Privacy Policy
Hourvest · Last updated 21 June 2026
This Privacy Policy explains how the Hourvest mobile application (“Hourvest”, “the app”, “we”) collects, uses and protects your personal data. The app is operated from Slovakia. For any privacy question, contact contact@hourvest.app.
1. What we collect
- Account data — your email address and authentication details, to create and secure your account.
- Onboarding answers — name, currency, year/month of birth, income and working hours, used to calculate your “money as time” figures.
- Bank account information (Open Banking) — when you choose to connect a bank, we receive, on a strictly read-only basis, your account names, IBAN, balances and transaction history. We can never move money.
- Technical data — basic, privacy-preserving diagnostics needed to run the service.
2. How bank connections work
Bank connections use the PSD2 / Open Banking standard via our licensed provider Enable Banking. You authenticate directly with your own bank; Hourvest never sees or stores your bank login credentials. Access is read-only and granted by you for a limited period (up to 90 days), after which you re-confirm. You can revoke access at any time, from within the app (Connected banks → Disconnect) or from your bank.
3. Why we use your data
- To provide the core feature: turning your real spending into the life-time it costs you.
- To keep your account secure and to back up your data so it restores on a new device.
- To operate, maintain and improve the app.
We do not sell your data, and we do not use your financial data for advertising.
4. Where your data is stored
Your account and app data are stored using Supabase (database and authentication), protected by row-level security so each user can only access their own data. Bank data is retrieved through Enable Banking. Both are GDPR-aligned processors acting on our behalf.
5. Data retention
We keep your data for as long as your account is active. You can delete your account at any time, which removes your personal data and disconnects any linked banks. You may also request deletion by emailing us.
6. Your rights (GDPR)
You have the right to access, correct, export or delete your personal data, to withdraw consent, and to lodge a complaint with your local data-protection authority (in Slovakia, the Úrad na ochranu osobných údajov). To exercise any right, email contact@hourvest.app.
7. Children
Hourvest is not directed at children under 16 and we do not knowingly collect their data.
8. Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.