Honishi — Privacy Policy
Effective date: October 1, 2026 · Contact: admin@honishi.app
Honishi ("we") is a private personal-finance dashboard for family and invited friends. This policy explains what Honishi stores about you, why, who processes it, and the choices you have.
1. The short version
- Honishi is not a financial advisor. It shows your own information; see the Terms of Use §2.
- Honishi is by invitation only. We never sell your data, show you ads or share it with anyone for marketing.
- Only you can see your financial data. Other members can't, and neither can the administrator. The database enforces this, not just the screens.
- We never ask for your bank or card passwords. You add statements yourself.
- We store only the last 4 digits of cards and the last 3 digits of accounts. We never copy ID numbers, dates of birth, or full card or account numbers into Honishi's records. A file you upload is kept exactly as you uploaded it, in your own private Documents: if it shows such a detail (a payslip shows your ID number), the detail stays inside your file and nowhere else.
- You can download all your data or delete your account at any time.
2. What we collect
| What | Examples | Why |
|---|---|---|
| Account details | your email, the name you choose, display currency, sign-in times | to let you sign in and set up your space |
| Financial information you add | accounts, holdings, values, trades, card and account statements (files and the transactions read from them), categories and rules, and your salary if you add it (gross pay, tax, social security and other deductions, take-home pay) | to show your dashboard, spending and analysis |
| Files you upload | statements and photos added in the chat or through your Google Drive inbox folder | to import them, and to keep them in your own Documents folders so you can find and download the originals later |
| Conversations with Honishi | your chat messages and Honishi's replies | to answer your questions and keep your chat history |
| Google Drive connection (optional) | your Google email and an access token for Honishi's own folder in your Drive, Honishi Inbox | to add the statements you save into that folder. Google's permission page says "See and download all your Google Drive files", because Google has no permission for one folder only; Honishi's own rule is that folder only: it never lists, opens or copies any other file or folder in your Drive, not even their names |
| Feedback you send | what you write to the admin as feedback, any screenshot or document you choose to attach to it, the screen you were on, the app version and your kind of device | to fix problems and decide what to build next |
| Usage and technical data | AI usage counts and costs, import results, error logs | to run the service, keep it secure and control costs |
Information we don't want: please don't upload documents containing other people's ID numbers or health details. If a statement or a payslip contains a name, an ID number or an address, Honishi does not copy it into its records; the file itself is kept as you uploaded it, and only you can open it.
3. How AI is used
- Honishi uses Claude (Anthropic) to answer your questions in the chat, to read statements that aren't in a standard format (PDFs and photos), and to write optional summaries and insights.
- When you ask a question or upload such a file, the relevant part of your data is sent to Anthropic's API to produce the answer. Under Anthropic's commercial API terms, this data isn't used to train their models by default.
- AI answers can be wrong. Honishi asks you before changing your data, and every change can be undone.
4. Who processes your data (our service providers)
| Provider | What for | Where |
|---|---|---|
| Supabase | database, sign-in, file storage, scheduled jobs | Switzerland (Zurich region) |
| Vercel | hosting the app | global edge network; company in the USA |
| Anthropic | the Honishi AI (chat, statement reading, insights) | USA |
| Google sign-in, and the Drive inbox if you connect it | per your Google account | |
| [EMAIL PROVIDER, e.g. Resend] | sending sign-in and invitation emails | [REGION] |
| Price data providers (Google Finance via Google Sheets, Alpha Vantage) | market prices; no personal data is sent | — |
They process data only to provide their service to us, under their own security and privacy terms. Some are outside Israel; we use providers with recognised data-protection safeguards.
5. Who can see your data
- You.
- The Honishi administrator can see only membership information: your email, name, status, sign-in dates, setup progress, whether Drive is connected, and counts and costs of AI use. The administrator cannot see your balances, holdings, transactions, statements or conversations.
- Feedback you send is read by the administrator, because you are writing to them. It carries your words, anything you choose to attach, and technical details. Honishi shows you exactly what will be sent first, and adds nothing from your accounts by itself. If it is passed on to the people who build Honishi, your name and email are left out.
- Nobody else, unless the law requires it.
6. How long we keep it
- While your account is active, until you delete items or the account.
- When an account is removed, we email you a full export, then permanently delete your data after 30 days. You can ask us to undo the removal during that time.
- Backups are kept for up to [30] days and then overwritten.
- If you disconnect Google Drive, the access token is handed back to Google and deleted immediately, and Honishi's access ends at once. The Honishi Inbox folder and the files in it stay in your Drive.
7. Your choices and rights
- See and download everything: Settings → Export my data.
- Correct anything in the app, or ask Honishi in the chat.
- Delete files, conversations, or your whole account: Settings, or write to admin@honishi.app.
- Disconnect Google Drive at any time: Settings → Drive inbox.
- Rights under the law: you may have additional rights under the law that applies to you, including Israel's Protection of Privacy Law and, where applicable, the EU/UK GDPR. To exercise them, write to admin@honishi.app; we will reply within 30 days.
8. Security
- Data is encrypted in transit and at rest.
- Each member's data is isolated with row-level security.
- Secrets are never stored in our code.
- Third-party access tokens are kept in an encrypted vault.
- Sign-in uses emailed links or Google; there are no passwords to steal.
Please turn on two-step verification for your email account, because your email is the key to your Honishi.
If we learn of a breach affecting your data, we will tell you without undue delay.
9. Cookies
Honishi uses only the cookies it needs to keep you signed in and remember basic settings. There are no advertising or tracking cookies.
10. Children
Honishi is for adults (18+). Please don't invite children.
11. Changes
If we change this policy, we'll show the change in the app before it takes effect and update the date above.
12. Contact
Honishi · admin@honishi.app