Privacy Policy
LAST UPDATED: 2 JULY 2026
The short version: Havoro stores your financial data on your own hardware and sends none of it to us. We couldn't read it if we wanted to, because we don't run any servers that ever see it. There are no accounts with us, no analytics, and no telemetry.
Who we are
Havoro is a free, open-source personal finance application maintained by Charlie Mansell. It is a hobby project, not a company. The source code is public at github.com/charliemansell/havoro, so every claim below can be verified by reading it.
Your financial data
- Where it lives: in a SQLite database file on your device: your home folder for the desktop app, or a Docker volume on your own server if you self-host. It is never transmitted to us.
- Bank credentials: Havoro never asks for, stores, or transmits bank logins. You import CSV files that you download from your bank yourself.
- Accounts & passwords: the login inside the app is local to your install. The password is hashed (bcrypt) and stored in your own database file. We have no account system and no way to see, reset, or access it.
- Backups: automatic backups are written to a folder on the same device. Nothing is backed up to any cloud unless you choose to copy the files somewhere yourself.
What the app sends over the internet
The application makes a small number of outbound requests, none of which include personal or financial data:
| Request | What is sent | When |
|---|---|---|
| Stooq / Yahoo Finance | Ticker symbols only (e.g. BHP.AX) to fetch prices; Yahoo is only queried if Stooq has no price for that ticker | Only if you add share portfolio holdings |
| GitHub releases API | A standard HTTPS request; your IP address is visible to GitHub as with any web request | Only when you click "Check for updates" |
That's the complete list. The app works fully offline; if you never add share holdings and never click the update check, it makes no outbound requests at all.
Telemetry and analytics
None. The app contains no analytics SDKs, no crash reporters, no usage tracking, and no "phone home" of any kind. We do not know how many people use Havoro, and that's by design.
This website
- This site is a static page hosted on GitHub Pages. We set no cookies and run no analytics scripts on it.
- GitHub may collect standard server logs (including IP addresses) when serving the page, as described in the GitHub Privacy Statement.
Donations
If you choose to support the project via a donation link (e.g. Buy Me a Coffee), the payment is handled entirely by that third-party service under its own privacy policy. We receive whatever the platform shows us (typically a display name and message, if you leave one) and no payment details.
Self-hosted installs
If you run Havoro on your own server (Raspberry Pi, NAS, VPS), you are the data controller for that install. Access logs, backups, and network exposure are under your control. See SECURITY.md for hardening guidance.
Children
Havoro is a general-purpose finance tool and is not directed at children. Since we collect no data, no children's data is collected either.
Changes to this policy
If this policy changes, the update will be committed to the public repository with the change visible in git history, and the "last updated" date above will change.
Contact
Questions about privacy, or anything that looks like it contradicts this policy in the code, can be raised as an issue at github.com/charliemansell/havoro/issues, or privately via GitHub's private vulnerability reporting.