HARBORMINT / BY WD DIGI
Privacy policy.
Effective 14 November 2026. This policy covers the HarborMint Windows app and harbormint.wddigi.com, published by WD DIGI.
Your local vault
Expenses, provider names, dates, amounts, notes, status history, settings and supporting PDF/PNG/JPEG files are stored on your Windows device. The app encrypts vault metadata and each imported file at rest using AES-256-GCM. Your passphrase derives the key using PBKDF2-SHA256 with a random salt and 600,000 iterations. The vault needs no HarborMint account.
WD DIGI does not receive or host your vault contents or passphrase. There is no cloud sync, receipt upload, bank connection, advertising SDK or app analytics SDK in this release. Avoid recording unnecessary diagnoses, payment card numbers, government identifiers or account credentials. Receipts can contain sensitive information even when you did not type it into a form.
When data leaves your vault
You choose the location of exports, saved attachment copies and backups through Windows dialogs. Evidence ZIPs and saved original copies are unencrypted. They include the selected records and supporting files. Anyone who can read those files can see the contents. Encrypted .hmb backups retain vault encryption and require the original passphrase.
If you choose a folder synced by OneDrive or another provider, that provider may upload your export or backup under its own terms. HarborMint does not control your chosen storage, sharing, disk backups or operating system.
Microsoft Store and Windows
Microsoft Store handles installation, Pro add-on payments, licensing, purchase restoration, distribution updates and refunds. The app requests Store license information; it does not attach receipt files, medical notes or expense metadata to those calls. Microsoft processes Store account and transaction data under its own policies. WD DIGI may receive sales and diagnostic information made available in Partner Center.
WebView2 renders bundled local interface files. The app blocks external renderer navigation and external web resources. Windows, Microsoft Store, WebView2 and security software may make their own system requests or collect diagnostics according to your Windows settings. Local vault operation does not require a network connection.
This website and the public demo
The website serves information, fonts and images without asking for receipts or an account. We do not add advertising trackers or an analytics beacon to this site. Cloudflare hosts and protects it and may process technical information such as IP address, requested URL, browser information and access times for delivery and security.
The interactive demo uses fictional records held in the current browser page memory. It does not accept real receipt uploads or save vault data to browser storage. A reload resets the sample. Demo exports contain fictional records and are downloaded only when you request them. Do not enter real medical or financial information into the demo.
Support communications
Emailing support@wddigi.com shares your sender address, message and any files you attach with WD DIGI and the email services that deliver it. We use those details to answer the request and maintain support records as needed. We do not sell support messages for advertising. Please do not send receipts, passphrases, medical details, full payment information or credentials.
Support information is retained as needed to resolve the request, maintain relevant records or meet applicable legal obligations. Contact us to request access, correction or deletion of information we control. Applicable rights, reasonable identity verification and record-keeping obligations may affect the request. We cannot inspect or erase a vault on your device remotely.
Retention, deletion and recovery
You control how long your local records remain. Deleting an expense removes it and its encrypted attachment files from the active vault. Exports, backups, disk snapshots and storage provider copies remain until you remove them separately. File deletion is not a promise of forensic secure erasure.
The vault locks after five minutes of inactivity and clears the working encryption key. The app cannot protect data from malware, screen capture, a compromised Windows session or someone who has the passphrase. There is no passphrase reset. Uninstalling or resetting an app may remove local data; export and back up before doing either.
Children, changes and contact
HarborMint is a record organization tool for adults managing their own or authorized household evidence. The website is not intended to collect children’s information. This is not a service for clinical care or a medical provider portal.
Material changes will be dated on this page. For privacy or security questions, email support@wddigi.com and identify HarborMint in the subject.