Privacy Policy

Who we are

Hearth is a household budgeting app operated by InfoInlet (“we”, “us”). We are the data controller for the information described in this policy.

Contact: contact@infoinlet.com

Information we collect

Only what the app needs in order to work.

Your account

• Name, email address, locale and timezone, and whether your email address has been verified.
• A password, if you sign up with email — stored only as a hash by our authentication provider. Hearth itself never sees, stores or logs it.
• If you use Sign in with Apple or Google: the name and email address the provider shares with us.

Your households

• The households you belong to, their name, currency, country and timezone, and your role in each.
• The names and email addresses of other members, and of anyone invited.

Your financial records

• What you and your household enter: accounts, transactions, transfers, categories, budgets, bills, repeating entries and savings goals.
• An activity log of who changed what within a household, so shared records can be explained.

Settings and notifications

• Notification preferences, and your choices for hiding amounts and biometric lock.
• Your in-app notification inbox: bill reminders, budget alerts and monthly summaries.
• If your device registers for push notifications, a device token so those notifications can reach it.

Subscription

• Whether Hearth Plus or a free trial is active, when it ends, and the store’s transaction identifier. We never see your card or bank details.

Technical information

• Server logs needed to run and secure the service, such as request times and error messages. They do not contain your financial records.

What we never collect

• Bank credentials. Hearth never asks for them and cannot use them.
• Card numbers. Purchases are handled entirely by Apple and Google.
• Your location, contacts or photos.
• Your advertising identifier. Hearth contains no advertising, analytics or tracking code, and does not track you across other companies’ apps or websites.
• Your face or fingerprint. Face ID and fingerprint unlock are performed by your phone, which tells Hearth only whether the check passed.

How we use it

• To run Hearth: store your household’s records and show them to its members.
• To create and secure your account and sign you in.
• To send the emails the app needs: a verification code, a password reset, and household invitations you ask us to send.
• To produce the bill reminders, budget alerts and monthly summaries you have switched on.
• To check your subscription with Apple or Google.
• To answer you when you contact support, and to keep the service secure.

We never sell your information, never use it for advertising or profiling, and never use your financial records to train AI models.

Legal bases in the EU and UK: performance of our contract with you for running the app, and our legitimate interest in keeping it secure and answering support requests.

Who can see your records

A household is the privacy boundary. Records belong to the household they were created in, and only its members can read them — with what each person can see and change decided by their role: owner, admin, member or viewer.

The server works out which household you belong to from your own membership. A request cannot name a household it is not a member of, which is what stops one household from reading another’s data.

Invitations

When you invite someone and give us their email address, we email them a join code on your behalf. Their address is kept with the invitation until it is accepted, revoked or expires. Only invite people who expect to hear from you.

Sign in with Apple and Google

If you sign in with either, we receive the identity token that provider issues and use it to establish who you are. We do not gain access to your Google account, your Apple account, your contacts or your mail.

Apple provides your name only on the first authorization, and only if you allow it. If you use Apple’s private relay address, that is the address we hold.

Subscriptions

Hearth Plus is billed by Apple or Google, never by us. When you buy or restore a subscription, the device gives us a transaction identifier which our server checks with the store. We record that a subscription is active and when it expires — nothing else.

Service providers

A small number of companies process data for us, each only to provide their part of Hearth and bound by data-protection terms:

• Xenition — application platform: database, authentication and email delivery.
• Cloudflare — hosting of Hearth’s servers and this website.
• Apple and Google — in-app purchases, and Sign in with Apple or Google if you use them.

Your financial records are never sent to Apple, Google or any advertiser.

What stays on your phone

Your sign-in token is kept in the iOS Keychain or Android Keystore, and a few counters decide when to ask for an app review. Signing out removes the token.

How long we keep it

• Your records are kept for as long as your account and household exist.
• A household its owner deletes stops being reachable at once and is permanently erased 30 days later.
• Read notifications are removed after 60 days, and unaccepted invitations expire.
• When you delete your account, your data is erased straight away. Copies in our providers’ backups are overwritten as those backups expire.

Deleting your account

• In the app: More → tap your name → Delete your account. Confirm with your password, or type DELETE if you sign in with Apple or Google.
• Your profile, sign-in, devices, notifications and preferences are erased.
• A household you own alone is permanently erased with every record in it.
• A household with other people in it must be handed over or deleted first, because those records belong to them too. In households that continue, what you entered stays, shown under your name; your email address is removed.
• Deleting your account does not cancel Hearth Plus. Cancel it in your App Store or Google Play account.

Can’t open the app? See Delete your account to request deletion by email.

Your rights

• Access and portability: More → Export your data. Free, and not limited by your plan.
• Correction: edit your name and records in the app at any time.
• Erasure: delete your account as described above.
• Objection and restriction: write to us, and turn off any notification category in Settings.
• Complaint: if you are in the EU, UK or a similar jurisdiction, you can complain to your data-protection authority.
• California: we do not sell or share personal information, and you will not be treated differently for exercising your rights.

We answer requests within 30 days. We may ask you to write from your account’s email address so we know the request is yours.

International transfers

Our providers may process data outside your country. Where data leaves the EU or UK, it is protected by safeguards such as the European Commission’s Standard Contractual Clauses.

Security

All traffic is encrypted in transit, the app ships no credential of its own, and every request is checked against your household membership on the server. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Children

Hearth is intended for adults managing a household. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has created an account, write to us and we will delete it.

Changes and contact

If this policy changes in a way that affects how your data is handled, we will say so in the app before the change takes effect and update the date above.