PRIVACY POLICY
Last updated August 22, 2026
This Privacy Notice for Maxwell Herman ("we," "us," or "our") describes how and why we may access, collect, store, use, and share ("process") personal information when you use Hermy Finance Tracker or contact us about it. If you do not agree with this notice, please do not use the Services. Questions or concerns can be sent to imaxwellherman@gmail.com.
ABOUT HERMY FINANCE TRACKER
Hermy is a manual personal-finance tracker designed to help you manage daily expenses, monthly goals, recurring bills, subscriptions, expected income, and future plans. It gives you a clear view of your financial habits, lets you track transactions and accounts, and provides insights so you can understand where your money is going.
Key features include:
• Tracking transactions and accounts in one organized place.
• Planning budgets, bills, subscriptions, and expected income.
• Reviewing spending patterns and monthly progress.
• Finding records by date, category, merchant, account, or month.
• Creating Excel, PDF, and JSON exports.
• Synchronizing records across supported devices when the platform's cloud service is available.
• Protecting records with optional device authentication.
Hermy is a manual record-keeping tool. It does not connect to or import from bank accounts in this build and does not provide financial, tax, investment, or legal advice.
SUMMARY OF KEY POINTS
• We process the information you choose to enter, including financial records and app preferences.
• Android account authentication and Android sync use Firebase Authentication and Google Cloud Firestore.
• iOS sync uses Apple iCloud and CloudKit's private database, not Firebase.
• Google Play or Apple processes payments; Hermy does not receive full payment-card details.
• We do not use advertising SDKs, cross-app tracking, targeted advertising, offer walls, or push notifications in this build.
• We use information to provide features, synchronize data, secure the Services, process entitlements, provide support, and comply with law.
• You can request access, correction, export, or deletion by contacting imaxwellherman@gmail.com.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON?
4. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?
5. HOW LONG DO WE KEEP INFORMATION?
6. HOW DO WE KEEP INFORMATION SAFE?
7. WHAT ARE YOUR PRIVACY RIGHTS?
8. CONTROLS FOR DO-NOT-TRACK FEATURES
9. UNITED STATES STATE PRIVACY RIGHTS
10. DO WE MAKE UPDATES TO THIS NOTICE?
11. HOW CAN YOU CONTACT US?
12. HOW CAN YOU REVIEW, UPDATE, OR DELETE DATA?
1. WHAT INFORMATION DO WE COLLECT?
Information you disclose to us
We process personal information that you voluntarily provide when you use Hermy, enter records, purchase or restore access, contact support, or otherwise interact with the Services. You control the records you enter. This may include:
• Transactions, accounts, categories, budgets, bills, subscriptions, expected income, amounts, dates, notes, merchants, and related financial-planning records.
• App preferences such as currency, display, reminders configured locally, and other settings.
• Information you provide in a support request, such as your name, email address, device/platform details, and the content of your message.
Android account and technical information
If you create or use an Android Hermy account, we handle the email address and authentication identifier associated with that account. You may sign in with email and password or Google Sign-In. Firebase Authentication provides Android sign-in. Firebase and Google Play services may process limited technical, security, service-operation, and diagnostic information needed to authenticate accounts, protect the Services, maintain secure connections, prevent abuse, and diagnose reliability issues.
Firebase is used specifically for Android. Google Cloud Firestore stores an account-scoped Android snapshot so records can synchronize between Android devices signed in to the same account. Hermy applies access rules so one account cannot read another account's snapshot.
iOS iCloud and CloudKit information
The iOS version uses Apple iCloud and CloudKit, not Firebase, for cross-device sync. When iCloud sync is available, Hermy stores Hermy records in the private iCloud database associated with the Apple Account so they can sync between the user's Apple devices. Apple controls that iCloud account and processes iCloud and CloudKit service information under Apple's applicable terms and privacy policies.
Hermy does not receive an Apple Account password, the user's biometric template, or full payment-card details. The iOS app may receive CloudKit record data needed to display, update, delete, or recover Hermy records, plus normal Apple service status and diagnostics. Optional Face ID or device authentication is used only to protect Hermy data on that device.
Purchase information
If you purchase Hermy Pro on Android through Google Play, Google processes the payment. Hermy may receive a product identifier, transaction or purchase token, and purchase state so the app can grant or restore access. Google handles payment-card details.
If you purchase Hermy Pro on iOS through Apple's App Store, Apple processes the payment. Hermy may receive the product and transaction entitlement state needed to grant or restore access for the Apple Account used for the purchase. Apple handles payment details.
Application data, tracking, and sensitive information
Hermy does not use advertising SDKs, cross-app tracking, targeted advertising, offer walls, or push notifications in this build. Hermy does not intentionally collect sensitive personal information such as racial or ethnic origin, precise location, health information, biometric templates, or information from data brokers. Do not enter information that you do not want stored in the platform service used by your device.
Exports
When you create an Excel, PDF, or JSON export, the file is generated on your device and shared only through the destination you choose. Hermy does not receive copies of files you share outside the app. Copies saved to another service are controlled by that destination.
2. HOW DO WE PROCESS YOUR INFORMATION?
We process information to:
• provide Hermy's finance-tracking, planning, insights, and export features;
• authenticate Android users and restore their account-scoped Android data;
• synchronize Android records between Android devices signed in to the same account;
• synchronize iOS records through the user's private iCloud CloudKit database;
• maintain local records and recover safely from storage or sync failures;
• protect accounts and the Services from abuse;
• process and restore Google Play or Apple purchase entitlements;
• provide support and respond to requests;
• improve reliability and troubleshoot technical problems; and
• comply with legal obligations.
Hermy does not sell personal information and does not use financial records for advertising.
3. WHAT LEGAL BASES DO WE RELY ON?
We process personal information when necessary to provide the Services you request, perform our agreement with you, protect the security and integrity of the Services, comply with legal obligations, respond to support requests, or pursue legitimate interests that do not override your rights. Where applicable law requires consent, we rely on your consent and you may withdraw it by contacting us, although withdrawal does not affect processing already completed or processing permitted by another lawful basis.
If you are located in Canada, we may process information with express or implied consent where permitted, to provide requested Services, investigate fraud or security incidents, complete a business transaction, comply with legal process, or for another exception recognized by applicable law. We will limit collection and use to appropriate purposes.
4. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?
Service providers
We share information only with providers needed to operate the features described above:
• Google Firebase Authentication and Google Cloud Firestore for Android account access and Android data sync.
• Google Play services and Google Play Billing for Android purchase processing, purchase state, and entitlement restoration.
• Apple iCloud and CloudKit for iOS private-database sync and related Apple service functions.
• Infrastructure, security, support, and diagnostic providers needed to operate the Services.
These providers process information under their own terms and privacy documentation. Firebase is not used for iOS sync, and CloudKit is not used for Android sync.
Business transfers and legal requirements
We may disclose information if reasonably necessary to comply with law, legal process, court order, or a valid government request; to protect users, the public, or the Services; to investigate fraud or security incidents; or in connection with a merger, sale of assets, financing, acquisition, or other business transfer. We will take reasonable steps to protect information in those circumstances.
We do not share Hermy financial records with advertisers, data brokers, or offer-wall providers. We do not sell personal information and do not share it for targeted advertising.
5. HOW LONG DO WE KEEP INFORMATION?
We keep information for as long as necessary to provide the Services, fulfill the purposes in this notice, maintain security and reliable backups, or comply with legal requirements.
Android cloud records remain in the Firebase account-scoped database until deleted through the app or a verified support request. iOS records remain in the user's private iCloud database while the user keeps the iCloud data and the app's records. Local records may remain on a device until deleted from the app or the device. Previously exported copies stored outside Hermy are controlled by their destination.
When there is no ongoing legitimate need to retain information, we will delete, anonymize, or securely isolate it where reasonably possible.
6. HOW DO WE KEEP INFORMATION SAFE?
We use encrypted network connections for cloud services, account-scoped Android access controls, Apple's private CloudKit database for iOS sync, Android backup exclusions for private records, local recovery safeguards, and optional device authentication. No electronic transmission or storage technology can be guaranteed to be 100% secure. Keep your device, Apple Account, Google Account, and Hermy credentials protected, and use the Services only in a secure environment.
7. WHAT ARE YOUR PRIVACY RIGHTS?
Depending on where you live, you may have rights to know whether we process personal information, access and obtain a copy of it, correct inaccuracies, request deletion, request portability or export, restrict or object to certain processing, withdraw consent where consent is the basis, and receive equal service when exercising rights. You may also have rights concerning automated decision-making where applicable; Hermy does not make decisions about people using automated profiling.
To exercise rights, email imaxwellherman@gmail.com. We may request reasonable information to verify identity and protect the account. We will consider and act on requests under applicable law.
8. CONTROLS FOR DO-NOT-TRACK FEATURES
Some browsers and mobile systems provide Do-Not-Track settings. No uniform standard applies to Hermy, and Hermy does not currently respond to browser or device Do-Not-Track signals. Hermy does not use cross-app tracking or targeted advertising.
9. UNITED STATES STATE PRIVACY RIGHTS
Depending on your state of residence and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; to opt out of sale, targeted advertising, or certain profiling; to limit certain sensitive-information processing; and to receive non-discriminatory treatment for exercising rights. These rights may be limited by law.
For the preceding twelve months, the categories relevant to Hermy are:
• Identifiers: MAY be processed when you use Android account authentication, contact support, or provide an Apple/Google platform identifier.
• Personal and financial records: YES, when you choose to enter transactions, accounts, budgets, bills, subscriptions, expected income, dates, notes, and related records.
• Commercial information: MAY include purchase entitlement state and transaction identifiers; Hermy does not receive full payment-card details.
• Internet, device, or diagnostic information: MAY be processed by Firebase, Google Play services, Apple, CloudKit, or infrastructure providers for security, reliability, and service operation.
• Geolocation, audio, visual, professional, education, biometric-template, and inferred-profile information: NOT intentionally collected by Hermy in this build.
• Sensitive personal information: NOT intentionally collected by Hermy in this build.
We do not sell personal information or share it for targeted advertising. To exercise applicable rights, email imaxwellherman@gmail.com. We may verify requests against information already associated with your account.
10. DO WE MAKE UPDATES TO THIS NOTICE?
We may update this notice when the app's data practices or legal requirements change. We will update the date at the top and publish the revised notice at this URL.
11. HOW CAN YOU CONTACT US?
Maxwell Herman
Herman Productions
imaxwellherman@gmail.com
12. HOW CAN YOU REVIEW, UPDATE, OR DELETE DATA?
You can review, edit, export, or delete financial records in Hermy. You may request deletion of Android account data by emailing imaxwellherman@gmail.com. After verification, we will delete associated Firebase Android records where applicable.
On iOS, deleting Hermy records schedules the corresponding records for deletion from the user's private CloudKit database. You can also control iCloud access and data through Apple settings. Cloud sync is not a substitute for a separate backup because edits and deletions can sync across devices.
Previously exported copies stored outside Hermy are not controlled by this request. If you contact us about an account or privacy request, we may retain the request and verification details as needed to document and respond to it.
Children
Hermy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.