Privacy policy

Who we are

Hoggish is operated by Jasurbek Shomurodov, who is responsible for your personal data. Contact: dangerhoggish@gmail.com.

What we collect

We collect only what Hoggish needs to work:

• Account details: your email address, or your phone number when you sign up in Telegram, and your sign-in method. Passwords are stored by our authentication provider in hashed form; we never see them.
• Telegram details, if you connect the bot: your Telegram user ID, chat ID and first name, and the messages you send to the bot.
• Profile and preferences: the name you choose, country, language, currencies, font and notification settings.
• Financial records you enter: accounts, balances, income, expenses, assets, loans, goals, plans, categories and notes, and imported bank statements.
• Technical data: sign-in sessions kept in cookies, and server logs of requests that our hosting provider keeps for a short time for security. The phone sign-in form starts on the country our hosting provider estimates from your connection; that estimate is not stored.

How we use it

We use your data to:

• provide Hoggish: store your records, calculate totals and forecasts, and show them back to you;
• send the Telegram messages you have turned on, such as the morning digest, weekly summary and milestone messages;
• sign you in, keep your account secure and prevent abuse;
• answer you when you contact us.

What we do not do

We do not sell your data, show advertising, or use your financial records to profile you. We do not run analytics or tracking scripts in the app.

Services we use

Your data is processed by these providers, only to run Hoggish:

• Supabase: database and authentication.
• Vercel: hosting of the app and its servers.
• Telegram: delivering bot messages, if you connect the bot.
• Google: sign-in, if you choose Sign in with Google.
• Cloudflare R2: encrypted backups of the database.
• Market and exchange-rate services (Twelve Data, gold-api.com, Coinbase, Kraken, Bitfinex, ExchangeRate-API): we send them only ticker symbols and currency codes, never your personal data.

How long we keep it

We keep your data while your account is open. Records you delete go to Recently deleted, where you can restore them. When you delete your account, your records are deleted; copies in encrypted backups are removed as those backups expire.

Your choices and rights

If you invite people to your household in Settings, they can see your records, and change them if you allow it, until you remove them or they leave. Each person keeps their own account, preferences and backups.

You can see and correct your data in the app, download a full backup in Settings, turn off Telegram messages or sign out of the bot at any time, and delete your account in Settings, including an account created in Telegram.

Depending on where you live, you may also have the right to ask what data we hold, to object to or restrict its use, or to complain to a data protection authority. Write to dangerhoggish@gmail.com and we will reply as soon as we can.

Security

Data is encrypted in transit, each account can read only its own records and those of households whose owners invited it, and backups are encrypted. No system is perfectly secure; if a breach affects your data, we will tell you.

Children

Hoggish is not meant for children, and we do not knowingly collect their data.

Changes

When we change this policy, we will update the date at the top and tell you in the app or in Telegram about important changes.