Heldly — Privacy Policy

Last updated: November 2026

In short

Heldly has no account and no server. Your financial data is stored on your iPhone, encrypted with a master password that only you know. We (the developer) never receive it and cannot read it. There are no analytics, no advertising and no tracking, and nothing is sold or shared.

Where your data lives

On your iPhone: everything you enter (holdings, accounts, expenses, debts, goals, snapshots, settings) is kept in a single vault file encrypted with AES-256-GCM, using a key derived from your master password (PBKDF2, 600,000 rounds). The file also uses iOS data protection, so it cannot be read while the phone is locked.
Your master password is never stored in readable form. If you turn on Face ID, it is kept in the iOS Keychain on this device only and released only after Face ID succeeds. Your PIN is stored on the device only.
iCloud Drive (optional, off by default): if you turn on “Mirror encrypted backup to iCloud Drive”, the same encrypted file is copied to Heldly's private folder in your own iCloud. Apple stores it, but it is encrypted with your master password, so neither Apple nor we can read it.
Backups you export: an exported .heldly backup is encrypted the same way. A CSV export is not encrypted: it is a readable spreadsheet, so treat it like any financial document.

What is stored outside the encrypted vault

So that some iOS features work while the vault is locked, a small amount of data is kept on your device outside the encrypted file:

Widget and Siri: a short summary (net worth, today's change, top mover, today's spending, next bill) so the home-screen widget and the “What's my net worth?” shortcut can show it.
Background refresh: the ticker symbols and quantities of your holdings, so the app can update prices and the widget in the background.
Notifications: reminders and digests you turn on are scheduled on your device. Digest notifications may show your net worth on the lock screen unless you turn on “Hide values in notifications”.
Spotlight: names and symbols of your holdings and scheduled payments, never amounts, so you can find them in iOS search.

All of this stays on your iPhone and is never sent to us.

Internet access

Heldly connects to the internet only to fetch public market data. Your device sends requests directly to these services; they receive only what is needed for the lookup, never your amounts, balances or identity:

Yahoo Finance: stock and ETF prices, symbol search, dividends, earnings dates and analyst estimates (ticker symbols).
CoinGecko and Coinbase: cryptocurrency prices and search (coin identifiers and currency codes).
Frankfurter (European Central Bank rates): exchange rates (currency codes).
EODHD and CoinGecko: company and coin logos (ticker symbols).
DuckDuckGo: icons for merchants in your expenses and subscriptions. The request contains a guess of the merchant's website derived from its name (for example “netflix.com”), nothing else.

Like any internet request, these services can see your IP address. Their own privacy policies apply to what they log. Heldly cannot contact any other server: all other connections are blocked by the app's configuration.

Calendar

If you allow it, Heldly reads your calendar on the device to suggest events to attach to an expense and to group trips, and adds one event only when you tap “Add to calendar” on an earnings date. Calendar data is never sent anywhere.

Apple Intelligence

On devices that support it, insights and assisted import use Apple's on-device language model. Your data is processed on the iPhone and is not sent to us or to any other service.

Imports

Files you import (for example CSV statements from Revolut or Trading 212) are read and processed on the device only.

Purchases

Heldly Pro is sold through the App Store. Apple handles payment; we never see your payment details or Apple ID. The app only checks with Apple whether Pro is active.

Face ID

Face ID is handled by iOS. Biometric data never leaves Apple's secure hardware and is never available to the app.

Crash reports

Heldly contains no crash-reporting or analytics code. If you have chosen in iOS Settings to share analytics with app developers, Apple may send us anonymous crash reports; you can turn this off in Settings → Privacy & Security → Analytics & Improvements.

Demo mode

Demo mode shows made-up sample data, kept in memory only. Nothing you do in demo mode is saved.

If you forget your master password

Because we never have your password or your data, we cannot recover it. Without the master password, the vault and its backups cannot be opened by anyone.

Deleting your data

In the app: Settings → Danger zone → Delete all data and reset vault. This deletes the vault file, the PIN, the Face ID credential, scheduled notifications and Spotlight entries.
Everything on the device: deleting the Heldly app removes all of its data from the iPhone, including the widget summary.
iCloud copy: if you used the iCloud Drive mirror, delete it in iOS Settings → [your name] → iCloud → Manage Account Storage → Heldly.
Exported backups and CSV files stay wherever you saved them until you delete them.

Your rights

We hold no personal data about you, so there is nothing for us to hand over, correct or delete. If you write to us by email, we use your message only to reply, and delete it on request.

Contact

[email protected]