Privacy Policy

Hexu is made by Konrad Boguszewski, Poland (“we”). We’re responsible for the personal data described here. Contact: hello@hexu.app.

This policy covers two things: the Hexu iPhone app, and the hexu.app website, including its waitlist.

1. The Hexu iPhone app

• Your data stays on your iPhone. Everything you enter is stored only in the app’s private storage on your device: transactions, trades, holdings, brokers and settings. We never receive it, and there’s no account.
• Backups. Your iPhone’s own backups (iCloud or your computer) include the app’s data, according to your backup settings. Apple handles those backups under its own privacy policy.
• Exchange rates. To convert currencies, the app downloads public exchange rates from the National Bank of Poland (api.nbp.pl): the latest rates and, for a trade in another currency, the rates of the last business day before that trade. This is the only connection the app makes. The request contains no personal data. Like any internet request, it shows your device’s IP address to NBP’s servers.
• No analytics, advertising or tracking. The app contains no analytics, advertising or tracking tools, and no third-party code that collects data.
• Export. You can export all your data as an Excel workbook and CSV files. The files go wherever you choose to save or share them.
• Deleting your data. Deleting the app deletes its data from your iPhone. Copies in your backups follow your backup settings.
• Future features. If we add optional accounts and sync, we’ll update this policy before that feature is released.

2. The hexu.app website

Hosting and security. The website is served by Cloudflare, Inc. To deliver pages and protect the site from attacks, Cloudflare processes technical data such as your IP address and browser information. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Cloudflare is a US company. Transfers outside the EU are covered by its certification under the EU–US Data Privacy Framework and by the EU’s Standard Contractual Clauses.

Visitor statistics. We use Cloudflare Web Analytics to count visits. It sets no cookies, doesn’t fingerprint your device, and doesn’t follow you across websites. We see only totals, such as page views and countries. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Cookies. hexu.app sets no cookies. The bot check on the waitlist form (below) may keep a temporary value in your browser’s session storage, which is cleared when you close the tab.

The waitlist.

• What we collect: your email address, the time you signed up and confirmed, and the confirmation record from the double opt-in email.
• Why: to email you when Hexu launches, and to send occasional updates about Hexu.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You give it by ticking the box and confirming the link we email you. Polish law also requires consent for marketing emails, and this covers it.
• Who stores it: Brevo, an email service run by Sendinblue SAS in Paris, France, acts as our processor.
• How long: until you unsubscribe or ask us to delete it. If Hexu never launches, we delete the list.
• Withdrawing consent: use the unsubscribe link in any email, or write to hello@hexu.app. This doesn’t affect anything sent before you withdrew.

Bot protection. The waitlist form uses Cloudflare Turnstile to block automated sign-ups. It checks technical signals from your browser, such as your IP address and browser type, and uses no cookies. Legal basis: legitimate interest in keeping the list free of spam (Art. 6(1)(f) GDPR).

Emails you send us. Mail to hello@hexu.app is forwarded to our inbox by Cloudflare Email Routing. We keep your message as long as we need it to answer you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. What we never do

We don’t sell your data. We don’t use it for advertising, and we don’t make automated decisions about you.

4. Your rights

You can ask us for:

• access to your data, or a copy of it;
• correction of your data;
• deletion of your data;
• restricted processing of your data;
• your data in a portable format.

You can also object to processing based on legitimate interest, and withdraw consent at any time. Write to hello@hexu.app.

You also have the right to complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

5. Changes

If this policy changes, we’ll update the date at the top. If you’re on the waitlist and the change matters to you, we’ll email you.