Privacy Policy

1. Who we are and who is responsible for your data

Havnest Money is a household finance app operated, at this stage, by a private individual — not yet a registered company. The person responsible for your data is:

Being an individual rather than a company doesn't change your rights or our obligations in any way — we're still fully responsible for deciding how and why your personal data is processed, and for complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Hungarian data protection law. If a company is formed to operate Havnest Money in the future, this section will be updated to name it, and you will be prompted to accept the new version of this Privacy Policy the next time you log into the app.

2. What data we collect, and how it's protected

Havnest Money is built so that a household can share a real, up-to-date financial picture across every member's own device. That only works if the underlying data lives in one central location, from where all parties with access can reach it — Havnest Money provides this central storing location via its infrastructure provider (detailed in §5 below). In order to ensure and maintain full privacy of your financial data, we've built the app to encrypt everything that is financially meaningful (see below) before it ever leaves your device, and store it in this encrypted form on our servers. This means that nobody, apart from you and those you've shared access with in your household, can read it — not even us at Havnest Money.

Your financial content — encrypted, unreadable by us

Every transaction's amount and note; every account, category, tag, budget, and project name; partner (payee) names, addresses, phone numbers, and email addresses you've entered; retirement planning figures and assumptions — all of this is encrypted on your own device with 256-bit encryption before it's ever sent to our servers. Only your household, using a Recovery Key that we never see and cannot recover, can unlock it. It is not readable by us, by our hosting provider, or by anyone who might ever gain unauthorized access to our storage servers.

Account and structural data — plaintext, unencrypted, needed to run the app

A smaller set of data stays unencrypted, because the app genuinely needs it to function — to sync your data across devices, to sort and organize it, and to enforce that only your own household can see it:

• Your display name, first and last name (if provided), and email address
• Whether you're an admin or a standard member of your household, and (for a child profile) that it's a child profile — see §10 below
• A transaction's date, status (Paid, Planned, or Overdue), and type, and which account, category, or partner it's linked to (by internal reference only — none of this reveals what was actually spent, earned, or owned)
• Account type and currency, and which household member owns an account
• If you connect a Foliopal investment tracker account (optional — see §5), the email address of that Foliopal login

This plaintext data is the structural scaffolding the app needs, not the financial content: it does not reveal any amount, note, or name. It does show the shape of your household's finances — for example, that an account exists, what type it is, and when transactions happen — which is why we disclose it openly rather than call it nothing.

How this appears in Apple's App Store privacy label

Apple's App Store asks every app to declare the data it collects, and to say whether that data is "linked to you". In Apple's terms, data is collected only if it is sent off your device in a way that lets the developer access it. We declare your name, email address, and user ID, and — because the structural data listed above is readable by us — "Other Financial Info" (all linked to your account, used only to run the app, never for tracking). We do not declare your financial content (amounts, notes, and names), because it is encrypted with a key we never hold and so cannot be accessed by us. In short: the label's "linked to you" means linked to your account, never readable by us.

Payment data

Havnest Money is free during its early-access period — there is no payment or subscription processing today. When a paid plan is introduced in the future, subscription and payment processing will be handled entirely by Apple through the App Store; we will never see or store your card details, only your subscription's status as reported to us by Apple. This section will be updated when that happens.

What we don't collect

We use no third-party analytics, advertising, or crash-reporting tools of any kind — not in the app, not on this website. We don't track you across other apps or websites. We've confirmed this directly against our own codebase, not just written it as a promise: there is nothing in Havnest Money that reports your behavior to anyone but us, for the sole purpose of running the app you asked us to run.

3. Why we process your data, and on what legal basis

We process your account and household data because it's necessary to provide the service you've signed up for — creating your account, running your household's shared budget and transaction data, and (once available, after the early-access stage) billing your subscription (Article 6(1)(b) GDPR, performance of a contract).

Where processing is optional — connecting a Foliopal account, for example — we rely on your explicit consent (Article 6(1)(a) GDPR), which you can withdraw at any time by disconnecting it in the app.

4. Where your data is stored

Havnest Money's database is hosted by Supabase, on AWS infrastructure in the EU West (Ireland) region. Your data does not leave the European Economic Area (EEA) through our own infrastructure. Data is encrypted in transit (TLS) everywhere, and the sensitive financial content described in §2 is additionally encrypted client-side, before it ever reaches our servers.

5. Who we share data with

We don't sell, rent, or trade your data to anyone, for any purpose. A small number of service providers process data strictly on our behalf, to make the app work:

Where a service provider is based outside the EEA, we rely on Standard Contractual Clauses or an equivalent recognized safeguard, as required by GDPR Chapter V.

6. How long we keep your data

We keep your household's data for as long as your account is active. You can permanently delete your entire household and all its data at any time — see §7 below. If you're an individual member of a household that continues to exist, you can also request removal of your own personal identifiers by contacting us at support@havnestmoney.com — your household's shared transaction history may be retained for the continuing household's own record-keeping, even after your own details are removed.

7. Your rights under GDPR

You can exercise every one of these rights directly from inside the app (under Data, in Settings), or by contacting us at support@havnestmoney.com:

• Right of access (Article 15): Download a full copy of your household's data, in the same readable form you see it in the app — reachable by an admin, and requires your household's Recovery Key.
• Right to rectification (Article 16): Correct any inaccurate data directly in the app at any time, which syncs to our server (in encrypted form), and will afterwards appear in its corrected form on all devices, for all authorised household members.
• Right to erasure (Article 17): Permanently delete your entire household and all its data — a self-service action available to any admin, with no separate request needed. This is permanent and cannot be undone by us, or by you, once confirmed.
• Right to restriction of processing (Article 18): Ask us to limit how we use your data by contacting us at support@havnestmoney.com.
• Right to data portability (Article 20): Same mechanism as the right of access above — your data, exported in a structured, usable form.
• Right to withdraw consent (Article 7(3)): Disconnect an optional integration like Foliopal at any time; withdrawal doesn't affect the lawfulness of processing before it.
• Right to object (Article 21): Object to processing carried out on the basis of our legitimate interests by contacting us at support@havnestmoney.com.

For anything not available as a direct in-app action, we respond to requests within 30 days, free of charge under normal circumstances.

8. Right to lodge a complaint

If you believe your personal data has been processed in a way that doesn't comply with GDPR, you can lodge a complaint with the competent supervisory authority. In Hungary, that's:

We'd always welcome the chance to resolve any concern directly first — please reach out to us with confidence and trust at support@havnestmoney.com.

9. Security, and the one real responsibility this places on you

Your household has its own, completely unique Recovery Key, generated the first time your household set up encryption. It is not stored anywhere on our servers, and we never see it. You're prompted to save it somewhere safe when it's generated, with the option to download a printable copy.

This is the one real responsibility the protection in §2 places on you. Your Recovery Key is only ever asked for when a device first joins your household, when you sign back in after signing out, or when restoring a backup file — so it's easy to forget it exists, which is exactly why losing it is so serious. Without your Recovery Key, you can't sign in on a new device or restore a backup. Your devices that are already signed in will keep working, and while at least one of them is, you can still export a readable copy of your data from Settings — but once every one of them has been signed out, reset, lost, or replaced, your household's data becomes permanently unreadable, to you and to us. We'll remind your household's admins every few months to check that the key is still kept safe. Save it somewhere durable and safe, the moment it's generated. Make use of the PDF download option, which is available to you when your household Recovery Key is generated at first sign-up. Save that PDF, which contains your Recovery Key, or print it out and store it somewhere safe.

10. Children's data — Child Mode

Havnest Money includes an optional Child Mode, letting a household admin set up a simplified profile for a child to log their own pocket money and small purchases. A child profile is always created by a household admin — never by the child themselves — and a child never independently signs up, consents to anything, or interacts with our Terms & Conditions or this Privacy Policy at all.

By creating a child profile, the admin confirms they have the parental or guardian authority to do so, and takes on responsibility for that child's data within the household, the same way they're responsible for setting it up in the first place. A child's data is processed under that same admin's authority as household controller of their own household's data, not on the basis of the child's own consent.

11. Changes to this policy

We may update this Privacy Policy as Havnest Money changes. When we make a material change, we'll update the "Last updated" date above, and the app will ask every household member to review and re-accept the current version the next time they log into the app.

12. Contact

For any question, request, or concern about this Privacy Policy or how your data is handled, reach us directly: