Privacy policy

What we collect

• Account details: your email address, first and last name, profile photo if you add one, and settings such as language, currency and colour. Your password is stored only as a one-way hash.
• What you enter: accounts and balances, transactions, categories, budgets, recurring payments, loans and the people you lend to or borrow from, and projects with their workers, work days, wages, materials and income. Files you import and workspace logos you upload are stored too.
• Sharing: who belongs to each workspace and their role, and the email address of anyone you invite.
• Sign-in records: when you signed in, how many times, and the IP address you signed in from.
• Phone apps: for each signed-in iPhone or Android phone, the device name, platform, app version and when it was last used, its session tokens (stored hashed), and a push notification token if you allow notifications.

How we use it

Only to run Heedwise for you:

• Showing your data, calculating balances, budgets, forecasts and payoff plans, and keeping your devices in sync.
• Sending account emails (confirming your address, resetting your password) and the invitations you send.
• Sending the notifications you turn on in the phone apps.

We don't show ads, track you across other apps or sites, or sell or rent your data. None of the apps include analytics, advertising or crash-reporting tools. The Android app includes Google's Firebase Cloud Messaging library only to receive notifications.

Who else sees it

• People you share a workspace with see that workspace's data. A workspace nobody else has joined stays private to you.
• Service providers that run the service for us: Oracle Cloud hosts our server, database and uploaded files; Cloudflare runs our domain and sits in front of the server to block attacks; Vercel hosts the web app; Resend delivers our emails. They process data only to provide that service.
• When you sign up on the web, Cloudflare Turnstile checks that you're a person. It sees your IP address and browser details, not what you type into the form.
• Apple Push Notification service delivers notifications to iPhones, and Firebase Cloud Messaging, run by Google, to Android phones. They carry only identifiers (the notification, its kind and the workspace); the app then fetches the text from us. Notifications leave out amounts unless you turn on “Show amounts on lock screen”.
• Authorities, when the law requires it.

On your device

• The phone apps keep a copy of your data on the phone so they work offline, including changes waiting to sync. On Android this copy is an encrypted database, one per account. Signing out or deleting your account erases it.
• Sign-in tokens are kept in the iOS Keychain on iPhone. On Android they're stored encrypted with a key held in the Android Keystore.
• Home screen widgets, and the Android app's launcher shortcuts, can show figures such as what's left this month. They read a short summary the app saves for them and never contact our servers. While you hide amounts in the app, they show dots instead. Signing out clears them.
• App lock uses Face ID or your passcode on iPhone, and your fingerprint, face or screen lock on Android. The check happens on the phone; we never receive biometric data. While app lock is on, Android's recent apps screen doesn't show the app's contents.
• To add a profile photo or workspace logo, the phone apps open the system photo picker. They only see the photo you pick and don't ask for access to your photo library or camera.
• After you sign in on Android, the system may offer to save your password in your password manager. That's your choice, and we don't see what it stores.
• The Android app's data is left out of Android backups and phone-to-phone transfers. On a new phone you sign in again and your data syncs down.

Cookies

The web app sets only the cookies its sign-in needs: a session cookie that keeps you signed in, plus short-lived security cookies. Your browser also remembers your theme and whether amounts are hidden. There are no advertising or analytics cookies.

Security

Data travels over HTTPS. Passwords and device session tokens are stored hashed, and every request is checked against the workspaces you belong to. Passwords must be at least 12 characters, and new passwords are checked against known data breaches by sending only the first five characters of their hash, never the password. After 10 wrong passwords in a row the account locks for an hour and we email you.

Keeping and deleting data

• We keep your data while your account is open.
• Sign-ups whose email address is never confirmed are closed after 7 days.
• When you delete something in the app, it's hidden and marked deleted rather than erased straight away.
• You can delete your account in the iPhone or Android app under Account → Delete account. This removes your email address from the account, signs out every device and removes you from your workspaces. If you're the only owner of a shared workspace, hand over ownership first.
• Records you created stay marked deleted after that, and data in workspaces shared with others stays available to those members. To have your data erased completely, or to close your account from the web, email privacy@heedwise.app.

Your choices

You can see and correct your details and data in the app at any time, and see or sign out the phones signed in to your account under Account → Signed-in devices. To get a copy of your data, have it erased, or ask anything about this policy, email privacy@heedwise.app.

Changes

If this policy changes, we'll update this page and the date at the top.

Contact

Ahammed Nafih, trading as Kanathil Technologies · privacy@heedwise.app