Privacy Policy

We collect only what we need to run the app:

• Account data: the email tied to your Sign in with Apple or Google account, and your name and profile photo if your provider shares them.
• Your financial data: the transactions, amounts, categories, accounts, budgets, and notes you add.
• Receipt images: photos you scan or upload so Heo can read the amount and merchant.
• AI input: the text or voice you give the AI quick-add so it can turn it into a transaction.
• Subscription data: your Heo Pro purchase status. Payment is handled by Apple. We never see or store your card details.
• Basic usage and device data: app version, device type, and crash or diagnostic logs, used to keep the app stable.

We use your data to run the app: store and sync your transactions across your devices, parse text, voice, and receipt input into expenses, convert currencies, manage your Heo Pro subscription, and provide support. That's it. We do not build advertising profiles.

When you use AI quick-add or scan a receipt, the text, voice, or image is sent through our secure backend to a third-party AI provider that extracts the structured details (amount, merchant, category, date). These providers process the input only to return a result. They are bound by contract not to train their models on your data or to keep it beyond what is needed to respond. If you never use these features, this data is never created.

Heo is offline-first. Your app lock (Face ID, Touch ID, or PIN) is handled by iOS on your device. We never receive your biometrics or PIN. Cached data stays readable on your device with no network, and only syncs when you are online.

Your synced data lives in Google Firebase (Firestore, Authentication, and Cloud Storage for receipts), a trusted cloud provider acting on our behalf. Data is encrypted in transit and at rest. Access is restricted to the systems that run the app.

• We never sell or rent your personal or financial data.
• We never use your transactions, receipts, or AI input to train AI models.
• We never share your data with advertisers.

We share data only with the processors that make the app work, under contracts that limit them to that purpose:

• Google Firebase for authentication, database, and receipt storage.
• Our AI provider for parsing text, voice, and receipt input.
• Apple for sign-in and for processing Heo Pro purchases.

You can edit or delete any transaction at any time. You can delete your entire account from Settings, which removes your data from our active systems. Depending on where you live, you may have additional rights under the GDPR or CCPA, including access, correction, and deletion. Email support@heo.app to exercise them.

We keep your data while your account is active so you can use the app. When you delete your account, we delete your content from our active systems. Backups holding residual copies are rotated out on a regular cycle. We may keep minimal records where the law requires it.

Heo is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has used Heo, contact us and we will remove the data.

If we change this policy, we will update the date above and, for significant changes, notify you in the app. Continuing to use Heo after a change means you accept the updated policy.

Questions about privacy? Email support@heo.app.