honeyplan.privacy policy
Privacy policy
- Effective
Honeyplan is a shared ledger for couples. This policy explains what we collect when you use the app and this website, why, who else handles it, how long we keep it, and what you can ask of us. We wrote it to be read, not skimmed past.
The short version
- What we collect
- Your account details, what you and your partner put in the app, your subscription status, and the minimum technical data needed to keep it secure.
- What we don’t
- Bank logins, card numbers, receipt photos, bank statement files, your contacts, or your location history.
- Who sees it
- You, your partner (for the shared space), and the companies that host and deliver the service for us. Nobody else.
- What we never do
- Sell your data, show ads, track you across other apps and websites, or use your data to profile you.
- Your control
- Export or delete your data at any time. Delete your account in the app, or request it here.
Who we are
Honeyplan (the app and the website at honeyplan.app) is operated by FABIO VF VANESSA BERGER TERAPEUTA LTDA, CNPJ 53.535.234/0001-08, Rua Samuel Heusi, 586, Sala 01, Centro, Itajaí/SC, CEP 88301-320, Brazil (“Honeyplan”, “we”, “us”).
We are the controller of the personal data described here under Brazil’s General Data Protection Law (Lei nº 13.709/2018, “LGPD”), the EU and UK General Data Protection Regulations (“GDPR”) where they apply to you, and a “business” for the purposes of US state privacy laws where they apply.
As a small processing agent under Brazilian rules (Resolução CD/ANPD nº 2/2022, art. 11), we are not required to appoint a data protection officer (encarregado). Instead, every privacy request and question goes to privacy@honeyplan.app, which is read by the people responsible for Honeyplan.
What this policy covers
This policy covers the Honeyplan apps for iOS and Android, the Honeyplan servers they talk to, this website, and emails you exchange with us. It does not cover the App Store, Google Play, Sign in with Apple or Google Sign-In, which have their own privacy policies.
Honeyplan is a space for two people. Anything you put in your shared space is visible to your partner by design. Your partner is not a third party we share data with; they are the other person you chose to share a ledger with.
What we collect, and why
We only collect what the app needs to work. Here is all of it.
| Data | What it is | Why | Legal basis |
|---|---|---|---|
| Account | Email address, the name you choose, an internal account ID, and the ID Apple or Google gives us if you sign in with them. | Create your account, sign you in, tell you and your partner apart. | Performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)). |
| Profile photo | A photo you choose, if you add one. | Show your partner who wrote what. | Performance of a contract. |
| Shared space | Your couple’s name, the date you started, sheets, notes, nudges, special dates (dates marked only-me are visible only to you), time capsules and their photos. | The core of the app: keep the same space on both phones. | Performance of a contract. |
| Money | Transactions, who paid, how they are split, bills, jars, settle-ups and the split settings you choose. If you split by income, the income figures you enter. | Keep the shared ledger and calculate who owes whom. | Performance of a contract. |
| Subscription | Which plan you bought, its status, renewal or expiry date, the store (Apple or Google) and the store’s transaction ID, linked to your account ID. | Unlock Premium for your couple, handle renewals, refunds and cancellations. | Performance of a contract; legal obligation for tax and accounting records (LGPD art. 7, II; GDPR art. 6(1)(c)). |
| Notifications | A push token for each device you sign in on, and your notification preferences. | Deliver your partner’s nudges, bill and date reminders. | Performance of a contract. |
| Sign-in and security | Codes we email you (we store only a hash; it expires after 10 minutes), session tokens, IP address, timestamps, request paths, app version and error logs. | Keep your account secure, limit abuse such as repeated code attempts, find and fix bugs. | Legitimate interests in keeping the service secure and working (LGPD art. 7, IX; GDPR art. 6(1)(f)). |
| Support | What you write to us and the address you write from. | Answer you. | Performance of a contract or legitimate interests, depending on the request. |
What stays on your phone
- Receipts. When you scan a receipt, the text is read on your device. The photo is never uploaded. Only the amounts you confirm are saved as a transaction.
- Bank statements. OFX and CSV files you import are read on your device. The file is never uploaded. Only the lines you choose to keep are saved.
- Reminders. Date and bill reminders are scheduled on your device.
Location
Location is optional and used only when you ask the date roulette for places near you. Your phone rounds your position to about 100 metres and sends it directly to the OpenStreetMap Overpass API to look up places. It is not sent to our servers and we never store it. You can refuse or revoke the permission in your phone’s settings at any time; the rest of the app keeps working. The basis is your consent (LGPD art. 7, I; GDPR art. 6(1)(a)).
Camera and photos
The app asks for camera or photo access only when you choose to take or pick a photo (profile, time capsule, or a receipt to read). We never access your library on our own.
What we never collect
Bank or card credentials, card numbers (the stores process payments; we never see them), contacts, health data, precise location, location history, advertising identifiers, or data from other apps.
Sensitive information
We don’t ask for sensitive personal data. Notes and sheets are free text, so you could write something sensitive in them. If you do, we store it only to show it to you and your partner. We don’t read, analyse or classify your content.
This website
honeyplan.app sets no cookies, uses no analytics or advertising tools, and loads no third-party scripts or fonts. Our hosting provider, Cloudflare, Inc. (United States), processes your IP address and basic request data to deliver the pages and protect them from attacks, and keeps short-lived server logs for that purpose.
If you use the account-deletion form on this site, nothing is sent to us by the page itself. It prepares an email in your own email app, and you decide whether to send it.
Who else handles your data
We don’t sell or rent personal data, and we don’t share it for advertising. We disclose it only to:
- Your partner, for everything in your shared space, plus your name and profile photo.
- Service providers who process it on our behalf (operators under the LGPD, processors under the GDPR), bound by contract to use it only to provide their service to us:
- Infrastructure for the API, database and file storage: a cloud infrastructure provider that hosts our servers and encrypted backups under a data processing agreement.
- Email delivery for sign-in codes: Resend, Inc. (United States).
- Expo (650 Industries, Inc., United States), which relays push notifications to Apple and Google. Notifications carry names and titles only, never amounts or the text of a note.
- Website hosting: Cloudflare, Inc. (United States).
- Cloudflare, Inc. (United States) routes email sent to @honeyplan.app, and Google LLC (Gmail) stores the support mailbox.
- Apple and Google, as independent controllers, when you choose to sign in with them, when you buy or manage a subscription through their stores, and to deliver push notifications to your device.
- OpenStreetMap (Overpass API), only when you use nearby places in the date roulette, as described above.
- Authorities, when the law requires it, for example a valid court order. We will tell you unless we are legally prohibited from doing so.
- A successor, if Honeyplan is merged or sold. This policy would continue to apply, and we would tell you before your data becomes subject to a different policy.
International transfers
We are based in Brazil, and some of our providers are in other countries, including the United States. When your data leaves the country where it was collected, we rely on the safeguards the law provides: standard contractual clauses approved by Brazil’s ANPD (Resolução CD/ANPD nº 19/2024) and by the European Commission, adequacy decisions where they exist, and our providers’ own transfer mechanisms (such as the EU-US Data Privacy Framework). You can ask us for a copy of the relevant safeguards at privacy@honeyplan.app.
How long we keep it
| Data | Kept for |
|---|---|
| Account, profile and shared space | As long as your account exists. |
| Sign-in codes | Only a hash is stored. It stops working after 10 minutes, and the record, with your email address, is deleted within a day. |
| Session tokens | Until you sign out, or they expire or are rotated. |
| Push tokens | Until you sign out or delete your account. |
| Server and security logs | Up to 90 days. |
| Backups | Deleted data can remain in encrypted backups for up to 35 days, after which it is overwritten. |
| Purchase records | After you delete your account, the store transaction record is kept without any link to you for up to 5 years, as tax and accounting law requires. |
| Support emails | Up to 24 months after the conversation ends. |
Deleting your account
You can delete your account at any time in the app (Profile and settings → Delete my account) or by asking us. Full instructions are on the account deletion page. When you delete your account:
- Your account, profile, photo, sign-in methods, pending sign-in codes, sessions and push tokens are deleted immediately.
- If your partner is still in the couple, the shared space stays with them. Things you created there remain, but no longer show your name or photo. Dates you marked only-me are deleted.
- If you are the last person in the couple, the entire shared space is deleted, including time capsule photos.
- Deleting your account does not cancel a subscription bought through Apple or Google. Cancel it in the store first.
Your rights
Wherever you live, you can ask us to:
- confirm whether we process your data, and give you access to it;
- correct data that is incomplete, inaccurate or out of date;
- delete it, or anonymise or block data that is unnecessary or processed unlawfully;
- give you a copy in a portable format, or send it to another service;
- tell you who we have shared it with;
- withdraw consent where we rely on it (for example, location), and explain the consequences of not giving it;
- object to processing based on legitimate interests, or restrict it while a request is being handled;
- review a decision made solely by automated means. We don’t make any.
Many of these you can do yourself in the app: edit your profile, export a sheet or a month, remove your photo, leave the couple or delete your account. For anything else, write to privacy@honeyplan.app from the email address on your account. We reply within 15 days, may ask you to confirm your identity, and don’t charge for it.
Complaints
If you think we got something wrong, please tell us first. You also have the right to complain to a data protection authority: in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD, gov.br/anpd); in the EU or UK, the supervisory authority where you live or work.
United States residents
If a US state privacy law (such as the California Consumer Privacy Act, as amended by the CPRA) applies to you, you have the rights to know, access, correct and delete the personal information we hold, and to not be discriminated against for using them. The categories we collect are listed in section 3; the sources are you, your partner (for shared content) and the app stores; and the purposes are those listed there. We do not sell or share personal information for cross-context behavioural advertising, and have not done so in the last 12 months. We don’t use sensitive personal information to infer characteristics about you. You may use an authorised agent; we will ask them for proof of authorisation. We honour Global Privacy Control signals, although there is nothing for them to opt out of.
Security
Data travels encrypted (HTTPS/TLS). Access rules are enforced inside the database itself, so each request can read only what belongs to the person making it and their couple. Photos are private and reachable only through short-lived signed links. There are no passwords to leak: you sign in with Apple, Google or a one-time code. Session tokens are rotated, and reuse of an old token ends the session family.
No system is perfectly secure. If a security incident creates a relevant risk to you, we will notify you and the competent authorities as the law requires. To report a vulnerability, write to security@honeyplan.app.
Age
Honeyplan is for adults. You must be at least 18 to use it, and it is not directed at children. If we learn that we hold data about a child, we delete it. If you think that has happened, write to privacy@honeyplan.app.
Changes to this policy
If we change this policy, we will update the date at the top. If the change is significant, for example a new purpose or a new kind of data, we will tell you in the app before it takes effect and, where the law requires, ask for your consent again.
Contact
Privacy questions and requests: privacy@honeyplan.app. Anything else: support@honeyplan.app.
Post: FABIO VF VANESSA BERGER TERAPEUTA LTDA, Rua Samuel Heusi, 586, Sala 01, Centro, Itajaí/SC, CEP 88301-320, Brazil.
This policy is available in English and Portuguese. Both versions say the same thing; if they ever differ, the version more favourable to you applies.