Our policy
Your numbers stay yours
Last updated 2026-10-01
When you have an account, your numbers are kept in Heir's secure database, encrypted in transit and at rest, and locked to your login: no other member can ever see them. We never sell or share your data, we show no ads, and there are no trackers in the app. We don't connect to your bank. Payments are handled by Stripe, so we never see your full card number. We only look at your information if you ask us to, for support. You can download all of it, or delete your account and everything in it, anytime from Settings. Members can also keep an offline copy of Heir on their own computer; here's how all of this works in detail.
Who is responsible
Heir is responsible for the personal information described here. The person in charge of protecting personal information at Heir is the founder, who can be reached at hello@heir-hq.com. Write there for any question, request or complaint about your information.
What we collect, and why
Your account: your name and email, to sign you in, reach you about your account and payments, and send emails you ask for (like a password reset).
What you enter in Heir: accounts, budget, transactions you type or import, goals, debts, giving, tax details and the receipts you attach. We keep these only to show them back to you and to calculate your summaries, projections and estimates.
Your membership: plan, status and payment dates, from Stripe. We never see your full card number.
Offline copies: the license ID, name, email, date and payment customer number of each copy you download, to protect the licence and handle refunds and disputes.
We don’t connect to your bank. We don’t use your information for advertising, we don’t sell it or share it for others’ marketing, and we don’t use it to make automated decisions about you.
Consent
By creating an account, you consent to the collection and use described here, for these purposes only. If we ever want to use your information for a new purpose, we’ll ask you first. You can withdraw your consent at any time by deleting your account (Settings → Privacy & Security); we then stop using your information and erase it as described below.
Cookies and browser storage
Heir uses only what it needs to work: a sign-in cookie that keeps you logged in, and your browser’s storage for preferences such as language and layout. There are no advertising cookies, no analytics trackers and no third-party tracking in the app.
Who helps us run Heir, and where your information is stored
Supabase (our database, sign-in and private file storage), Vercel (the website), Stripe (payments) and Resend (account emails) process your information only to run Heir, under their own security and confidentiality commitments.
Your information is stored outside Quebec, in the United States, by these providers. It’s encrypted in transit and at rest, and locked to your login. Laws in other places may differ from Quebec’s; we choose established providers with strong security practices to keep it protected.
How long we keep it
Your account and everything in it: for as long as you have an account. When you delete it, we erase your data, receipts and offline-copy records right away; copies in our providers’ routine backups disappear as those backups expire, within about 30 days.
Payment records (invoices and charges): kept by Stripe and by us as long as tax law requires, generally six years.
Emails you send us: as long as needed to help you, then deleted.
Your offline copy
If you download an offline copy of Heir, it’s built in your own browser from your data and saved to your computer. From then on it’s in your hands: it sends nothing to us, we can’t see it, and we can’t delete it for you. Anyone who can use that computer may be able to open it, so store it somewhere safe.
Your rights
You can see, correct, download or delete your information at any time. Most of it is in Settings: your profile to correct it, Data & Migration for a complete copy in a structured file you can take elsewhere, and Privacy & Security to delete everything. For anything else, write to hello@heir-hq.com and we’ll answer within 30 days.
Heir is for adults: you must be 18 or older to create an account.
If you’re not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
If something goes wrong
If a security incident ever puts your personal information at risk of serious harm, we’ll tell you and the Commission d’accès à l’information promptly, and explain what happened and what we’re doing about it.
Changes to this policy
If we change how we handle your information, we’ll update this page and its date, and tell you by email or in the app before an important change takes effect.