Privacy
HeyTomte · last changed 30 October 2026
HeyTomte shows your accounts, investments and wallets in one place. It runs on your own devices: on your iPhone, or on a computer of yours that your phone connects to. There is no HeyTomte service in between, and the developer never receives your data.
Where your data is
- Your accounts, balances, transactions and settings are stored on your device, in an encrypted database. Face ID (or your recovery key) unlocks it.
- On an iPhone, iOS includes that encrypted database in your iCloud or computer backup, as it does for other apps. It stays encrypted there.
- Keys and logins for your providers are sealed in the same encrypted store.
Who HeyTomte talks to
Only the services you connect, and only to fetch your own data:
- Your bank, through Enable Banking (Enable Banking Oy, Finland, a registered account information service provider). HeyTomte uses an Enable Banking application registered in your own name and with your own key, and your bank asks for your consent before sharing anything.
- Brokers you add, such as Scalable Capital or Trade Republic, with the login you give them.
- Public blockchain services, for the wallet addresses you add (addresses only, never keys).
- Price and exchange-rate services, which are told which assets and currencies to price, not what you hold.
- Logo services, which are told a merchant's or token's name or web address to show its logo.
- A language model, if you set one up, to suggest categories and merchants. It receives payee names and transaction texts, never amounts or account numbers.
What HeyTomte doesn't do
- No account with HeyTomte, no analytics, no tracking, no advertising.
- Nothing is sold or shared for any other purpose.
Logs you choose to send
If something goes wrong, you can share a log from More → Diagnostics. Before any line is saved, HeyTomte replaces names, merchants, amounts, IBANs, addresses and keys with tags, and the screen shows exactly what will be sent. It only leaves your phone when you share it, with whoever you choose. Crash reports from TestFlight reach the developer through Apple if you agree to send them.
Your choices
Remove a connection and its data in the app at any time; deleting the app deletes everything on the device. To end bank access, remove the connection, or revoke your consent at your bank or in the Enable Banking Control Panel.
Contact
Nikolas Sturm · team@heytomte.de