Privacy Policy
How Horvation Innovation Kft. handles your data when you use Seedly, under the EU General Data Protection Regulation (GDPR).
Effective date: 30 September 2026 · Version 1.0
1. Who we are
Seedly (tryseedly.app and getseedly.app) is operated by Horvation Innovation Kft., 1162 Budapest, Lajos utca 104., Hungary (company registration number 01-09-347473, VAT number 27064836-2-42), acting as data controller under the EU General Data Protection Regulation (GDPR). Contact: contact@getseedly.app.
Seedly is a reminder and habit-tracking tool. It is not a broker, bank or investment adviser, and it never holds or moves your money.
2. What data we collect and why
Email address, sign-in codes
Why we process it: To create and secure your account and let you sign in without a password
Legal basis (GDPR Art. 6): Contract (6(1)(b))
Your habit settings: chosen stock/fund, weekly amount, reminder day and time, broker name, coffee-spend estimate, country
Why we process it: To provide the core service: reminders, tracking, projections
Legal basis (GDPR Art. 6): Contract (6(1)(b))
Self-reported purchases (ticker, amount, date) and derived values (estimated shares, estimated value)
Why we process it: To show your portfolio estimate and streaks
Legal basis (GDPR Art. 6): Contract (6(1)(b))
Push notification subscription (device token)
Why we process it: To send the reminders and weekly digest you asked for
Legal basis (GDPR Art. 6): Consent (6(1)(a)) — you can switch it off in Settings
Usage events (e.g. app opened, habit created, purchase logged, reminder opened, level reached) with timestamps
Why we process it: To understand how Seedly is used, fix problems and improve the product; aggregated statistics only
Legal basis (GDPR Art. 6): Legitimate interest (6(1)(f))
Waitlist and Founding Member status (from getseedly.app)
Why we process it: To invite you to the app and honour Founding Member benefits
Legal basis (GDPR Art. 6): Contract / legitimate interest
Referral code and who invited you
Why we process it: To measure invitations
Legal basis (GDPR Art. 6): Legitimate interest (6(1)(f))
Optional survey answers
Why we process it: To learn what Seedly means to you
Legal basis (GDPR Art. 6): Consent (6(1)(a))
Terms acceptance time
Why we process it: To record that you accepted our Terms
Legal basis (GDPR Art. 6): Legal obligation / contract
| Data | Why we process it | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address, sign-in codes | To create and secure your account and let you sign in without a password | Contract (6(1)(b)) |
| Your habit settings: chosen stock/fund, weekly amount, reminder day and time, broker name, coffee-spend estimate, country | To provide the core service: reminders, tracking, projections | Contract (6(1)(b)) |
| Self-reported purchases (ticker, amount, date) and derived values (estimated shares, estimated value) | To show your portfolio estimate and streaks | Contract (6(1)(b)) |
| Push notification subscription (device token) | To send the reminders and weekly digest you asked for | Consent (6(1)(a)) — you can switch it off in Settings |
| Usage events (e.g. app opened, habit created, purchase logged, reminder opened, level reached) with timestamps | To understand how Seedly is used, fix problems and improve the product; aggregated statistics only | Legitimate interest (6(1)(f)) |
| Waitlist and Founding Member status (from getseedly.app) | To invite you to the app and honour Founding Member benefits | Contract / legitimate interest |
| Referral code and who invited you | To measure invitations | Legitimate interest (6(1)(f)) |
| Optional survey answers | To learn what Seedly means to you | Consent (6(1)(a)) |
| Terms acceptance time | To record that you accepted our Terms | Legal obligation / contract |
We do not collect: bank or brokerage credentials, account numbers, card data, your real portfolio at your broker, precise location, or IP addresses in our analytics. If we later add an optional bank-connection feature, we will update this policy and ask for your explicit consent before any bank data is accessed. Market prices shown in the app come from a third-party market-data provider; we send them only the stock ticker, never anything about you.
3. Who helps us process your data (processors)
- Supabase (database, authentication, hosting) — EU data region
- Lovable (application platform and transactional email sending)
- Twelve Data (market prices — receives tickers only, no personal data)
- Apple / Google push services (delivery of push notifications to your device)
All processors act on our instructions under data-processing agreements. We do not sell personal data and do not use advertising trackers in the app.
4. How long we keep data
- Account and habit data: while your account exists.
- Usage events: while your account exists; aggregated statistics may be kept without personal identifiers.
- Waitlist records: until you sign up, delete your account, or ask us to remove you.
- Invoicing records for Founding Member fees: as required by Hungarian accounting law (currently 8 years).
5. Deleting your account
Settings → Delete account erases your profile, habits, purchases, usage events, push subscriptions, reminder and digest records, and survey answers, and removes your email from our waitlist and invitation lists so you are not contacted again. Deletion is immediate and irreversible; you can register again later with the same email if you wish. Invoicing records required by law are retained separately.
6. Your rights
Under the GDPR you may at any time ask us to: access your data, correct it, delete it, restrict or object to processing, receive a copy in a portable format, or withdraw consent (for example by turning off notifications). Write to contact@getseedly.app. You also have the right to lodge a complaint with the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11., www.naih.hu.
7. Security
Data is stored in the EU, encrypted in transit and at rest, protected by row-level access rules so that only you (and our administrators, for support) can access your records. Sign-in uses one-time email codes; we never store passwords.
8. Children
Seedly is for adults. We do not knowingly process data of persons under 18.
9. Changes
We will post updates here and, for material changes, notify you in the app or by email. If the data controller changes (for example when Seedly moves to its own company), we will inform you in advance.