Walyo Privacy Policy
Last updated: 17 October 2026
Walyo is an app for keeping track of your subscriptions (amounts, payment dates, reminders). This page explains, in plain words, what information the app uses, where it is kept and what you can do with it.
In short
- Walyo works on your phone. Depending on the version of the app, you can also create an account with your e-mail address: it is what lets you get your subscriptions back if you change phone.
- Without an account, your subscriptions stay on your phone only. With an account, they are also kept on our servers in Europe (Frankfurt).
- We do not sell your data, show no ads, do not track you and use no analytics tool.
- You can delete your account and all your data at any time from the app (Settings → Delete my account).
Who is responsible
Walyo is published by Houmor Studio. Contact: contact@houmorstudio.com
The information we keep
On our servers (only if you create an account)
| Information | What it is for |
|---|---|
| Your e-mail address (typed by you, or provided by Google if you choose “Continue with Google”) | identify you, send you verification codes, recover your account |
| Your first name or nickname (or the name of your Google account, if you sign in with Google) | show “Hello, …” |
| Your password, never in clear text: only an irreversible cryptographic hash (Argon2id) | sign you in |
| Your subscriptions: service name, price, frequency, next payment date, start date, category, colour, logo identifier | get them back on a new phone and keep your devices up to date |
| Sign-in tokens (stored as a hash) | keep you signed in on each phone, and sign you out remotely |
| One-time codes sent by e-mail (stored as a hash, valid 10 minutes) | verify your address and reset your password |
| Technical logs (IP address, date and type of request) kept by our host | security and proper operation of the service |
On your phone: the same information, plus your settings (language, currency, date format, theme, reminders, lock) and the logo images. A hash of your password is also kept there, to lock the app without a network.
We only use this information to make Walyo work.
The services that help us
| Service | Role | What it receives |
|---|---|---|
| Render (server hosting, Frankfurt region) | runs our server | the app’s requests (so your data, encrypted in transit) |
| Neon (database, Frankfurt region) | stores accounts and subscriptions | the data listed above |
| Resend (e-mail sending) | sends the verification codes | your e-mail address and the code |
| Sign in with Google (Google Sign-In, on Android, optional) | lets you create or recover your account without a password | Google receives the sign-in request; we receive from Google your e-mail address, your name and an account identifier. We receive neither your Google password, nor your contacts, nor any other data from your Google account |
Apple’s search API (itunes.apple.com) |
finds a service’s official app icon | the service name (e.g. “Netflix”) and your country code |
Wikidata (wikidata.org) |
finds the official website of a brand you type | the brand name you type |
Google’s website icon service (gstatic.com) |
shows a website’s icon | the service’s website address (e.g. “netflix.com”) |
The last three receive neither your prices, your dates, your account nor any identifier of yours; as with any Internet connection, they see your device’s IP address. Render, Neon and Resend are US companies: even though your data is hosted in Frankfurt, it may be subject to transfers outside the European Union covered by standard contractual clauses. Each applies its own privacy policy.
Permissions
- Notifications: to remind you of an upcoming payment. Reminders are scheduled on your phone; no server sends you notifications.
- Face ID / fingerprint (optional): to unlock the app. Recognition is done by your phone’s system; the app only receives “success” or “failure” and never accesses your biometric data.
- Internet: for your account, synchronisation and logos.
Password and lock
If you sign in with Google, you have no Walyo password: the app is then unlocked with your phone (code, Face ID or fingerprint). You can delete your account from the app at any time, which erases the data we received from Google.
One password serves your account and the lock of the app. If you forget it, you can choose a new one with a code sent to your e-mail address; your data is kept. Changing the password signs your other phones out.
What we do not do
- We do not sell or share your data for advertising.
- We do not show ads or use an advertising identifier.
- We do not use analytics, usage statistics or crash reports sent to a third party.
- We do not build a profile about you.
How long we keep your data
As long as your account exists. When you delete it from the app (Settings → Delete my account), your account, subscriptions, sign-in tokens and codes are erased immediately from our database. Backup copies kept by our host may remain for a short time before being erased themselves. Technical logs are kept according to the host’s policy. Signing out does not delete the account: it only removes the subscriptions from that phone.
Phone backups
Depending on your settings, your phone’s backup (iCloud on iPhone, Google backup on Android) may include the app’s data. That backup is handled by Apple or Google, not by us.
Children
Walyo is not directed at children under 13 (or under 15 in France without a parent’s consent) and does not knowingly collect data about them.
Your rights
You can at any time view your information in the app, change your name and password, and delete your account. If you are in the European Economic Area or the United Kingdom, you also have the rights of access, rectification, erasure, objection, restriction and portability: write to contact@houmorstudio.com and we will answer within one month. You may also contact your country’s data protection authority.
Changes
If this policy changes, the date at the top will be updated and, for important changes, the app will let you know.
Contact
Houmor Studio — contact@houmorstudio.com