Hedimo Privacy Policy

Effective date: August 17, 2026
Last updated: August 17, 2026Hedimo ("we," "us," or "our") is a mobile app that helps you see the real cost of your spending against a savings goal. This Privacy Policy explains what information Hedimo collects, how we use it, and what choices you have.By using Hedimo, you agree to this Privacy Policy.1. Information We Collect
Information you provide directly• Transactions: the item name, amount, date, and (optionally) a spending category for each purchase you log.
• Savings goal: your monthly income, savings target, timeline, a goal name/icon you choose from a preset list, how much you've already saved, and your reminder-notification preference.
• Voice recordings: if you use voice logging to add a transaction, we briefly process the audio you record. See Section 3, "AI Processing."Information collected automatically• Sign-in identifier: when you sign in with Sign in with Apple, we receive a stable, anonymous identifier for your Apple ID. We do not request or receive your name or email address from Apple.
• Product usage events: a small set of anonymous usage events (e.g. app opened, screen viewed, onboarding step completed, transaction logged, voice log outcome) collected through PostHog, our analytics provider. See Section 6, "Data Sharing," for the full list.What we don't collect• We do not collect your name or email address.
• We do not use device GPS or location services. When voice logging identifies a merchant name from your recording (e.g. "Starbucks"), that value is used only to pre-fill the entry on your device and is never sent to or stored on our servers.
• Hedimo is a native mobile app and does not use cookies, web trackers, or advertising identifiers.2. How We Use Your Information• To operate Hedimo's core features: recording transactions, calculating your daily spending limit and progress toward your savings goal, and syncing that data across sessions using your device's securely stored Apple sign-in identifier.
• To transcribe and pre-fill transaction details when you use voice logging (Section 3).
• To send reminder notifications on your device, if you've enabled them. These are scheduled locally on your device — they are not routed through any third-party push notification service.
• To understand feature usage and improve the app, using the anonymous, aggregate analytics events described in Section 6.3. AI Processing (Voice Logging)When you tap the microphone to log a transaction by voice:• Your device records audio locally, then uploads it directly to our backend over an encrypted (HTTPS) connection.
• Our server forwards the audio to OpenAI's Whisper API to generate a text transcript, then sends that transcript to OpenAI's GPT-4o-mini model to extract a suggested transaction name, amount, date, category, and merchant.
• The suggested transaction is shown to you for review — you can edit or discard it before anything is saved. Nothing is added to your transaction history automatically.
• We do not store the audio recording. It is held in our server's memory only for the moment it takes to forward it to OpenAI, then discarded — it is never written to disk, a database, or any cloud storage. The text transcript is handled the same way: it's returned to your device for review but is not saved in our database. Only the final transaction fields you choose to confirm (name, amount, date, category) are persisted — the same as if you had typed them in directly.
• Audio and transcript data sent to OpenAI is subject to OpenAI's own data usage and retention policies, which are outside Hedimo's control. You can review OpenAI's policies at openai.com/policies.4. Data Storage, Security, and International Transfers• Your transaction and savings goal data is stored on servers hosted by Railway, using a Railway-managed PostgreSQL database.
• Data is transmitted between the app and our servers over encrypted HTTPS connections.
• Your data is associated with your Apple sign-in identifier rather than your name, email, or any other directly identifying information.
• We keep Hedimo's backend limited to the functionality described in this policy — we do not run advertising SDKs, crash-reporting tools, or third-party trackers.
• Our service providers (Railway, OpenAI, PostHog) may process data on servers located outside your country, including in the United States.
• No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.5. Data Retention• Your transactions and savings goal data are retained on our servers until you delete them in-app (Section 7) or until we're required to remove them.
• Voice recordings and transcripts are not retained by Hedimo at all — see Section 3.
• Analytics events are retained by PostHog under PostHog's standard retention practices for our account.
• When you delete your data in-app, the associated transaction and goal records are removed from our database immediately.6. Data SharingWe do not sell your data, and we do not share it with anyone for advertising or marketing purposes. We share data only with the service providers that operate Hedimo:• Apple — to authenticate you via Sign in with Apple.
• OpenAI — to transcribe and parse voice-logged transactions (Section 3).
• PostHog — to collect anonymous product-usage analytics, processed on PostHog's US-based servers. The events we send are: app opened, screen viewed, onboarding step viewed/skipped, onboarding completed, transaction logged, and voice log outcome. PostHog's SDK also automatically records standard app-lifecycle events (app installed, updated, opened, brought to the foreground, or backgrounded) and attaches routine technical metadata (app version, device/OS type) to events, the same as most analytics SDKs. These events include only coarse, non-identifying, or technical details, such as a spending category label (e.g. "Groceries"), a screen name, or an app version number — never transaction amounts, item names, merchant names, or goal figures. Hedimo does not enable session recording or automatic screen/input capture in PostHog.
• Railway — our infrastructure and database hosting provider.We may also disclose information if required to do so by law.7. Your Rights: Access and Deletion• In-app deletion: go to Settings → "Delete my data" to permanently delete all your transactions and savings goal data from our servers, and clear the same data cached on your device. This action cannot be undone.
• Signing out (Settings → Sign Out) is different from deletion — it only clears the app's local session on your device and does not delete your server-side data, so signing back in with the same Apple ID restores it.
• Because Hedimo never collects your name or email address, we have no way to look you up outside of the app itself. Reviewing your data in the app, and deleting it using the button described above, is how you access and erase what we hold about you.
• If you have questions about your data that aren't addressed above, contact us using the details in Section 10.8. Children's PrivacyHedimo is not directed to children, and we do not knowingly collect information from anyone under the age of 13. If you believe a child has used Hedimo to submit data to us, contact us using the details in Section 10 and we will delete it.9. Changes to This PolicyWe may update this Privacy Policy from time to time. We'll update the "Last updated" date above whenever we do. Continuing to use Hedimo after a change means you accept the revised policy.10. Contact UsQuestions about this Privacy Policy or Hedimo's data practices? Contact us at: [email protected]