Privacy Policy

Effective 12 November 2026

Hoglet is a personal expense tracker. It works without an account, and what you record stays on your phone unless you choose to sync it. We don't sell your data and we don't use analytics or tracking tools.

This policy covers the Hoglet app for Android and iOS and this website. "We" means the developer of Hoglet. Questions: hoglet.app@gmail.com.

1. Data on your phone

Transactions, accounts, categories, budgets, goals, debts, notes and settings are stored in a database on your device. They are not sent to us unless you turn on sync. Backups you create are files you control; they can be encrypted with a password only you know.

2. Optional account and sync

Sign-in is only needed for sync and shared ledgers (Hoglet Pro). When you sign in, we process:

• Account data: your email address, and the name provided by Google or Apple if you sign in with them; a user ID.
• Synced content: the ledger data listed in section 1, so it can appear on your other devices.
• Devices: a device ID, device name and platform, so you can see and remove the devices signed in to your account.
• Shared ledgers: people you invite to a ledger can see its content and your name or email as a member.

Sync data is stored with Supabase (database and sign-in), sent over encrypted connections and protected so only you and the members of your shared ledgers can read it. One-time sign-in codes are emailed through Resend.

3. Purchases

Hoglet Pro is sold through Google Play and the App Store; they handle payment and we never see your card details. RevenueCat processes your purchase and subscription status, linked to an anonymous app user ID (or your Hoglet account ID if you are signed in), so Pro works on your devices.

4. Ads

Hoglet shows ads only when you choose to watch one (for example, to unlock an app icon). These rewarded ads are served by Google AdMob, which may collect your device's advertising ID, IP address and device information to show and measure ads. In the EEA, the UK and Switzerland we ask for your consent first. See how Google uses data from apps that use its services. You can reset or delete your advertising ID in your phone's settings.

5. App configuration and exchange rates

• Firebase Remote Config (Google) lets us change settings, such as update notices, without a new app version. It uses a random Firebase installation ID, your app version, platform and language. Google Analytics is not enabled.
• Exchange rates are downloaded from a public currency data service (via jsDelivr and Cloudflare). No personal data is sent; like any website, these services see your IP address.

6. Permissions

• Camera and photos – only when you scan a receipt. Text is read on your device; the photo is not uploaded.
• Notifications – reminders you set up (bills, budgets, debts), scheduled on your device.
• Face ID, Touch ID or fingerprint – to unlock the app. Handled by your phone's system; we never receive biometric data.

7. How long we keep data

Data on your phone stays until you delete it or uninstall the app. Cloud data is kept while your account exists. When you delete your account, your account and cloud data are deleted within 30 days (backups of our database roll over within 30 more days). Purchase records may be kept by Google, Apple and RevenueCat as required by law.

8. Deleting your data

In the app: More → Sync → Delete account removes your account, your cloud data and the data on that phone. You can also request deletion here.

9. Your rights

You can access, correct, export (CSV in the app) and delete your data. Depending on where you live (for example under the GDPR or US state laws) you may also object to or restrict processing and complain to your data protection authority. Email us to use any of these rights; we reply within 30 days.

We process account and sync data to provide the service you asked for, ad data on the basis of your consent where required, and app configuration for our legitimate interest in keeping the app working. Our service providers may process data outside your country under appropriate safeguards.

10. Children

Hoglet is not directed to children under 13 and we do not knowingly collect their personal data.

11. Changes

We will post changes on this page and update the date above. Significant changes will also be shown in the app.

Service providers