HakaSafe Privacy Policy

Last updated: October 2026

This English translation is provided for convenience. The Traditional Chinese version is the original; if the two differ, the Traditional Chinese version prevails.

Data controller: HakaSafe (developer: Fang Wei Hsu; "we", "us"), email: hakasafe.ledger@gmail.com

Your ledgers never pass through us

• HakaSafe has no accounts and needs no sign-in. Your identity is your iCloud account; we cannot see your Apple Account, name or email.
• Ledgers, entries, categories, rules and members are stored on your iPhone and in your iCloud (group ledgers in their owner's iCloud); our servers do not keep this data.
• The app shows no ads and does not track you.
• HakaSafe never reads your notifications on its own; it only records the notification text you hand it through a shortcut, and treats it like a note you typed. Your auto-logging rules are stored in your iCloud.

Data that passes through our servers

Only when you use these features:

• Cloud model and web search (HakaSafe Plus): the store name, the note and the category list are sent, and for a search, words that look like a store name and the region. Our servers process them immediately and discard them, never storing them (the web search provider keeps search words; see "Third parties"). Words that look like a store name may be a person's name, such as an English name typed in capitals or a Chinese name typed on its own; the names of a ledger's members are never taken from a note to be searched. Amounts, times and card numbers are never sent.
• Instant notifications: the content is encrypted on your iPhone with the ledger's key; neither our servers nor Apple can read it.
• Purchase verification: the app attaches the transaction data signed by the App Store to show that you have Plus. Usage is counted against a hashed purchase identifier that is not linked to your identity.
• App Attest: Apple's device verification, used to confirm that requests come from a genuine copy of HakaSafe.

Our server logs contain only event names, counts and error codes.

Third parties

• The cloud model and web search are handled by third-party service providers, and notifications are delivered by the Apple Push Notification service.
• The web search provider keeps search words for up to 90 days for billing and troubleshooting. It sees our servers' address, not your iPhone's.
• Keys you enter under "Connect your own services" are stored only in your iPhone's keychain; the app connects to those services directly, not through our servers.
• Purchases, payments and refunds are handled by Apple and are subject to Apple's privacy policy.

Contact us

Email us at hakasafe.ledger@gmail.com, or use the "App Support" link on HakaSafe's App Store page.

Purposes, categories and retention (notice under Article 8 of Taiwan's Personal Data Protection Act)

• Collector: HakaSafe (developer: Fang Wei Hsu).
• Purposes: providing cloud model categorization and web search, instant notifications, verifying Plus purchases and usage limits, and preventing abuse (Apple device verification).
• Categories: when you use the features above, store names, notes and search words (our servers process them immediately and discard them; the web search provider keeps search words for up to 90 days); push device tokens and notification tickets; hashed purchase identifiers (used only to count usage, not linked to your identity); connection information visible to the company hosting our servers, for example IP addresses.
• Retention and recipients: usage counts and notification tickets are kept until the end of the month or until the ticket expires; device tokens until you turn notifications off or remove the app. They are used by the third-party services that provide these features (see above) and are not given to anyone else unless the law requires it.

Your rights

• You may ask to inquire about, review, copy, supplement or correct, stop the collection, processing or use of, or delete the data we hold about you. Because we do not hold your Apple Account identity, please include your purchase identifier or device identifier when you contact us so we can find the matching records.
• Not providing the data a feature needs only makes that feature unavailable; recording entries, syncing and the on-device model are not affected.

Changes to this policy

• When this policy changes, we will update this page and announce it in the app.