Privacy policy

Longview keeps your financial plan on your device, and Room to Reflect keeps your journal on your device. Purchase validation, error reporting and messages you send to support are separate from that data.

Last updated 18 October 2026

Who is responsible

Huu Ton Nguyen (Ton Nguyen), an individual developer in the Netherlands using the Hibiworks brand, is responsible for the processing described here. For privacy or support, email hello@hibiworks.com.

This policy covers the current Longview release and hibiworks.com. It does not describe a future cloud service or the features of other apps. Contact us for information about another Hibiworks app.

Your financial plan

Accounts, balances, rules, loans, properties, snapshots, future changes, saving goals, goal-purchase records, spending totals or breakdowns and settings are stored locally. The app uses these records to display your plan and estimates. Longview does not upload the financial plan to Hibiworks, connect to your bank, move money, execute investments, or provide an app account or financial cloud sync in this release.

Local plan persistence is encrypted. Device access, operating-system backups and copies you export have their own security and recovery behavior. Android app backup is disabled in this release; other device backup or transfer behavior depends on your operating system and settings. We do not promise that uninstalling removes every backup or stored key.

Import and export

Exported JSON files contain readable financial information and do not retain the protection of encrypted app storage. You choose where to save or share them; the destination provider's practices apply. Import reads the file you select. Hibiworks does not receive exports unless you send one to us. Keep exports private and delete copies you no longer need.

Purchases and Full access

Longview is free to download, with an optional one-time Full unlock. Apple or Google handles checkout and payment details under its own terms and privacy policy. The developer does not receive your full payment-card details through Longview.

RevenueCat, Inc. validates purchases, checks and restores Full access, handles purchase/refund status and provides purchase statistics to the developer. This involves store purchase or receipt information, product and transaction identifiers, an app-generated customer identifier, entitlement status, prices/currency and technical app or platform metadata needed for the service. The customer identifier is pseudonymous; it is not a promise that purchase records can never be linked to a store account.

The billing integration does not send your balances, financial rules, goals, spending records or snapshots to RevenueCat. Longview does not supply your name, email or phone as RevenueCat customer attributes. Automatic advertising/device-identifier collection is disabled; no advertising integration is configured.

Purchase records remain as needed to validate and restore access, prevent fraud, handle refunds and meet applicable legal requirements. A one-time unlock can require a long-lived purchase record. You can contact us about deletion of purchase-related data we control; deleting local plans does not delete store or RevenueCat records. Store records and refund requests are also subject to the store's own processes. RevenueCat privacy information · Data processing terms.

Limited error reporting

Longview uses Sentry (Functional Software, Inc.) for limited JavaScript error reports so the developer can diagnose faults. Reports can include technical stack information, error type and app/SDK metadata. The app filters messages, user and request details, breadcrumbs, contexts, extra fields and tags, and redacts exception text to reduce sensitive content. The Sentry project is configured to prevent storing IP addresses and apply default server scrubbing. Network providers still process connection information in transit.

Native crash handling, screen replay, performance/session tracking and diagnostic logs are disabled in the app's Sentry initialization. This does not disable JavaScript error reporting. Error reports are not used for advertising, and financial plans are not intentionally supplied to Sentry.

The current Sentry Developer plan retains error events for 30 days. Copies retained to investigate an unresolved fault or a legal/security issue are kept only while necessary for that purpose. Contact us about identifiable reports. We cannot identify a person's report from their email alone when the report contains no matching identifier. Sentry privacy information · Data processing terms.

When you contact support

The developer receives your email address, message and any attachments you choose to send, and uses them to answer your request, investigate problems and handle privacy or legal obligations. Please do not send passwords, authentication keys, payment-card details or complete financial exports. A small redacted example is usually enough.

Cloudflare Email Routing forwards hello@hibiworks.com to the developer's Gmail inbox. The developer handles support personally. Resolved requests are deleted after 12 months unless continued retention is needed for an active dispute or a legal obligation. Cloudflare and Google also process email under their applicable service and privacy terms; deleting a message from the inbox does not promise immediate removal of every provider backup. Cloudflare privacy information · Google privacy information.

This website

The website does not use analytics scripts, advertising trackers or embedded third-party media. Fonts are hosted with the site. Cloudflare serves and protects the website and processes technical request data, such as IP addresses, for delivery, security and abuse prevention. Cloudflare's technical/service records follow its retention criteria and legal requirements described in its privacy policy.

Why information is processed

Where GDPR applies, purchase validation and access restoration are used to provide the purchased feature (performance of a contract). Limited fault reporting, purchase statistics, fraud prevention, website security and general support rely on the developer's legitimate interests in operating a reliable app and responding to requests, with data minimisation and the limits described above. Handling privacy requests and records legally required to be kept relies on the relevant legal obligation. We do not use these purposes to market to you or track you across other apps.

Providers and international processing

RevenueCat and Sentry process service data for the developer under their data-processing terms. Apple and Google operate their stores under their own privacy terms. Cloudflare and Google provide the website/email services described above. Providers may use their own service providers and may process information outside the European Economic Area, including in the United States. A German Sentry ingest endpoint does not mean all processing occurs in Germany.

For relevant international transfers, RevenueCat's and Sentry's published data-processing terms provide transfer safeguards such as EU Standard Contractual Clauses. Cloudflare's and Google's policies describe their international processing and safeguards. You may contact the developer to request information about the safeguards relevant to your information. This policy does not claim that a provider's general compliance statements certify Longview.

Deletion and your rights

Local plans remain until you delete them or their local storage. In Longview, Manage → Clear data on this device removes this device's financial records and settings. Export anything you want to keep first. External exports, shared copies, operating-system backups, support messages and purchase records are separate and must be handled through the corresponding app, provider or request process. Restoring a backup may restore its contents.

Depending on the law that applies, you may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. Where consent is the basis, you may withdraw it. Email hello@hibiworks.com about information the developer holds. Verification must be proportionate; we do not need your complete financial plan to identify a support email. Local plans cannot be retrieved from the developer because they were not uploaded.

You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority where you live.

Age and advertising

Longview is intended for teens and adults aged 16 and over and is not directed at children under 16. It does not provide an age-verification or app-account service. If you believe a child has supplied personal information to the developer or a service described here, contact us so the request can be reviewed.

Longview contains no advertising, and the developer does not sell financial plans or use app data for cross-app advertising tracking.

Room to Reflect

Journal entries, worksheet definitions and preferences stay in the app's local storage. There is no journal account or automatic journal sync. The browser version keeps a separate journal in that browser. Journal content is not sent to an AI or advertising service. Crash reports are described below.

Crash reports

Store builds of the app send crash and error reports to Sentry (Functional Software, Inc.), using its EU data region (ingest.de.sentry.io), so the app can be kept working. A report contains the type of JavaScript error, a stack trace (code file, line and function), the app version and build, and SDK details. Error message text is replaced with “Error details redacted” on your device before sending. Reports contain no journal entries, worksheet answers, template text, PIN, names, email, user ID, device name, breadcrumbs or request data. Sentry is set not to store IP addresses and to scrub sensitive fields. Reports are not linked to your identity, not used for tracking or advertising, and are deleted after up to 30 days. Native crash capture, session tracking, performance tracing, profiling, session replay and logs are off. You cannot turn crash reports off in the app.

Your device backup settings may include app data. You choose when to export a readable PDF or JSON copy and where to send it. Shared worksheet QR codes and JSON contain the blank template, including its title and prompts, but no journal answers. QR scanning asks for camera permission when selected; decoding happens on the device and the app does not save a photo. Optional local reminders contain no entry text or worksheet names.

Delete entry removes that entry and matching app-managed legacy journal copies; Delete worksheet keeps historical filled entries. Erase journal data removes local journal records and preferences. Exported copies and device backups must be managed separately. Local storage is not advertised as separately encrypted by the app.

All normal features are free. Where optional support purchases are enabled, opening those options connects to RevenueCat using a generated purchase identifier to retrieve store products. Your app store and RevenueCat process purchase history and technical purchase metadata to validate the transaction. Journal answers and worksheet content are not supplied. The app does not supply personal contact attributes or advertising identifiers; optional SDK diagnostics and automatic promotional messages are disabled. Store/provider transaction records are separate from the journal and are not removed by local journal erasure.

For privacy questions or data held through purchase/support services, contact hello@hibiworks.com. Do not attach journal content or purchase receipts to a general support request. Store refund and transaction retention rules also apply; no blanket retention period or guaranteed deletion of legally required transaction records is promised here.

Service providers for Room to Reflect

Changes

This policy will be updated when Longview's data practices change, with the date shown above. Future cloud, bank, AI or advertising features would require a new assessment and accurate disclosures before they are introduced.