ENVESTA · THE ENVESTA GROUP LIMITED

Last updated: 1 October 2026

Who we are

Envesta is an investing education and community service operated by The Envesta Group Limited, a company registered in England and Wales, company number 16778392, registered office 124-128 City Road, London, England, EC1V 2NX (“Envesta”, “we”, “us”).

This policy covers envesta.app and this website, the Envesta app, and the Envesta shop at shop.envesta.app. It explains what personal data we collect, why we collect it, and the choices you have. You can contact us about anything in this policy at admin@envesta.app.

What we collect

On this website

Nothing automatically. This site sets no cookies at all, and carries no analytics and no advertising pixels. We do not build a profile of you, and we do not know who you are when you browse it.

Two things are worth stating plainly because they are not nothing:

• Fonts. Typefaces are loaded from Google Fonts. Your browser therefore makes a request to Google, and Google receives your IP address and basic request information as part of serving them.
• Hosting. The site is served by Cloudflare, which processes standard server logs, including IP addresses, to deliver pages and protect against abuse. It sets no cookies on this site.

Pre-registration. If you leave your name and email address to be told when the next wave opens, we store them in our database at Supabase, our hosting and database provider, so that we can contact you when a place is available. We keep them until you ask us to remove them, or until twelve months after the wave you registered for has opened, whichever comes first. If you also tick the box to receive Envesta updates, we will use your email address to send them until you unsubscribe. We do not share these details with anyone else, and we do not use them for advertising.

In the app

We collect the minimum we need to run it:

• Email address and password — when you create an account. Your password is stored only as a secure hash by our authentication provider; we never see it.
• Date of birth — when you create an account, to confirm you are 18 or over.
• Display name — the name you choose to appear as in community areas such as The Lounge.
• How you found us, and any referral code — your answer to “Where did you hear about us?” when you sign up (and a few words if you chose Other), plus a referral code if you enter one, and the campaign code in the link you followed to sign up (for example from one of our adverts), if it had one. They are kept with your account so we can see which channels, adverts and referrals bring members to Envesta. None of them is shown to other members or shared with anyone else.
• Content you post — messages, comments and reactions you share in community areas. These are visible to other members.
• Notification subscription — if you turn notifications on, your device’s push subscription so we can deliver them. Turning notifications off removes it.
• Profile photo (optional) — if you add a photo while signed in, it is uploaded to our hosting provider so other members can see it next to your messages in The Lounge. It is entirely optional, and the “Remove photo” button on Your Profile deletes our copy too.

We do not collect your location, contacts, advertising identifiers or browsing history, and the app contains no advertising or third-party analytics trackers.

In the shop

The Envesta shop at shop.envesta.app is a separate storefront running on Shopify. When you buy something there, Shopify processes the order, delivery and payment details needed to fulfil it, as our processor. We never see or store your card details.

We do not advertise through the shop and we do not share shop customer data with any advertising platform. There is no Meta pixel, no Google Ads tag and no other advertising tracker on it.

Shopify does set a small number of its own cookies to run the storefront — remembering your currency, your basket and your session — and collects basic store analytics for us as the shop owner. Those are Shopify’s own platform functions; they are not used to build an advertising profile of you and nothing is passed to advertisers.

What stays on your device

Some features are designed so the data never leaves your phone at all:

• Your Wealth Planner — everything you enter (assets, liabilities, income, bills, goals) is stored only on your device. It is never sent to our servers, and we cannot see it.
• Preferences — watchlists, saved items, lesson progress and similar settings are stored on your device.

Deleting the app, or clearing its site data, removes all of this.

How we use your data

• To create and secure your account and sign you in.
• To operate community features — showing your display name and posts to other members.
• To deliver notifications you have asked for.
• To respond when you contact us for support.
• To fulfil and support orders you place in the shop.

We do not sell personal data, we do not use it for advertising, and we do not use it to make automated decisions about you.

Where UK GDPR applies, we rely on the performance of our contract with you (running the service you signed up for), our legitimate interest in keeping the service secure, and your consent where you have given it.

Who processes it for us

We use a small number of service providers who process data on our behalf under contract:

• Supabase — authentication and database
• Stream — chat infrastructure
• Cloudflare — hosting and content delivery
• Shopify — the shop
• Google Fonts — typefaces on this website

They may store data in data centres inside and outside the UK; where data leaves the UK it is protected by standard contractual safeguards. We do not share your personal data with anyone else, and no third party is permitted to use it for their own purposes.

How long we keep it

Account data is kept while your account is open. Community posts remain visible while your account is open, as part of the shared conversation. When your account is deleted, your account data is removed and your posts are disassociated from you or removed. Support emails are kept for as long as needed to resolve the query. Order records are kept for as long as tax and consumer law requires.

Deleting your account

You can request deletion of your account and associated data at any time — see account deletion. We action requests within 30 days.

Your rights

Under UK data protection law you have the right to access, correct, delete, or receive a copy of your personal data, and the right to object to or restrict certain processing. Email admin@envesta.app to exercise any of these.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office (ico.org.uk).

Age

Envesta is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18; if you believe a minor has created an account, contact us and we will remove it.

Changes

If we change this policy we will update this page and the date at the top. Material changes will be flagged in the app.

Not financial advice

Envesta provides investing education and information, not financial advice. Investments can go down as well as up, and your capital is at risk.

Contact

The Envesta Group Limited, a company registered in England and Wales, company number 16778392, registered office 124-128 City Road, London, England, EC1V 2NX.

Email admin@envesta.app.