Privacy

Version 1 · 15 September 2026 · applies to the HANELO app and hanelo.app

The short version

• Your letters, scans, extracted text, tags, deadlines, cases and notes are stored only on your phone, in an encrypted database. We cannot read them and we do not receive them.
• Text recognition (OCR) runs on the device. Nothing is uploaded for it.
• An account is optional. If you create one, we store your e-mail address (for signing in) and your public profile: display name, username, country and postcode area.
• No advertising, no tracking SDKs, no sale of data.
• You can download everything the account holds and delete the account from inside the app.

What is stored where

Data	Where	Why	How long
Documents, scans, OCR text, tags, deadlines, cases, notes	Your phone only (AES-256 encrypted; key in the device's secure hardware)	The app's core purpose	Until you delete them or the app
App settings (language, theme, country, lock timer)	Your phone only	Preferences	Until you delete the app
E-mail address	Our server (see below)	Sign-in by one-time code; account recovery	Until account deletion + 30 days
Public profile: display name, username, country, postcode, optional photo and bio	Our server	Shown to other users in the same country	Until account deletion + 30 days
Device push token (only if you enable notifications)	Our server	Deadline reminders and messages	Until you sign out, disable notifications or delete the account
Technical logs of the server (IP address, time, request)	Our server	Security and abuse prevention	Up to 7 days

Who processes the data

Server data is hosted by Supabase (Supabase Inc.) in the Frankfurt, Germany (eu-central-1) region. Sign-in e-mails are sent through Supabase's e-mail service. Supabase acts as our processor under a data processing agreement and does not use your data for its own purposes.

Push notifications, when enabled, are delivered via Google's Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS). These services receive a device token and the notification text, not your documents.

The optional AI letter assistant uses an AI provider of your choice with your own API key. Text you send there goes directly from your phone to that provider under its terms; HANELO does not proxy or store it.

Legal basis (GDPR)

Art. 6(1)(b) — performance of the contract (the app and, if created, the account); Art. 6(1)(f) — legitimate interest in keeping the service secure (server logs); Art. 6(1)(a) — consent for push notifications and the AI assistant, which you can withdraw at any time in the app.

Your rights

• Access & portability: Settings → Account → "Download my data" gives you a JSON file with everything the account holds.
• Erasure: Settings → Account → "Delete account". The profile disappears immediately; the account is permanently erased after 30 days. See Delete account.
• Rectification: edit your profile in the app at any time.
• Objection / complaint: write to us (below) or to your data protection authority.

Children

HANELO is for adults managing a household. Accounts are not offered to persons under 16.

Contact

Data controller: HANELO (OCB Consulting), Germany. E-mail: privacy@hanelo.app. The full postal address is shown in the app under Settings → About → Legal notice.