Privacy Policy

Hileon Budget Tracker ("the App") is an Android application for personal budgeting, business finance tracking, invoice management, and project cost tracking. This Privacy Policy explains what data is involved when you use the App and how it is handled.

All of the following is stored on your device using localStorage and never transmitted unless you enable Cloud Backup:

• Personal expenses, income, categories, notes and dates
• Monthly budgets and spending history
• Business income, expenses, invoices and inventory
• Business profile information (name, phone, email, address)
• Project budgets, phases, contributions and goals
• Client and supplier details saved for invoice auto-fill
• App preferences — language, currency, theme
• Profile name, city, and country (if entered by the user)

If you enable Cloud Backup, your financial data is encrypted in transit and stored securely in Google Firebase Firestore under your authenticated account. Cloud Backup is entirely optional — the app functions fully offline without it.

Data synced includes: expenses, income, budgets, invoices, inventory, projects, goals, business profiles, and app preferences. Syncing occurs once daily when the app connects to the internet, and after significant data changes (10+ new entries). You can disable Cloud Backup or delete your cloud data at any time from Settings.

If you enable Cloud Backup, you will be asked to provide an email address for authentication via Firebase Authentication. A magic link is sent to your email to verify ownership — no password is created or stored.

Your email is used solely for account authentication, cloud sync, and communication about your account (such as reward notifications). Your email is never shared with third parties or used for marketing without your consent. Any email provider works — Gmail, Outlook, Yahoo, corporate, or any other.

Data may leave your device in the following controlled scenarios:

Hileon contains no advertising SDKs. There are zero advertisements in the app, ever.

Hileon AI is a rule-based financial analysis engine that runs entirely on your device. It reads your locally stored financial data to generate insights, forecasts, and recommendations. No artificial intelligence model is used — all analysis is performed by deterministic mathematical formulas. Your data is never sent to any AI service or external server for processing. Hileon AI is not a licensed financial advisor.

Hileon may offer a Subscriber Rewards Program for active subscribers. If you participate, the following data is collected and stored in your cloud account: subscription plan and start date, app usage dates (for streak tracking), reward qualification status, and payment information you provide when claiming a reward (EcoCash number, Wise email, or cryptocurrency wallet address).

This data is used solely for program administration and reward distribution. Participation is voluntary. Full program terms are available at hileonapp.com/subscriber-rewards.

Hileon offers optional subscription plans. All purchases are processed entirely by Google Play Billing.

• We do not collect, store, or process payment card information
• Subscriptions are managed through your Google Play account
• Cancel at any time via Google Play → Subscriptions
• Purchases restore automatically when you reinstall the app
• Subscription status is synced to your cloud account if Cloud Backup is enabled

You have full control over your data at all times:

Cloud data is permanently removed within 30 days of a deletion request.

All data transmitted between your device and Firebase is encrypted using TLS/SSL (HTTPS). Cloud-stored data is protected by Firebase security rules, ensuring only you can access your own data through your authenticated account. Firebase infrastructure is managed by Google and complies with SOC 1, SOC 2, SOC 3, ISO 27001, and ISO 27017 standards.

Hileon is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used the app, please contact us at support@hileonapp.com.

Hileon is designed for users across Africa and worldwide — with particular focus on Zimbabwe, Mozambique, South Africa, Kenya, and Ethiopia. The App supports 14 languages and 150+ currencies. Your data remains under your control regardless of your location. If Cloud Backup is enabled, data is stored in Google's cloud infrastructure.

Hileon may request the following device permissions, all optional: Storage access (for backup export/import), Notification permission (for budget alerts and reminders), Internet access (for Cloud Backup, exchange rates, news, and subscription verification), and Vibration (for haptic feedback). No camera, microphone, location, or contact permissions are ever requested.

We may update this Privacy Policy as the app evolves. Any changes will be reflected with an updated effective date at the top of this page. Continued use of Hileon after changes constitutes acceptance of the revised policy.