Privacy policy
Effective October 16, 2026
Hase is a personal finance app made by Gayeun Kim, an independent developer in Waterloo, Ontario, Canada ("we"). This policy explains what Hase collects, why, and the choices you have. The short version: we store what you need for Hase to work and sync, we don't sell it, and we don't use advertising, analytics or tracking.
What we collect
- Account: your email address and password. Passwords are stored only as a salted argon2id hash; we can't see them.
- Financial information you add: accounts (name, type, institution, currency, balance, the last four digits of a card if you enter them), transactions (amount, date, merchant, category, note), categories (including any icon image you upload), loyalty programs and memberships. This is stored on our servers so it can sync between your devices.
- Card products you add: if you add a card that isn't in Hase's catalog, its name and issuer are added to a catalog shared by all users so its benefits can be looked up.
What stays on your device
- Bank alerts: on Android, if you turn on notification access, Hase reads incoming notifications on your phone and keeps only those that look like a purchase, payment or deposit. On iPhone, alerts come only from Shortcuts automations you set up. The alert text is processed and stored on your device only. When you confirm one, the resulting transaction is saved like any other.
- Sign-in token: stored in your device's secure keychain.
Bank statement imports
When you import a statement, the file is sent to our server, read in memory to extract transactions, and not stored. Only the transactions you choose to import are saved.
How we use information
Only to provide Hase: signing you in, storing and syncing your data, looking up card benefits, and answering support requests. We don't sell or rent personal information, share it for advertising, or use third-party analytics or tracking.
Where it's stored and who processes it
Hase's servers and database run on Amazon Web Services (AWS) in the United States (us-east-1). Your information may therefore be stored and processed outside Canada and be subject to the laws of the United States. All traffic between the app and our servers is encrypted with HTTPS. Support email is received through AWS. We don't use any other service providers.
Server logs record the type of request, the address requested and how long it took. They don't record request contents.
How long we keep it
We keep your information while you have an account. When you delete your account (Settings → Delete account), your account and all of its data are deleted from our database immediately and from your device. Copies in automatic database backups are removed within 7 days. Card products you added to the shared catalog stay in the catalog without any link to you.
Your choices and rights
- View and edit your data in the app at any time.
- Turn notification access off in your phone's settings, or remove Shortcuts automations, at any time.
- Delete your account and data in the app.
- Ask us for access to, correction of, or deletion of your information, or about how it's handled, at support@bellakdev.com. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Children
Hase isn't directed to children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update it here and change the effective date.