Loading…

Horizon
Log in

Legal

Privacy Policy

Effective date: November 2026

The short version

Your financial data is yours. Horizon is local-first — by default your planning data lives on your device. If you stay local-only, the account data we keep on our servers is limited to your email and last login (plus subscription status if you subscribe). While you set up your plan, we also keep your setup progress on our servers once you have confirmed your email, until you finish. Optional Pro cloud sync can store a copy of your plan for use across devices. We never sell your data to anyone. We never have, and we never will.

Who we are

Horizon is operated by The Good Chic LLC, a company registered in the Sharjah Media City (Shams) free zone, Sharjah, United Arab Emirates. We are the data controller for the personal data described in this policy. You can reach us at support@horizonfi.ai.

What we collect and why

Account information

When you create an account, we collect your email address and authentication credentials, and we record your last login time. This is used to identify your account, keep it secure, and manage your subscription. We record your email address as soon as you enter it during setup, even if you do not confirm it or finish, and we keep it so we can remind you to finish. We only email you about your plan and your account: we do not send marketing emails. Reminders have an unsubscribe link, and you can ask us to delete your address at any time. When you use Horizon without cloud sync (local-only), this account metadata — email and last login — is what we store on our servers; your finished plan stays on your device. We do not collect your name, address, or any payment details beyond what Stripe handles independently.

Planning data

All financial data you enter — account balances, income, expenses, goals, projections — is stored locally on your device using IndexedDB by default. With a Pro subscription you may optionally turn on cloud sync so a copy of your plan is stored on our servers for use across devices. You can disable sync anytime; when sync is off, planning data is not uploaded and we do not retain a synced copy of your plan for sync purposes. Horizon does not sell your planning data or use it for ads.

The one exception is setup. Once you have confirmed your email, what you enter in the setup wizard is also saved on our servers so you can carry on from another device. We remove it when you finish setup, or 30 days after your last change if you do not. Nothing you enter in the wizard is stored on our servers before you confirm your email.

You can export your data at any time as a file, and re-import it, from Settings → Data. Export and import remain available whether or not sync is enabled.

Usage data

We use PostHog and Vercel Speed Insights to understand how Horizon is used and to improve the product. This records the pages you visit, the features you use and errors, and once you are signed in it is linked to your account ID. It never includes your financial figures, name or email. Once you are signed in, Horizon also records the kind of change you make and when (for example “plan updated: spending” or “balance updated”), never the amounts or names, to support you and improve the product; it is deleted with your account. We also use advertising and measurement tools from Google and Reddit; see Cookies below.

Payment data

Subscriptions are processed by Stripe. We do not store your card number or payment details on our systems. Stripe's privacy policy governs how your payment information is handled.

AI assistant

Horizon's AI features (Hector and the assistant) use the OpenAI API. Hector's suggestion cards are computed on your device and send nothing. When you ask Hector a question, it sends an anonymised summary of your plan: no name, email, bank or account names, account numbers or transactions; amounts are expressed as months of your own spending and your age as a five-year band. What you type is checked for emails, IBANs, card and phone numbers, which are removed before sending. Requests are sent by Horizon's servers under an anonymous identifier, so OpenAI cannot link them to your account. When Hector builds a plan from your own words (from the homepage or in Hector), the text is sent to OpenAI the same way, after those identifiers are removed, and it includes the amounts you wrote, as do the figures of each option Horizon then compares. Horizon tells you this before anything is sent. When you build your first plan with Hector, this can happen before you have given an email, and Horizon then stores none of it until you confirm your email to save the plan. When you ask Hector to look up a fund or product, only the name you typed is sent, to search the web for its public documents; no balance or other detail goes with it. OpenAI does not use API data to train its models and may retain requests for up to 30 days for abuse monitoring. Horizon does not store the content of your questions; your Hector conversation stays on your device. You can see exactly what Hector sends, delete the conversation, or turn Hector off at any time.

What we do not do

  • We do not sell your data to anyone — not advertisers, not data brokers, not partners.
  • When cloud sync is off, we do not store your financial planning data on our servers — only account metadata such as email and last login (and subscription status if applicable), and your setup progress until you finish setup, as described above.
  • We do not use your financial data for advertising or profiling.
  • We do not share any data with third parties except as described in this policy: Stripe for payment processing and OpenAI for assistant queries, both under strict data processing agreements, Freshdesk for what you send us through our contact and feedback forms, plus the analytics and advertising tools described in this policy and the providers that host Horizon and send our email.

Your rights

You have the right to:

  • Access your data at any time — export your full plan from Settings → Data.
  • Delete your planning data — clear it directly from your device via Settings → Data, or by clearing your browser/app storage. Your account (email, last login, and subscription status) can be deleted by contacting us.
  • Opt out of analytics — contact us and we will exclude your account.
  • Portability — your exported data is in an open JSON format, readable without Horizon.

If you are located in the European Economic Area (EEA) or the UK, you have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

Data storage

By default, your planning data is stored on your device using IndexedDB. If you enable Pro cloud sync, a copy of that plan may also be stored on our servers so you can use Horizon across devices; you can turn sync off at any time. Account information (email, last login, and subscription status when applicable) and setup progress are stored securely on our servers. All data in transit between your device and our servers is encrypted using TLS.

Data retention

We retain account information for as long as your account is active. An email address entered during setup but never confirmed is kept until you ask us to delete it. Setup progress is removed when you finish setup, or 30 days after your last change. If you request account deletion, we remove your account data within 30 days. Your local planning data is entirely under your control — deleting it from Settings → Data removes it immediately from your device.

Bot protection

To keep automated abuse out, signing up and Hector's plan builder are checked by Vercel BotID. It reads technical signals from your browser to tell people from bots; it does not identify you and is not used for advertising.

Cookies

Horizon uses strictly necessary cookies for authentication and session management. We use third-party advertising and measurement tools: Google Analytics and Google Ads, and Reddit Pixel when configured. If you Accept in the cookie bar (or later via Cookies in the site footer), they can set cookies and measure conversions such as sign-ups and purchases. If you Reject, the Reddit Pixel does not load, and Google's tag runs in Consent Mode with advertising and analytics storage denied: it sets no advertising or analytics cookies and sends only cookieless, aggregated signals. PostHog keeps its identifier in your browser only if you Accept; otherwise it is held in memory for that visit. We also use Vercel Speed Insights to measure performance.

Children

Horizon is not directed at children under the age of 16. We do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of Horizon after changes constitutes acceptance of the updated policy.

Contact

For any privacy questions or requests, contact us at:

support@horizonfi.ai

Horizon is a planning and modelling tool only. Nothing in this app constitutes financial, tax, or legal advice.