🐹 HamsterFi Privacy Policy

Last updated: July 24, 2026

HamsterFi is an envelope-budgeting app for households, built by 288 Labs, LLC. This policy explains what we collect, why, and your rights. Questions: privacy@288labs.com.

1. What we collect

No account required

You can set up and use a full budget with no account at all. Your budget is created under an anonymous session and stored securely on our servers (tied to this device until you sign in); we do not collect your name, email, or any identity to use the app.

Optional account (for syncing)

If you choose to sign in to back up and sync across devices, we collect what the provider gives us:

• Sign in with Apple — your name and email from Apple. You may choose to hide your email (Apple provides a private relay address instead).
• Google Sign-In (Android) — your Google account ID, name, and email.

We do not use email-and-password accounts, and we never see or store a password.

Budget data

• Household name, jars (envelopes), allocations, transactions, recurring payments, and budget settings you create
• Your chosen display name and animal icon

Device & diagnostics

• App version, OS version, device model
• Anonymized product-usage events (which screens/features are used)
• Advertising identifier (IDFA) — iOS only, and only if you grant tracking permission. See Advertising & attribution.

2. How we use your data

• Run the product (save your budget, sync across devices if you sign in, send household invitations)
• Improve the product (anonymized analytics)
• Measure whether our ads work, so we know where to advertise (see Advertising & attribution)

We do not sell your data. We do not show ads inside HamsterFi. We do not use any third-party AI service, and we do not use your content to train any AI model.

We do advertise HamsterFi on other platforms, and we measure whether those ads work — see Advertising & attribution below.

3. What we do not collect

We do not connect to your bank or any financial institution. We never see, store, or share banking credentials, balances, or transactions beyond what you manually enter. We do not access your microphone, contacts, photos, or location. Your budget data — jars, amounts, transactions, and notes — is never shared with advertising partners.

4. Sub-processors

• Supabase — authentication and database storage. Region: US. Encrypted in transit (TLS) and at rest.
• RevenueCat — subscription status only (no card numbers; Apple handles payment).
• PostHog — product analytics. Region: US. Events are anonymized: we do not send jar names, transaction notes, your name, or your email.
• Meta Platforms, Inc. (iOS only) — advertising measurement and install attribution, so we can tell which of our ads led someone to install HamsterFi. See Advertising & attribution.
• Apple — App Store, in-app purchases, Sign in with Apple, and SKAdNetwork (privacy-preserving ad attribution).
• Google — Google Sign-In (Android only).

4a. Advertising & attribution

We run ads for HamsterFi on Meta platforms (Facebook and Instagram). To learn which ads actually work, the iOS app includes the Meta SDK, which reports a small set of milestone events — app installed, budget created, first spend logged, paywall viewed, and subscription started. These are counts of actions, not your content: we never send your jar names, transaction notes, amounts, balances, name, or email to Meta.

Your advertising identifier (IDFA) is shared only if you allow it. On first use, iOS asks whether HamsterFi may track your activity across other companies' apps and websites:

• If you allow it — Meta may use your device's advertising identifier to match an install to an ad you saw.
• If you decline (or never answer) — no advertising identifier is shared. Measurement falls back to Apple's SKAdNetwork, which reports conversions in aggregate and cannot identify you.

You can change this at any time in Settings → Privacy & Security → Tracking on your device. Declining does not limit any HamsterFi feature.

Data shared with Meta is processed under Meta's privacy policy and its developer terms. Android builds of HamsterFi do not include the Meta SDK.

5. Sharing

Members of your household can see all budget data attached to that household. We share data with no one else except as required by law.

6. Retention

• Budget and account data — kept until you delete your account, then removed from our database.
• Analytics events — retained up to 12 months, then aggregated.

7. Your rights

You can permanently delete your account and all associated data in the app: Household → Delete Account. Deletion is immediate and unrecoverable. You can also request access, correction, or export by emailing privacy@288labs.com (we action requests within 30 days). EU/UK/EEA residents have rights under GDPR; California residents under CCPA. We honor both globally.

8. Children

HamsterFi is not directed at children under 13 (16 in some EU jurisdictions). We do not knowingly collect data from children under 13.

9. Security

All data is encrypted in transit (TLS) and at rest. Access inside 288 Labs is restricted to a small number of authorized people.

10. Changes

We will post changes here and update the "Last updated" date. Material changes are also announced in-app.

11. Contact

privacy@288labs.com

← Back to HamsterFi