Privacy
How HonorFlow handles the information you bring into the product.
What HonorFlow stores
HonorFlow is a personal finance application. When you create an account, we store the phone number or email you use to sign in, plus the financial records you enter — transactions, budgets, accounts, investments, receipts you scan, and related settings.
How it is used
That information is used to show your overview, cash flow, net worth, insights, and Ask HonorFlow answers. Ask HonorFlow replies from your ledger. It does not invent balances. Tell HonorFlow proposes ledger changes; nothing is written until you confirm.
Cookies
Necessary storage on this device keeps you signed in and remembers theme and cookie choice. Optional Google Analytics 4 runs only after you accept analytics (or save that choice in Cookie preferences). Page views use anonymised IP. We do not send ledger amounts, OTP codes, or account emails to Google. Change this anytime from the footer or the Cookies page.
Sign-in
Access is by email or phone one-time code, password where you have set one, or Continue with Google. Google must have verified that email. Codes expire and are stored as hashes. Sessions use signed tokens so only your account can read your data through the API.
HonorFlow sends email only for account verification (OTP), password reset, and security-critical account messages. We do not email you when a budget is exceeded, when a transaction is created, or when a receipt is processed. Those stay in-app.
Receipts and OCR
If you upload a receipt photo, HonorFlow runs on-server OCR (not a public OCR API) to read the text, then may use an AI model to interpret those fields. You review the suggestion and confirm before a transaction is created. Images and OCR text are kept to power that review; they are not used to train public AI models.
AI
Tell HonorFlow and Ask HonorFlow may send the text of your command or question, plus the minimum ledger context needed to answer, to an AI provider (currently OpenAI) when the local parser is not enough. The AI does not get write access to your ledger. HonorFlow does not connect to your bank or read UPI SMS.
Payments
If you buy HonorFlow Plus, checkout is handled by Razorpay. HonorFlow records whether a paid plan is active so entitlements can be applied. We do not store your full card number.
Third parties
Depending on configuration, HonorFlow may use Razorpay (payments), Brevo or Resend (transactional email), OpenAI (Ask / ambiguous Tell), Firebase (optional push), and Google Analytics 4 (page views on honorflow.in — only if you allow analytics cookies; IP anonymised; we do not send ledger amounts, OTP codes, or account emails to Google). HonorFlow does not sell your financial records.
Export and deletion
From Profile you can export a copy of your account data, or delete the account. Deletion revokes sessions and removes personal identifiers from the account record. The full steps, and what is deleted versus kept, are on the HonorFlow account deletion page.
This page describes the product as it exists today. It is not a substitute for independent legal advice. HonorFlow does not claim ISO, SOC, or similar certifications.