Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how the mobile application Horizn Budget Planner ("Horizn", "the app", "we") handles your information.

In short: Horizn is an offline-first budgeting app. It has no user accounts and no server of ours. Your budgeting data stays on your device, encrypted. The only information that leaves your device is what is strictly needed to process a subscription purchase (handled by Apple and RevenueCat) and anything you voluntarily include when you email us feedback. We do not run ads, analytics, tracking, or a crash reporter, and we do not sell your data.

1. Who is responsible for your data

The data controller for the limited processing described below is the developer of Horizn Budget Planner:

  • Developer (data controller): Sławomir Dyduch, a sole proprietor (Polish jednoosobowa działalność gospodarcza) trading under the business name "Sławomir Dyduch" (a "trader" for DSA purposes)
  • Address: Mazańcowice 73, 43‑391 Mazańcowice, Poland
  • Tax ID (NIP): 9372581357 · REGON: 243568459
  • Contact: info@horizn.world (technical support: help@horizn.world)

Because Horizn stores your budgeting data only on your device and we operate no backend, we cannot access, read, or recover that data. For the parts that do involve third parties (purchases), those providers act as described in Section 5.

2. Data stored on your device only

The following stays on your device and is never sent to us:

  • Financial and budgeting data — transactions, budgets, goals, plans, missions, categories and related settings. This data is stored encrypted (AES‑256) with a key held in the device Secure Enclave / Keychain (iOS Keychain), and protected by an integrity check.
  • Attachments — any photo you attach to a transaction, kept inside the app's private storage area (sandbox).
  • Access code (PIN) and security settings — if you set a PIN, only a salted, one‑way hash is stored (never the PIN itself). Biometric unlock (Face ID) is handled by the operating system; we never receive your biometric data.
  • Installation identifier (SID) — a random token shown at the bottom of Settings (for example HRZN‑AB12‑CD34). It is generated on your device, does not identify you or your device outside the app, is used only so you can quote it in a support message, and disappears when you uninstall the app or use "Delete all data".

3. Data that leaves your device

Horizn transmits information only in these cases:

  • Subscription purchases — see Section 5. Handled by Apple and RevenueCat.
  • Feedback you send us — the app can open your device's email client with a pre‑filled message to help@horizn.world. The email is sent by your email provider, not by us, and includes only what you choose to type. If you paste your installation identifier (SID) so we can help you, it travels in that email. We use feedback solely to answer you and to improve the app.
  • System device backup (iCloud) — if you have iCloud Backup enabled in iOS, the operating system may include Horizn's on‑device data in your personal device backup. This backup is controlled by you and Apple, under Apple's terms; we have no access to it.

4. Permissions we request, and why

Horizn asks for a permission only at the moment a feature needs it, and each feature works without it where possible:

  • Camera — to take a photo to attach to a transaction.
  • Photo library — to attach an existing photo to a transaction.
  • Face ID / biometrics — to confirm your identity when unlocking the app or resetting your PIN. Biometric matching happens in the operating system; we receive only a success/failure result.
  • Notifications — to show local reminders (e.g. upcoming bills) that are scheduled on your device. Horizn does not use a push server.

You can change or revoke any of these in iOS Settings at any time.

5. Subscriptions (In‑App Purchases)

Horizn offers an optional Premium subscription. Purchases are processed by Apple through the App Store, and subscription status is managed on our behalf by RevenueCat, Inc.

  • Apple processes your payment and manages the subscription tied to your Apple Account. We never receive your payment card details. See Apple's Privacy Policy: https://www.apple.com/legal/privacy/.
  • RevenueCat receives the purchase information needed to determine and restore your subscription entitlement — for example an anonymous app‑user identifier, purchase receipts, subscription status and history, and technical data such as device/OS type and IP address (used to infer approximate region). RevenueCat acts as our processor. See RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy/.

We use this information only to (a) unlock Premium features you paid for, (b) restore your purchase on the same or a second device using the same Apple Account, and (c) handle renewals, cancellations, expiration, refunds, billing retries and grace periods. You can manage or cancel the subscription any time in the App Store: https://apps.apple.com/account/subscriptions.

6. What we do NOT do

  • No user accounts, no sign‑in, no backend of ours.
  • No advertising and no ad networks.
  • No third‑party analytics or usage tracking, and no App Tracking Transparency prompt, because we do not track you.
  • No crash‑reporting SDK.
  • We do not sell, rent, or share your personal data.

7. Legal basis and your rights (EEA/UK — GDPR)

Where GDPR applies, our limited processing relies on:

  • Performance of a contract — to provide the Premium subscription you buy (Section 5).
  • Legitimate interests — to answer support messages you send us and to keep the app secure and working.

You have the rights of access, rectification, erasure, restriction, objection and portability. In practice:

  • For the data on your device: you are in full control. Use "Delete all data" in the app (Profile → Danger zone) to erase everything locally, or uninstall the app.
  • For subscription data held by Apple/RevenueCat: exercise your rights through Apple and RevenueCat using the links above, or contact us and we will help.

You also have the right to lodge a complaint with your local supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).

8. Data retention and deletion

We keep no copy of your data. On‑device data lives until you delete it (via "Delete all data") or uninstall the app. Purchase records held by Apple and RevenueCat are retained under their respective policies for as long as needed for subscription management, accounting and legal obligations.

9. Children

Horizn is a personal‑finance tool intended for adults and is not directed to children under 16. We do not knowingly collect data from children.

10. International transfers

If you use the subscription features, Apple and RevenueCat may process the related data on servers outside your country, including the United States, under the safeguards described in their privacy policies.

11. Changes to this policy

If we change how the app handles data, we will update this page and its "Last updated" date, and — for material changes — surface a notice in the app.

12. Contact

Questions about this policy or your data: info@horizn.world.