Hereon Privacy Policy

Last updated: 13 November 2026

Hereon is a place for your New Year resolutions. It was built so that you never lose a year, and so that nobody makes money from what you write in it. There are no ads in Hereon, no analytics or tracking tools, and we never sell or share your data.

This policy explains what Hereon collects, why, where it's kept, how long, and how to delete it. "We" means Waterr, the developer of Hereon. Questions go to hereon.app@gmail.com.

The short version

• What you write in Hereon is kept on your phone and backed up to your own private space in Google Firebase, so you can get it back on a new phone.
• You don't need an account to start. If you choose Back up with Google, we receive your Google email address so the backup can follow you to a new phone.
• When the app crashes, a technical crash report is sent so we can fix it. It never includes your name, email or anything you wrote.
• Hereon Pro is an optional one-time purchase through Google Play. Google takes the payment; we never see your card or UPI details.
• No ads, no analytics, no selling, no sharing.
• You can export everything, and delete your account and all your data from inside the app at any time.

1. What we collect, and why

Things you write and create

• Your resolutions (titles, targets, progress, when you made and finished them).
• Notes on your resolutions.
• Letters to your future self.
• Your monthly check-ins.
• The signature you draw on your promise.
• Which yearly Wrapped you've opened.

Why: this is the app. It's stored so Hereon works, and backed up so you never lose a year.

The name you give us (optional)

In the beginning, Hereon asks what "future-you" should call you. You can leave it empty. If you fill it in, it's stored with your data and shown in the app.

Your account

• Every install gets an anonymous account the first time it opens: a random ID with no name or email attached. It lets your phone back up to a private space that only it can reach.
• If you choose "Back up with Google" (or "I already have Hereon"), Google shares your email address and basic profile (your Google name and profile photo link) with Hereon's sign-in service, and they are stored with your account. Hereon itself uses only the email: it shows which Google account your backup is linked to, and it lets you get your data back on another phone. Linking Google is always your choice.

Why: to keep your backup tied to you, and nobody else.

Crash reports and diagnostics

When Hereon crashes, or hits an error it recovers from, it sends a report to Firebase Crashlytics (a Google service). A report contains: - technical details of the error (a "stack trace"); - the app version; - device facts at that moment, such as phone model, Android version, free memory and storage, and orientation; - random installation identifiers (a Firebase installation ID and a Crashlytics installation ID), so we can count how many phones a bug affects.

To measure how many sessions run without crashing, the app also notes when it's opened.

Crash reports never include your name, email, account ID, or anything you wrote; we deliberately don't attach them. No reports are sent from development builds.

Why: to find and fix crashes. We don't use this data for anything else.

Purchases (Hereon Pro)

Hereon Pro is an optional one-time purchase: you pay once and keep it for life. There is no subscription and nothing renews.

• Google Play takes the payment, by card, UPI or any other method Play offers you, under Google's own terms. We never see or store your card, bank or UPI details.
• To confirm and restore your purchase, the app uses RevenueCat, a purchase-checking service. Each time the app starts (so it knows whether Pro is unlocked, for everyone, buyers or not), and when you open the Pro screen, buy or restore, RevenueCat receives:
• if you buy, the purchase record from Google Play (which product, when, the price and currency, and Google's order and purchase IDs);
• your Hereon account ID (the random ID from "Your account" above), so Pro follows your backup to a new phone;
• technical information, such as the app version, Android version, phone model, your store country, and your IP address.
• Refunds are handled by Google Play: https://support.google.com/googleplay/answer/2479637. If a purchase is refunded, Pro switches off; everything you wrote stays.
• Free features never depend on buying Pro, and nothing you make is ever locked away.

Why: to know whether Pro is unlocked, and to give it back to you after a new phone or a reinstall. We don't use purchase data for anything else.

Technical data handled by Google's services

To run the sign-in, backup and crash-reporting services, Google receives standard technical information from the app, such as the app's ID and version, the Firebase SDK version, and your IP address. Google keeps sign-in IP addresses for a few weeks, to protect accounts from abuse.

What we do NOT collect

Hereon doesn't ask for or collect your location, contacts, photos, files, microphone, camera, calendar, health or browsing history. Apart from the purchase record above, it collects no financial information. There are no ads and no advertising IDs. There are no analytics or tracking tools.

2. Reminders and exports stay on your phone

• Reminders (monthly or weekly nudges, 31 December and 1 January) are scheduled on your phone itself. Hereon doesn't use push notifications; nothing is sent to us to remind you.
• Export everything creates a file on your phone and opens your share sheet. Where it goes next is up to you; we never receive it.

3. Who else handles your data

We use Google Firebase to run Hereon's backup (Cloud Firestore), sign-in (Firebase Authentication, and Google Sign-In if you use it) and crash reports (Firebase Crashlytics). Google processes this data on our behalf, under the Firebase terms and data processing terms, and only to provide those services. Google's own privacy information for Firebase: https://firebase.google.com/support/privacy.

We use RevenueCat, Inc. (United States) to check and restore Hereon Pro purchases. It processes the purchase data described in section 1 on our behalf, only to provide that service. RevenueCat's privacy policy: https://www.revenuecat.com/privacy.

Google Play processes your payment as a separate service, under Google's own terms and privacy policy.

We don't sell your data. We don't share it with anyone else, unless the law requires us to (for example, a valid court order).

4. Where your data is kept

• On your phone, in the app's private storage.
• Your backup is stored in Google Cloud Firestore in Mumbai, India (region asia-south1).
• Sign-in records and crash reports are handled by Google's Firebase services, which may process them in data centres in other countries, including the United States. Google applies its standard safeguards to those transfers.
• Purchase records (Hereon Pro) are kept by RevenueCat in the United States.

5. How it's protected

• Everything sent between the app and Google is encrypted in transit (HTTPS), and Google encrypts stored data.
• Our database rules let only your own account read or write your backup. No other user can see it.
• Honest note: your backup is not end-to-end encrypted. As the developer, we could technically reach the database through Google's console. We don't look at what you write. The only exceptions are when you ask us to help with your account or to delete it, or when the law requires it.

6. How long we keep it

If you uninstall without deleting your account: your phone's copy goes with the app, and your backup stays. If you backed up with Google, you can get it back on any phone, or ask us to delete it. If you never linked Google, the backup isn't tied to anything that identifies you, and even we can't match it to you. So please use Delete my account and data in the app before uninstalling if you want it gone.

7. Your choices and rights

Wherever you live, you can:

• See and export your data: Settings → Export everything gives you all of it as one file.
• Correct it: edit or delete anything directly in the app.
• Delete everything: Settings → Delete my account and data. This removes your data from your phone and from the backup, and deletes your account. If you can't use the app, follow the steps at hereon.me/delete-account or email us from the Google address your backup uses.
• Stop the Google link: delete your account; this also revokes Hereon's access to your Google account.
• Ask us anything, or complain: email hereon.app@gmail.com. We reply within 30 days.

Depending on where you live, you may have further rights, for example under India's Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or California law. These include the right to access, correct, erase, or port your data, to object to processing, to nominate someone to act for you, and to complain to your data protection authority. To use any of them, email us. We don't sell or "share" personal information as California law defines it.

Grievance contact (India): Siddharth Sharma, hereon.app@gmail.com.

Legal bases (EU/UK): - Storing and backing up what you write: to provide the app you asked for. - Linking Google: your choice. - Crash reports: our legitimate interest in keeping the app working. You can object by emailing us.

8. Children

Hereon is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has used Hereon, email us and we'll delete the data.

9. Changes to this policy

If we change what Hereon collects or how we use it, we'll update this page and the date at the top. Big changes will be announced in the app before they take effect.

10. Contact

Waterr Email: hereon.app@gmail.com