and to show that you agreed.

Every digest has a one-click unsubscribe link, and it takes effect right away. You can also write to wealthnutz.official@gmail.com. After you unsubscribe we keep only your email address, your consent record, and the unsubscribe status for 3 years, so we never email you again and can show you had agreed; then we delete it. Our email service, Resend (a US company), stores the digest list and sends the emails for us. We do not sell your address or share it with advertisers, and the digest has no paid or partner offers.

Who we share data with

• Vercel hosts the site and counts page views.
• Resend delivers signup and form emails to our inbox, and stores the deadline digest list and sends the digest.
• Anthropic, our AI provider, receives the chat messages you send so it can reply.
• Tavily, our search provider, receives the search terms you type.
• Gmail (Google) holds the WealthNutz inbox, where signup and form emails and the emails you write to us arrive.
• Upstash (a US company, servers in Washington, D.C.) holds short-lived counters that help us limit how many requests one connection can make, and our weekly totals of taps to official sites and calendar downloads.

School Secretary, our separate desktop app, can send us a random code that changes every week, made on the student's computer, the app version and the week number, once a week, but only if the student turns that on in the app. It is for people 16 and older. We add the code to a weekly count that keeps no list of codes, keep the weekly totals for about 13 months, and never link it to this website, to an email address, to a School Secretary Pro purchase or to who you are. We don't store IP addresses from it. Our hosting provider (Vercel) may keep routine request logs for a short time.

Where your data is processed. Our service providers (Vercel, Upstash, Anthropic, Resend, Tavily and Gmail) are in the United States, so information you send may be processed there. We picked them for the jobs listed above and we give them only what those jobs need.

We do not share loan-form details with any lender today. If that changes, we will name the partner on the form and ask for your consent first. We never sell personal information.

How long we keep it, and your rights

We use your email and form details only to send what you signed up for or to reply about your request. We keep them until you unsubscribe or ask us to delete them, except the short digest consent record described above, which we keep for 3 years after you unsubscribe.

Emails you write to us are different. If you email wealthnutz.official@gmail.com, including from the Contact page, we use your address and message only to answer you, and we delete the conversation within 6 months of the last message in it, or sooner if you ask. If it is about a complaint, a dispute or a request about your data, we keep it until that is settled and then delete it within 6 months. Gmail keeps deleted mail in its trash for up to 30 days.

You can ask to see, correct, or delete your data at any time, wherever you live in Canada or the United States, including under PIPEDA, Quebec Law 25, and US state privacy laws such as the CCPA. The person in charge of protecting personal information for WealthNutz is its owner. Email wealthnutz.official@gmail.com and we will reply within 30 days.

Site analytics

We use Vercel Analytics to count page views and a few actions, such as running a search, asking chat a question, joining the digest, or clicking through to a product. These events record only coarse details like your country setting. We do not add your email, school, chat text, or anything else that identifies you.

When you tap Add to calendar, we count it as a page view, like any other page. The OSAP calendar file is built from the study end date you type, which is sent to our server in the web address so the file can be created. We do not save that date or link it to you, but our hosting provider (Vercel) may keep routine server logs, including web addresses, for a short time. The Add to Google Calendar button is a link to Google: it opens Google Calendar with the date and its title filled in, and Google handles it under its own privacy policy. We don't count taps on it.

If you subscribe to a dates calendar on the Deadlines page (for a school, a province or state, or scholarships), your calendar app (for example Apple, Outlook or Google) fetches a public file from our site every so often. Each file is the same for everyone and has nothing about you in it. Like any request, it reaches our hosting provider (Vercel), which may keep routine server logs, including which file was asked for and the network address it came from, for a short time. We don't use those logs to find out who you are, and we look only at overall request totals. Google Calendar fetches the file through Google's own servers. Dates come from official pages and can change, so confirm on the official page. To stop, remove the calendar in your calendar app.

Deadline list on other websites. Some schools and counselors show our deadline list on their own pages. The list sets no cookies, runs no analytics and stores nothing. When it loads, the visitor's browser asks our server for the list, so our hosting provider (Vercel) sees the IP address and browser type in routine request logs kept for a short time. We do not store them, and we don't know which person is looking.

Some links to official sites, and the “Send to a parent” and calendar buttons on our aid checklist, open a short WealthNutz page first (its address starts with /go/). That page is counted as an ordinary page view in Vercel Analytics, which sees the address you tapped (for example, which aid card), the page you came from, your approximate location (country, region and city), and your device and browser type, and then it takes you on to the official site. We don't add your name, email, school or anything you typed. Our hosting provider (Vercel) may keep routine server logs, including web addresses, for a short time. If your browser or an ad blocker stops analytics, the tap isn't counted, but you're still taken on. The official site you land on can see that you came from WealthNutz, and its own privacy policy applies. “Send to a parent” uses your phone's share, text or email, so we never see the message or who you send it to. Ticks you make on the checklist stay in your browser. The Send to a parent and calendar buttons on the matcher make their file or message on your device and don't open a WealthNutz page first.

We also add up, for each week, how many taps go through to official sites and how many calendar files are downloaded. We keep only those totals. We don't record which link you tapped, which page you were on, your school, or the date you typed. To avoid counting the same device twice in one day, our server scrambles your network (IP) address and browser type into a one-way code, using a random key that changes every day and is deleted within 2 days, so we can't follow you from one day to the next. The code goes to Upstash (see above), which stores it only in a counting tool that keeps a rough count of how many different codes it has seen, not the codes themselves. Your IP address is never sent to Upstash for this. No cookie or browser ID is used. The daily totals delete themselves after about 6 months. If your browser or an ad blocker stops the /go/ page's count, you're still taken on.

Will my aid cover it? The numbers you type into the aid gap calculator stay in your browser. We don't save them, send them to our servers or analytics, or put them in the web address. Closing or refreshing the page clears them.

Find a deadline. What you type in the Find a deadline box on the Deadlines page is matched against our list of checked dates in your browser. We don't receive it, save it, add it to analytics or put it in the web address, and it isn't sent to our search or AI providers. Closing or refreshing the page clears it. If you open another WealthNutz page from a result, such as Add to calendar, that is counted as an ordinary page view. Links to official pages in the box go straight there and aren't counted.

Aid matcher and aid finder. The matcher and the aid finder on Money students miss ask a few questions. Some are personal, for example about a disability, people who depend on you, being First Nations, Inuit or Métis, military service in your family, or money. Every question can be skipped, and each personal one has Prefer not to say. Your answers stay in this browser. We don't receive them, and we don't add them to analytics, chat, search or the web address. If you tick Remember my answers, this browser keeps only where and what you study until you clear it. It never keeps your age or your answers to the personal questions. Ticks on cards for a particular group are kept only while the page is open, even if you tick Remember. Clear my answers also clears your ticks, so use it on a shared computer. If you tap through to an official site through a /go/ page, that tap is counted as described above; it shows which official page was opened (which for an award for a particular group may hint at something about you), never your answers. The disability grant links straight to the official page and isn't counted. Results are a starting list, not a promise you'll get anything. The program decides who gets it.

My plan. My plan shows your Aid matcher list again each time you open it. It is built in your browser from what Remember my answers keeps (where and what you study), and it is only made if you tap Keep this as my plan or tick Remember my answers in the Aid matcher or the aid finder. Your Done ticks are kept in this browser too, except ticks on items for a particular group, which last only while the page is open. We don't receive your plan or your ticks, and we don't add them to analytics, chat, search or the web address. Opening the plan page is counted as an ordinary page view, like any other page, and a tap through a /go/ page is counted as described above. Clear my plan removes the ticks and everything the Aid matcher and the aid finder remember; Clear my answers on either of those removes the plan too. If you add WealthNutz to your phone's home screen, that is done by your browser; we are not told, and it does not turn on notifications. On an iPhone or iPad the home-screen copy may keep its own plan and ticks, separate from Safari, so clear each one.

Your dates and Send to a parent. If you add your matcher results to your calendar or send them to a parent, your own browser or phone builds the calendar file or the message. We don't receive it. It lists award names, the dates we checked and links to the official pages. It never includes your answers. But a list can hint at things about you (for example, an award for a particular group), so we leave those awards unticked. Look at the list before you share it. Anyone you send it to can pass it on. A calendar file you download stays on that device until you delete it, so remove it if you are on a shared computer. Dates can change: check each official page.

Limiting abuse

To stop bots from running up our AI and search costs, we limit how often one connection can use chat, search and our forms. When you use one of these, our server takes your network (IP) address, scrambles it into a code (a one-way hash), and sends only that code, with a counter and a time window, to Upstash, our limit-counting service in the United States. Your IP address itself, your email, your messages and your searches are not sent to Upstash for this. Each counter deletes itself when its window ends, within 24 hours at most. Our hosting provider, Vercel, also sees your IP address as part of serving the site, and has a firewall rule that watches request rates to our chat; it currently only records them. Scrambled codes can sometimes be matched back to an address by someone who already has that address, so we treat them as personal data.

Third-party sites

When you leave WealthNutz for a bank, lender, card issuer, or scholarship site, that site’s privacy policy applies. The same goes for TikTok and Instagram when you tap Watch on our Videos page; we don’t embed their players, so nothing loads from them until you tap.