How Wealthfolio Connect Works
Wealthfolio Connect provides two key features: syncing your brokerage accounts and keeping your devices in sync. Here's how each works.
Brokerage Connect
Sync your financial accounts automatically
Local database
Connect About Aggregators
We use SnapTrade, a SOC 2 Type II certified financial data aggregator, to connect to your brokerages. With OAuth, your brokerage credentials remain with the broker. When OAuth is not available, SnapTrade stores the required brokerage credentials or API keys encrypted. Wealthfolio Connect never receives them. When you connect an account, you're authorizing SnapTrade to access the approved data, which we then fetch and deliver to your device.
How it works
Connect your account
SnapTrade, our SOC 2 Type II certified partner aggregator, hosts the connection flow. OAuth logins happen on the brokerage website; SnapTrade stores non-OAuth credentials encrypted when a broker requires them. Wealthfolio never receives your login details.
Aggregator fetches your data
The aggregator retrieves your account information, holdings, and transactions from your financial institution.
Connect delivers to your device
Wealthfolio Connect fetches the data from the aggregator and sends it directly to the Wealthfolio app on your device.
Stored locally
Your portfolio data is saved in your local database on your device, not on our servers. Daily syncs keep it up to date.
Device E2E Sync
Keep your devices in sync with end-to-end encryption
True End-to-End Encryption
Your data is encrypted on your device before it's sent, and only your other linked devices can decrypt it. We cannot read your synced data, even if we wanted to. The encryption keys never leave your devices.
How it works
Link your devices
Pair your devices by scanning a QR code or entering a pairing code. This establishes a secure connection between them.
Data encrypted on device
Before any data leaves your device, it's encrypted with keys that only your linked devices possess.
Encrypted transfer
The encrypted data passes through Connect. We cannot read it. Only your devices have the decryption keys.
Decrypted on arrival
Your other device receives the encrypted data and decrypts it locally. Your portfolio stays in sync across all devices.
Your Privacy
What we store and what stays on your device
What we store
Secure tokens from SnapTrade (not your credentials) that let us fetch data on your behalf. Stored with envelope encryption.
Provider account identifiers and your preferences like which accounts to sync. No account names or metadata.
Device name and platform (e.g., "MacBook Pro", "macOS") to identify your linked devices.
Encrypted blobs that pass through our servers during device sync. We cannot read this data—only your devices can.
Records of actions (connections added/removed, devices linked) for security. No financial data is logged.
What we never store
Wealthfolio never receives or stores them. OAuth credentials stay with the brokerage; when a broker requires non-OAuth credentials, SnapTrade stores them encrypted.
Broker activity is processed in transit during synchronization but is not persistently stored on Wealthfolio servers. Your imported history is stored on your device.
Holdings are processed in transit during synchronization but are not persistently stored on Wealthfolio servers. Your portfolio database remains on your device.
Balances pass through the Connect service during synchronization but are not persistently stored on Wealthfolio servers.
Returns, gains/losses, and all portfolio analytics are computed and stored locally.
You're in Control
Disconnect or revoke access anytime
Go to Broker Connections in the app and click Remove on any connection.
Go to Settings > Devices and unpair any device you no longer want synced.
Contact us and we'll remove all your data from our servers.
Removing a connection stops syncing from that source. Any data already on your device stays until you delete it from Wealthfolio.