Privacy Policy
Last updated: 6 September 2026
PesoHero holds your financial information. We do not sell it, we do not share it for advertising, and we do not send your balances to anyone.
Who we are
PesoHero ("we", "us") is built and operated by Quelbits, an independent software developer in the Philippines. For any privacy question or request, write to support@pesohero.com and a person will answer you.
We process personal data as a personal information controller under the Philippine Data Privacy Act of 2012 (RA 10173).
You can use PesoHero without an account
The app works in guest mode. In guest mode, everything you enter is stored only on your device, and we never receive it. If you delete the app in guest mode, that data is gone and we have no copy of it.
Your data leaves your device only when you sign in and sync. That is a choice you make, and the app asks before it does it.
What we collect
1. Information you enter
Accounts and balances, holdings and transactions, budgets and bills, goals, emergency fund details, Pag-IBIG MP2 tranches and dividends, and, if you use the family dashboard, households, members, and remittances. This is stored on your device, and synced to our database only if you sign in.
2. Account information
If you create an account, we store your email address and an internal user id. If you sign in with Google or Facebook, we receive your email address and basic profile identifiers from them. We do not receive your password in any case, and we never receive your bank credentials, because PesoHero does not connect to your bank.
3. Crash reports
When the app crashes or hits an error, we receive a diagnostic report through Sentry: the error, the code path, your device model and OS version, and the app and update version.
Before a report is sent, the app strips financial and identifying content from it. Any value under a money-, name-, or identity-shaped field is redacted, and every remaining piece of text is scanned for email addresses, currency amounts, and long digit sequences, which are removed too. Form and request bodies are dropped entirely. The only identifier attached is your internal user id. Crash reporting is always on, because an unnoticed crash in an app holding your finances is itself a risk to you.
4. Product analytics (off unless you turn it on)
Analytics is opt-in. Until you say yes, no analytics service is contacted, no identifier is created, and nothing is recorded. You are asked once during onboarding, with the switch off by default, and you can change your answer at any time in Menu → Settings. Skipping the question counts as no.
If you opt in, we record these events, and only these, through PostHog:
| Event | What it carries |
|---|---|
| Onboarding completed | whether you skipped it |
| Signed up / signed in | the method used (email, Google, Facebook) |
| Account created | the account category, and how many accounts you now have |
| Third account added | the account category |
No amount, balance, account name, bank or institution, ticker, note, or person's name is ever included. The app enforces this in code: only the fields listed above are allowed through, and free text is discarded rather than sent. PostHog also records the standard app open event, your app version, and your device model. You are identified by your internal user id, or by an anonymous device id if you are not signed in, never by your email or name.
Screen recording and session replay are turned off in both services. We never capture your screen.
5. Push notifications
If you allow notifications, we store a device push token so we can send you reminders you asked for, such as an emergency fund check-in or an MP2 maturity date. Notification text is deliberately non-financial: no balance or amount appears on your lock screen.
6. Waitlist email
If you join the waitlist on this website, we store the email address you enter so we can tell you when PesoHero is available. We do not use it for advertising. To leave the waitlist, write to support@pesohero.com from that address.
What we never do
- We do not sell your personal data, and we never have.
- We do not share it with advertisers or data brokers.
- We do not use your financial data for advertising or profiling.
- We do not connect to your bank or read your transactions from anywhere.
Who processes data for us
| Service | Purpose | What it receives |
|---|---|---|
| Supabase | Accounts, database, sync, and the website waitlist | Your email, everything you chose to sync, and waitlist emails from this website |
| Sentry | Crash reporting | Scrubbed diagnostics and your user id |
| PostHog | Product analytics, only if you opt in | The events listed above |
| Expo | App updates and push delivery | Device push token, update and device metadata |
| Google, Facebook | Sign-in, if you choose it | The sign-in exchange itself |
| Apple, Google Play | App distribution | Whatever the stores collect under their own policies |
These providers process data on our instructions. Some store data outside the Philippines, which means your data may be transferred abroad and protected under contractual terms with each provider rather than by Philippine law alone.
How long we keep it
Synced data is kept while your account exists. Waitlist emails are kept until you ask us to remove them, or until we no longer need them after launch. Crash reports are kept for up to 90 days. Analytics events, if you opted in, are kept for up to 12 months. Deleted records are removed from backups within 30 days.
Deleting your account and your data
You can delete your account and all of its data from inside the app, in Menu → Settings → Delete account. Deletion is permanent, it removes your synced records from our database, and it cannot be undone. You can also request deletion by emailing support@pesohero.com from your account's email address, and we will complete it within 30 days.
If you belong to a shared household, deleting your account removes you from it. If you own a household, you have to hand it over to another member or disband it before your account can be deleted. The app names the household that is blocking you and links you straight to either option. Shared records you created, such as a household expense or a remittance, stay with the household so nobody else's totals break, but your name comes off them and shows as "Former member".
Your rights
Under RA 10173 you may ask us to show you the personal data we hold about you, correct it, delete it, object to how we use it, or give you a copy of it. Write to support@pesohero.com and we will respond within 30 days. If you are not satisfied, you may complain to the National Privacy Commission at privacy.gov.ph.
Children
PesoHero is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data in transit is encrypted with TLS. Synced records are protected by row-level security so one account cannot read another's. No system is perfectly secure, and we will tell you and the National Privacy Commission if a breach affecting your data occurs, as the law requires.
Changes to this policy
If we change this policy in a way that affects you, we will update the date at the top and tell you in the app before the change takes effect.