Effective date: 18 September 2026
Last updated: 18 September 2026
Hey Wrist ("we", "us") makes Billsoon, an app for iPhone, iPad and Apple Watch that keeps track of the subscriptions and recurring bills you tell it about and warns you before each one charges. This policy describes what Billsoon stores, what leaves your device and what does not.
In short: your subscription list lives on your device. Billsoon has no server of its own and no user accounts. It never connects to a bank. It does send anonymous product-usage analytics to Mixpanel, described below, and that is the only routine transmission the app makes.
1. Billsoon does not ask for an account
There is no sign-up, no email address, no password and no profile. Nothing you enter is tied to your identity by us, because we never learn it. That also means there is no account for us to delete on request: deleting the app removes everything held locally, and Settings › Delete all my data inside the app clears the list, the history and every scheduled reminder, including the copy in iCloud if you turned sync on.
2. Billsoon does not connect to your bank
Billsoon has no bank-linking feature, no card connection, no Open Banking integration and no access to your statements. Every subscription in the app is one you typed in or picked from the built-in catalogue. It follows that Billsoon cannot see a charge you have not told it about, and cannot cancel anything on your behalf.
3. What stays on your device
All of the following is stored locally, in an app group container that only Billsoon and its own widgets can read:
- Subscription names, prices, currencies, billing cycles and next-charge dates
- Free-trial end dates
- Category, payment-method label, “shared with” label and notes
- Price history, the dates you marked paid or skipped and cancellation records
- Your settings: display currency, first day of month, reminder lead time and notification time
A compact summary of the next few weeks of charges is written to the same container so the widgets and the Apple Watch app can draw without opening the database. That summary never leaves the device except over the Apple Watch link described in section 6.
4. Analytics (Mixpanel)
Billsoon sends anonymous product-usage events to Mixpanel, Inc. so we can tell which parts of the app are used and where people get stuck. This is the only routine transmission the app makes, and it is described here rather than buried because it is the one claim a “private by design” app most often gets wrong.
What is sent:
- Event names describing an action, for example that a subscription was added, that the paywall was shown, that Insights was opened, or that a purchase completed. Events carry shape, not content: which billing cycle was chosen, not the name of the service; how many subscriptions exist, not what they are.
- A device identifier derived from Apple's identifierForVendor. This is specific to this app on this device, resets when you delete the app, and is not linked to you by name.
- App version and build, device language, the language the app is displayed in, whether the event came from the phone or the Watch, and a per-session identifier.
What is never sent: the names of your subscriptions, their prices, their dates, your notes, your payment-method labels, your totals, your contacts, your location, or anything that identifies you personally.
Mixpanel processes this on our behalf. See Mixpanel's privacy policy.
5. Development builds only: the bug reporter
Builds we run internally include a bug-reporting SDK that can capture a screenshot and recent logs when a tester reports a problem. It is compiled in behind a debug flag and is never started in the version distributed on the App Store. Because the SDK links Apple's speech frameworks, iOS requires the app to declare microphone and speech-recognition purpose strings; Billsoon has no voice feature and never records audio.
6. Apple Watch
The Watch app receives the summary described in section 3 from your iPhone over Apple's WatchConnectivity link, which is a direct device-to-device transfer. When you mark a charge paid on the Watch, that action is sent back to the phone the same way, and the phone records the analytics event on the Watch's behalf. The Watch app contains no analytics SDK of its own.
7. iCloud sync (optional, Pro, off by default)
If you turn on iCloud sync, your subscription list is mirrored through your own private iCloud databaseusing Apple's CloudKit, so it appears on your other devices signed in to the same Apple Account. We do not operate that storage, cannot read it, and receive nothing from it. Turning sync off returns Billsoon to local-only storage. Apple's handling of iCloud data is governed by Apple's privacy policy.
8. Exchange rates (optional, off by default)
Billsoon ships with a built-in currency rate table so that totals for foreign subscriptions work with no network at all. If you switch on Refresh exchange rates, Billsoon makes an anonymous HTTPS request to open.er-api.com to fetch current rates. That request contains no identifier and no information about your subscriptions; it asks only for the public rate table. The setting is off unless you turn it on.
9. Notifications
Reminders are local notifications scheduled on your device by the app. There is no push server and Billsoon holds no push token. If you decline the notification permission, every other part of the app continues to work.
10. Purchases
Billsoon Pro is sold through Apple's In-App Purchase. Apple processes the payment; we never see your payment details. The app reads the purchase receipt already on your device to decide whether Pro features are unlocked. We record that a purchase, trial start or restore happened as an analytics event, with the product identifier and price, but not with anything identifying you.
11. Export and import
CSV export writes a file through the system share sheet to wherever you choose. Import reads a file you pick. Neither passes through us.
12. Children
Billsoon is rated 4+ and contains no objectionable content, but it is a tool for adults managing their own bills. We do not knowingly collect personal information from children.
13. Your rights
Because Billsoon holds no account and no personal identifiers on our side, there is no profile for us to produce, correct or erase. If you would like the analytics identifier for your install disassociated from collected events, email founder@heywrist.com and we will action it. Deleting the app, or using Delete all my data inside it, removes everything held locally and in your iCloud database.
14. Changes
If this policy changes in a way that affects what is collected, we will update the date at the top and describe the change in the app's release notes.
15. Contact
Hey Wrist — founder@heywrist.com