How privacy works
Your transactions and budget are encrypted on your iPhone before they sync. Our server stores them but can’t read them.
Where your data goes
Reading alerts, sorting and budgeting happen on your iPhone. Your transactions, budget and plan are encrypted there before they sync, with a key we never have.
- Google API Limited Use
Your Gmail
Your iPhone asks Gmail only for your bank’s alerts, read‑only. Your other mail stays in Gmail.
- Encrypts
Your iPhone
Where the work happens.
Reads, sorts, budgets, then encrypts
- Reads your bank alerts
- Sorts and budgets
- Encrypts your data before it syncs
-
Hasala server behind Cloudflare
Our own server. Stores your encrypted data but can’t read it. Knows your email address and name. Never your emails, amounts, merchants or budget.
Our own, behind Cloudflare. Stores your encrypted data but can’t read it. Knows your email and name.
- We can’t reset the phrase
A new iPhone
Unlocks your data with your passkey or your 12‑word recovery phrase.
Who can see what
| Who | Can see | Can’t see |
|---|---|---|
| You | Sees: Everything, on your own devices | — |
| Hasala, our server | Sees: What it needs to run your account: your email address and name, when you sync, how much encrypted data you keep, and when new mail reaches your Gmail. It also keeps sign‑in and device details: your passkey’s public key or a scrambled form of your password, your devices’ push tokens, and a scrambled form of your Gmail address | Never: Your emails, amounts, merchants, categories, budget or plan |
| Cloudflare, our network provider | Sees: Your requests on their way to our server: your IP address, times, sizes and the still‑encrypted data. It also sends our emails to you, and counts visits to this website for us, in totals only | Never: What’s inside the encrypted data |
| Sees: Your email, as it already does, and that you’ve given Hasala read‑only access | Never: Your budget, or anything Hasala works out | |
| Apple | Sees: Your email address, because it handles your TestFlight invitation, and that you’ve installed Hasala. If you use a passkey, it syncs in iCloud Keychain, end‑to‑end encrypted by Apple | Never: Your transactions or your plan |
A new or lost phone
On a new iPhone, you unlock your data with your passkey, which syncs in iCloud Keychain, or with your 12‑word recovery phrase. A password signs you in but doesn’t unlock your data.
Keep the 12 words somewhere safe. We can’t reset them for you, because we don’t hold the key to your data.
No bank login, no ads
- No bank login. Hasala reads the alert emails your bank already sends. It never asks for your banking password or card number, and it can’t move money.
- No ads or tracking in the app. The app contains no analytics or tracking tools.
- This website counts visits in totals only. It uses Cloudflare Web Analytics, which sets no cookies and isn’t linked to you or your Hasala account. Invite, waitlist and account‑freeze links aren’t counted.
- Google API Limited Use. Hasala follows Google’s API Services User Data Policy, including the Limited Use requirements. What it reads from Gmail is used only to find your bank transactions and show them to you.
The full details
The Privacy Policy lists what we collect, why, and how long we keep it. Security explains how Hasala protects your data and how to report a problem. Questions: privacy@hasala.app.