Privacy Policy
Last updated: 21 September 2026
Vantage helps you see your net worth in one place. Doing that means handling financial information about you, so this policy sets out exactly what we collect, why, who we share it with, and the control you have over it.
1. Who we are
Vantage is operated by Charles Timms Ltd ("we", "us"), a company registered in England and Wales, company number 13477921, with its registered office at The Old Station, Station Road, North Kilworth, Lutterworth, Leicestershire, LE17 6HY.
We are the data controller for the personal data described in this policy. You can contact us about anything in it at realthyme1@gmail.com.
2. Data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account identity | Your user ID and email address | You, when you sign up (including Sign in with Apple) |
| Financial information you enter | Account names, types, institutions, balances, currencies, and any contributions you log | You, directly in the app |
| Bank and card information | Account names and types, sort code and account number where the bank provides it, balances, and credit card balances | Your bank, via TrueLayer, only after you consent |
| Past transactions, read once | Transactions from the months before you connected, used solely to reconstruct the balance history behind your net worth chart. We derive a daily balance from them and discard the transactions themselves; they are never written to our database | Your bank, via TrueLayer, in the minutes after you consent |
| Investment holdings | Positions held in a connected investment account: name, symbol, quantity, price and value | Connected investment providers |
| Derived information | A daily record of your total net worth and its breakdown by category | Calculated by us from the above |
| Notification settings | A device token, your chosen delivery time and time zone | Your device, only if you turn notifications on |
What we deliberately do not collect
- A record of your spending. We read your transaction history once, when you connect, and keep only the daily balances we work out from it. We do not store your transactions, and nothing in the app shows you what you spent money on.
- Your banking credentials. You authenticate directly with your bank. We never see your username, password, or security codes.
- Analytics and tracking. We do not use advertising identifiers, third-party analytics, or tracking pixels, and we do not build advertising profiles.
Where you connect an investment account using an API key you generate yourself, that key is stored in your device's secure Keychain and is never transmitted to our servers.
3. Open banking
When you connect a bank account, we use TrueLayer Limited, which is authorised and regulated by the Financial Conduct Authority as an Account Information Service Provider. TrueLayer provides the regulated account information service and connects to your bank on your instruction; Charles Timms Ltd receives the resulting balance information in order to display it to you in the app.
You are always in control of a bank connection. You give explicit consent before it is created, you can withdraw that consent at any time in the app or with your bank, and under open banking rules you will be asked to re-authenticate at least every 90 days.
Disconnecting a bank deletes the access tokens we hold for it immediately, and we stop retrieving any further data from that bank.
4. Why we use your data, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Creating your account and signing you in | Performance of a contract |
| Showing your accounts, balances and net worth | Performance of a contract |
| Retrieving data from your bank | Your explicit consent |
| Sending a daily net worth notification | Your consent (you can turn it off at any time) |
| Keeping the service secure and working | Our legitimate interests in operating a reliable service |
| Meeting our legal and regulatory obligations | Legal obligation |
We do not sell your personal data, and we do not share it with anyone for their own marketing.
5. Who we share it with
We share data only with service providers who process it on our behalf, under contract, and only as needed to run Vantage:
| Provider | What they do |
|---|---|
| Clerk | Account sign-up, sign-in and identity |
| TrueLayer | Regulated open banking connection to your bank |
| Fly.io | Application hosting (our servers run in London) |
| Neon | Managed database hosting |
| Apple | Delivering push notifications, if you enable them |
We may also disclose data where the law requires it, or to establish or defend legal claims.
Some providers may process data outside the UK. Where that happens, the transfer is protected by an adequacy decision or by the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- While your account is open: we keep your accounts, balances and net worth history so the app can show your position over time.
- Bank access tokens: deleted as soon as you disconnect a bank, and they expire on their own if unused.
- If you delete your account: your personal data is deleted from our live systems, and removed from backups within 30 days.
7. How we protect it
- All traffic between the app and our servers is encrypted in transit with TLS.
- Bank access and refresh tokens are encrypted at rest, separately from the rest of the database.
- Any API keys you supply for an investment account stay in your device's Keychain and never reach our servers.
- Access to production systems is restricted and authenticated.
No system is perfectly secure, but we take these measures seriously and review them as the service grows.
8. Your rights
Under UK GDPR you have the right to: access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to how we use it; receive your data in a portable format; and withdraw consent at any time, without affecting anything done before you withdrew it.
To exercise any of these, email realthyme1@gmail.com. We will respond within one month.
If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113.
9. Children
Vantage is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
11. Contact
Charles Timms Ltd
The Old Station, Station Road, North Kilworth, Lutterworth, Leicestershire, LE17 6HY
realthyme1@gmail.com