sheleh.app

Home Accounting · Last updated: October 24, 2026

This Privacy Policy explains how Home Accounting ("the app", "we", "our") handles your information. In short: your payments are encrypted on your device and never leave it, and we only process your email address to run your account.

1. Your payment data stays on your device, encrypted

• Everything you enter in the app (lists, payments, amounts, categories, notes and payment history) is stored only on your device.
• It is encrypted with AES-256-GCM using a key that is protected by your PIN. Optionally it can also be unlocked with Face ID, Touch ID or Windows Hello; biometric data is handled by your device's operating system and is never available to the app or to us.
• The app does not upload this data to any server. We cannot see, read or recover it.
• Your Master Recovery Code is kept only in your device's secure storage (Keychain or its equivalent) and is never sent to us.

2. Account information

To use the app you create an account with your email address and a password. Accounts are provided by Firebase Authentication (Google):

• We store your email address, an account identifier and the account creation and sign-in dates.
• Your password is processed by Firebase and stored only in hashed form. We never see it. Your account password is not your encryption key: knowing it does not give access to your payment data.
• Firebase may process technical data such as your IP address and device information to secure sign-in and prevent abuse.

3. Emails we send

We send a welcome email after registration and password-reset emails when you request them. These emails are delivered by our email provider Resend, which receives your email address and the content of the message for delivery only. We do not send marketing emails.

4. Reminders and logs

• Payment reminders are local notifications scheduled on your device. They may show a payment's name and amount on your lock screen; you can turn notifications off in your device settings.
• The app keeps a small encrypted technical log on your device (Settings → System Logs) to help diagnose problems. It contains no PINs, passwords, recovery codes, email addresses, payment names or amounts, and it is never sent anywhere automatically.

5. What we do not do

• No analytics, advertising or tracking libraries. No tracking across apps or websites.
• No location, contacts or photos are accessed.
• We never sell, rent or share your personal data.

6. Where data is processed

Account and email services run on Google Cloud / Firebase (Cloud Functions in the European Union, region europe-west1) and Resend (European Union, Ireland). Firebase Authentication is a global Google service.

7. Deleting your data

You can delete your account at any time in the app: Settings → Delete account. This immediately and permanently deletes your account from Firebase Authentication and erases the encrypted data from your device. Uninstalling the app also removes the data stored on the device. You can also ask us to delete your account by writing to support@sheleh.app.

8. Your rights

Depending on where you live (for example under the GDPR), you have the right to access, correct or delete your personal data, and to object to or restrict its processing. Since the only personal data we hold is your account information, most requests can be handled in the app; for anything else, contact us.

9. Children

The app is not directed at children under 13, and we do not knowingly collect personal data from them.

10. Changes to this policy

If the app changes how it handles data (for example, if optional cloud sync is added), we will update this page and the date above before the change takes effect.

11. Contact

Questions about this policy: support@sheleh.app.