HelloFox Privacy Policy
Last updated: 22 October 2026
1. Who we are
HelloFox ("HelloFox", "we", "us") is a mobile app operated by SANY HOLDINGS PTY LTD (ABN 35 669 666 737), New South Wales 2069, Australia.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If our annual turnover is under A$3 million, the Privacy Act may not apply to us in full. We follow the APPs anyway.
Contact for privacy questions: support@hellofox.app.
2. What we collect and why
| Information | When | Why | Where it is stored |
|---|---|---|---|
| Email address | When you sign up or sign in | To create your account, send your one-time sign-in code, and link your subscription and usage | Our server database (PostgreSQL) |
| Phone number (optional) | Only if you choose to enter it at sign-up | Kept on your account. We do not send SMS. | Our server database |
| One-time sign-in code | When you ask for a code | To verify your email. Valid for 10 minutes and deleted once used. | Our server database, temporarily |
| Sign in with Apple / Google | If you choose "Sign in with Apple" or "Sign in with Google" | Apple or Google confirms who you are and gives us your email address (with Apple this may be a private relay address) and an account ID. We use them only to create or find your account. We don't receive your password, and we don't get your contacts or other Apple/Google data. | Our server database (email and account ID, same as email sign-in) |
| Sign-in token | After you sign in | To keep you signed in | Our server database |
| Voice minutes used | Each time you use voice | To count your voice allowance for the current billing period (30, 60 or 120 minutes depending on your plan, 20 during the free trial; Live Translate text mode is counted separately, 120 minutes per period) | Our server database |
| Calorie log | Only if you use Calorie Tracking | Food entries (food name, meal, time, calories and optional protein, carbs and fat, and whether it came from a photo or was typed), weight entries, your daily goal and settings. If you choose "estimate for me", also age, sex, height, weight and activity level. Used to show your totals, history and trends. | Our server database |
| Referral information | If you share your invite code, or enter someone's code at sign-up (optional) | To record who referred whom (both email addresses, the code, how it was entered and when) whether and when an invited friend became a paying subscriber (yes/no and date only, not what they paid), and the referral rewards you earned (tier, minutes, start and end dates), and to stop abuse such as self-referral or repeat referrals | Our server database |
| Purchase and subscription status | When you start a trial, subscribe or change plans | To unlock your membership and set your plan's voice minutes | Apple / Google, and RevenueCat (see section 4) |
This calorie information, especially weight and body measurements, may be health information, which the Privacy Act treats as sensitive information. We only collect it when you choose to enter it, and only use it to provide the calorie feature (
3. Information we process but do not keep
- Voice: when you use voice, the recording is sent through our server to Microsoft Azure Speech (Australia East region) to turn speech into text. Text to be read aloud is sent to Azure to create the audio. In Live Translate, Azure also identifies which of our 7 supported languages is being spoken. We do not save your recordings. Android recordings are converted to another audio format in memory on our server. We only keep the number of seconds used.
- Photos and text for AI features: for translation, photo translation, ingredient scanning and calorie estimates from a photo, the text or photo is sent through our server to Google Gemini (Google's AI service) to produce your result. We do not save the photos. When an Azure Translator or Azure AI Vision key is configured, translation and text recognition may use Microsoft Azure instead. Today only Gemini is configured.
- Google may keep requests for a limited time under its own terms, for example for abuse monitoring. We will use a paid Gemini plan, under which Google says it does not use the content to improve its products.
- Horoscope: to show a daily horoscope, the app sends only your star sign (plus the app language and date) through our server to Google Gemini, which writes the reading. Your birth date is not sent. The same reading is shared by everyone with that sign on that day and is not stored with your account. The endpoint requires sign-in.
- Wake-up weather: if you turn on weather for a wake-up alarm, the app sends only the city you picked from a list (for example "Sydney CBD") to our server. Our server looks up the forecast for that city's fixed map point from the Norwegian Meteorological Institute (MET Norway). MET Norway sees only our server, not you, your IP address or your account. We do not use your phone's location. Forecasts are cached per city, not per user.
- Wake-up reading voice: if you choose the female or male voice, the wake-up message text (the time, the weather and your reminders for today and tomorrow) is sent through our server to Microsoft Azure Speech to create the audio, the same way as other spoken replies. It is not saved; only the seconds used are counted. With the "phone voice" option, nothing leaves your phone.
- Weekly calorie summary email: if you tap "email me my weekly summary", we send it to your email address through Twilio SendGrid. Sign-in code emails also go through SendGrid.
4. Payments
Subscriptions (Plus, Premium or Super) are bought through the Apple App Store or Google Play. We never see your card details. We use RevenueCat to check your subscription status. The app currently identifies you to RevenueCat by your email address.
Apple, Google and RevenueCat handle purchase data under their own privacy policies.
5. Information that stays on your phone
The following are stored only on your device. We never receive them: - reminders and wake-up alarms, including alarm settings (time, repeat, tone, voice, chosen weather city, what to read out) and the wake-up read-out log, which is kept for 1 day and can be deleted by you - your saved birth date and time for the fortune feature - the birth date you enter for the horoscope (only the star sign worked out from it is used online; see section 3) - your language settings - meal-reminder settings - a wake-up ringtone you record yourself (iPhone only). It is saved as a sound file inside the app on your phone and is never uploaded.
Reminders and wake-up alarms are local notifications scheduled on your phone and are read out with your phone's own text-to-speech (unless you pick the female or male voice; see section 3). We do not use push-notification tokens ( Deleting the app removes this data.
6. What we don't do
- We do not sell or rent personal information.
- We do not show ads.
- We do not use third-party analytics or advertising trackers, and we do not track you across other companies' apps or websites.
- We do not collect your location, contacts or calendar.
- We do not collect advertising IDs or other device identifiers. If we add a device check to prevent referral abuse in future, we will update this policy first.
7. Who we share information with
We only share information with service providers who process it on our behalf to run HelloFox: - Microsoft Azure (speech) - MET Norway (weather; receives only a city's map point from our server, no personal information) - Google (Gemini AI) - Twilio SendGrid (email) - RevenueCat (subscription status) - Apple and Google (payments) - our hosting provider. Australia is preferred.
We may also disclose information if the law requires it.
8. Overseas disclosure
Some providers process data outside Australia. Google Gemini, Twilio SendGrid and RevenueCat may process data in the United States and other countries where they or their sub-processors operate. Apple and Google also process purchase data overseas. Azure Speech is set to the Australia East region.
We take reasonable steps under APP 8 to make sure these providers protect your information, for example by using their standard data-protection terms.
9. How long we keep information
- Account, calorie log, voice usage: until you delete your account (or delete individual calorie entries).
- Sign-in codes: up to 10 minutes, deleted once used.
- Sign-in tokens: until you delete your account. Tokens do not currently expire on the server (
- Referral records: see section 10.
- Backups: (for example, removed from backups within 30 days).
- Server error logs: (they may contain technical details and masked email addresses).
10. Deleting your account
You can delete your account at any time in the app: Me → Privacy & data deletion. Deletion takes effect straight away and removes from our server: - your account (email and phone) - sign-in tokens and codes - voice usage - your calorie log, weights and settings - your invite code and your referral rewards
Referral records you were part of are kept with your email replaced by "[deleted]". To stop the same email being used to claim a referral again, we keep a one-way hash (SHA-256) of your email address.
Reminders and other data on your phone are not affected; delete the app to remove them. You can also ask us to delete your account by emailing support@hellofox.app.
Purchase records held by Apple, Google and RevenueCat are kept under their policies (
11. Children
HelloFox is for people aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
Australia's Children's Online Privacy Code is being developed and may affect this section.
12. Security
- Information is sent over encrypted connections (HTTPS) once the app is in production.
- Service keys are kept on our server, not in the app.
- Access to the database is restricted.
No system is completely secure. If a data breach is likely to cause serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.
13. Access, correction and complaints
You can ask to access or correct the personal information we hold about you (APPs 12 and 13) by emailing support@hellofox.app. We will reply within 30 days.
If you have a privacy complaint, contact us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992.
14. Changes to this policy
If we make significant changes, we will update this policy and tell you in the app. The date at the top shows the latest version.