HicRenew Privacy Policy

Data Controller

Lorenzo Perrone

Data Accessed and Processed

• Subscription and recurring-expense data entered by the user (provider name, category, subcategory, amounts in integer cents, billing cycles, renewal dates, contract end dates, notice period days, trial dates, payment method type, card expiry dates, price history, and freeform notes) are stored strictly on the device in an AES-256 encrypted SQLite database (sqlite3mc).
• Local preferences such as monthly budget cap, reminder notification time and offsets, catalog country selection, currency choice, biometric app-lock settings, and widget privacy masking choices are stored locally to personalize your experience.
• When you use Smart Add, text is processed strictly on-device using a local deterministic parser or native on-device operating system models (such as Apple Foundation Models or Gemini Nano where available). No text or financial data is ever transmitted to a cloud or remote AI provider.
• When you explicitly create a backup, HicRenew generates an AES-256-GCM encrypted archive (.hicrenew) with a key derived from your chosen password (PBKDF2). The archive is saved only to the destination you select (such as iCloud Drive, Google Drive, or local device storage). The developer never receives, accesses, or retains a copy.

Purposes of Processing

• To organize recurring expenses, calculate exact integer-cent monthly totals and annual projections, track renewal schedules, and provide local spending analytics.
• To compute contract cancellation deadlines and schedule local on-device notifications for renewals, trials, contract notice periods, card expirations, and optional weekly summaries.
• To parse natural language input into candidate expense fields on-device, presenting them for your manual review and confirmation before writing to the database.
• To generate encrypted backups, RFC 4180 CSV files, or .ics calendar files strictly when requested by the user.

Third-party services and transfers

• HicRenew includes no advertising frameworks, no tracking SDKs, no analytics tools, and no developer-operated cloud servers. Core features work completely offline.
• Optional developer tips are processed entirely by Apple (StoreKit) or Google (Play Billing) through your operating system account. HicRenew does not collect, receive, or store payment card numbers, billing addresses, or transaction identities.
• Notifications are scheduled and delivered locally by your device’s operating system. HicRenew operates no push-notification backend.
• If you choose to store an encrypted backup in iCloud Drive or Google Drive, the file transfer is handled through the respective platform service under its own terms and privacy policy. Only the encrypted archive selected by you is transferred.

Security measures

• The local SQLite database is encrypted at rest with AES-256 using sqlite3mc. The encryption key is randomly generated on first launch and stored securely in the device’s hardware-backed Secure Enclave / iOS Keychain.
• You can protect app access with Face ID, Touch ID, fingerprint, or device passcode, with customizable grace periods. When the app is backgrounded, financial details are obscured.
• If the hardware key or database becomes inaccessible, HicRenew operates in a fail-closed recovery mode without deleting or overwriting your database, offering a guided restore from your encrypted backup.
• Exported .hicrenew archives are protected with AES-256-GCM symmetric encryption using keys derived via PBKDF2 (SHA-256) from your personal password.

Retention and deletion

• All records remain on your device until you edit them, delete them, clear app data, or uninstall HicRenew.
• Backups created in iCloud Drive, Google Drive, or local folders remain under your direct control until you delete them from those locations.
• The third-party storage provider may apply its own retention or recovery policies to files placed in cloud storage.

Privacy choices and user rights

• Use HicRenew completely offline without creating an account or providing personal identity.
• Enable, customize, or disable local notifications for renewals, trials, and contract notice deadlines.
• Enable or disable biometric / passcode app lock and configure grace periods.
• Choose whether to use on-device Smart Add parsing.
• Create, export, import, or delete backups and CSV files at your discretion.
• Enable privacy masking to hide monetary amounts on home-screen and lock-screen widgets.

Under GDPR and applicable privacy laws, you have rights regarding your personal data. Because HicRenew operates with no central accounts, no cloud database, and stores all records locally on your device, you exercise your rights of access, rectification, erasure, and portability directly through the app’s built-in controls and export tools. For any questions, contact the developer at app@lorenzoperrone.it.

Contact and last updated

app [at] lorenzoperrone.it

2026-09-20

This policy is permanently hosted at this URL and reflects the Apple App Privacy "Data Not Collected" declaration for HicRenew release builds.

Store disclosure note

This page is intended to remain publicly accessible and reusable as the Privacy Policy URL for the App Store. Apple App Privacy answers must stay aligned with the actual released build.