Privacy policy
Effective October 26, 2026
The short version
- You store your contacts in Hellodex so you can find them again. Only you can see them.
- We don’t show ads, sell data, or track you across other apps and websites.
- Location, camera, photos and your phone’s contacts are used only when you use the feature that needs them.
- Face ID and fingerprint checks happen on your phone. We never receive biometric data.
- You can delete any contact at any time, and ask us to delete your account and everything in it.
Who we are
Hellodex (“we”, “us”) is a mobile app for remembering the people you meet. It is operated by DreamSmith Labs, LLC., which is responsible for the personal data described here. Using Hellodex is also covered by our terms of use. Questions go to privacy@dreamsmithlabs.com.
What we collect and why
Your account
Your email address and password, so you can sign in and keep your contacts across phones. Passwords are handled by Google Firebase Authentication and are never visible to us. We send you an email to verify your address; a verified address is what lets other Hellodex users share contacts with you.
The contacts you save
For each person you add, Hellodex stores what you enter: name, email, phone number, the event, where and when you met (including map coordinates if you use your current location), your notes, a photo, and who introduced you. This is stored with your account so you can see it on any phone you sign in on. Our security rules allow only your account to read or change it.
These details are about other people. Please only save information you have a reasonable right to keep, as you would in any address book. We store and process it on your behalf, and don’t use it for anything else.
Camera and photos
Used only when you take or choose a photo for a contact. The photo is stored with that contact.
Location
When you add a new contact, Hellodex reads your current location once to suggest where you met, and turns it into a place name using your phone’s built-in location service from Apple or Google. You can change or clear it before saving. Hellodex never tracks your location in the background.
Your phone’s contacts
Used only when you choose “Save to phone contacts”, sync with phone contacts, or import from your phone. Sync updates names, emails, phone numbers and photos in both directions and never deletes a contact or a field. Only the phone contacts you pick are imported into Hellodex. The links between Hellodex and your phone’s contacts, and the backups made before sync changes anything, are kept only on your phone.
Sharing and finding other users
- To let people share contacts with you, your verified email address is linked to your account so the app can find you by email. Another signed-in user can learn whether an email address has a Hellodex account, but cannot browse or list accounts.
- When you share a contact with another user, they receive a copy of that contact, your email address, and any message you add. Your notes are included only if you choose. Their copy is then theirs.
- When someone shares a contact with you, their email address is saved as the person who introduced you.
Invitations
Invites are sent from your own messaging or email apps. We don’t receive or store the people you invite.
Subscriptions and purchases
Payments are handled by Apple or Google; we never see your card details. Subscriptions are managed through RevenueCat, which receives your Hellodex account ID, your purchase and subscription history, and basic app and device information such as app version, operating system, country and currency, and your phone’s App Tracking Transparency setting. Your subscription status may also be stored with your account so our servers can check it.
Promo codes
When you redeem a code, we record your account ID, the code’s use, and the time, and we count attempts per account to stop people guessing codes.
Face ID, fingerprint and app settings
Face ID and fingerprint checks are performed by your phone’s operating system. Hellodex only learns whether the check succeeded. Your appearance and lock settings are stored on your phone.
What we don’t do
- We don’t show advertising or use advertising identifiers.
- We don’t sell personal data or share it for targeted advertising.
- We don’t track you across other companies’ apps or websites.
- We don’t read your phone’s contacts, photos or location in the background.
Who processes your data
We use these service providers to run Hellodex. They process data only to provide their service to us.
| Provider | What for | Data involved |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions) | Sign-in, storing your contacts and photos, sharing, promo codes | Account details, saved contacts and photos, shares, promo code records |
| RevenueCat | Managing subscriptions | Account ID, purchase history, app and device information |
| Apple and Google | Payments, app distribution, turning map coordinates into place names | Purchase details, coordinates when you use your current location |
We may also disclose information if required by law, or to protect the rights and safety of our users or others.
How we protect it
Data is encrypted in transit and stored on Google’s infrastructure, where it is encrypted at rest. Access rules limit your contacts to your account, promo codes are stored only in scrambled (hashed) form, and secret keys are kept in Google Secret Manager rather than in the app. You can also lock the app with Face ID or a fingerprint. No system is perfectly secure, so please use a strong, unique password.
Keeping and deleting data
- We keep your account and contacts for as long as you have an account.
- Deleting a contact in the app removes it and its photo from our servers. People it introduced keep the introducer’s name only.
- To delete your account and all its data, email privacy@example.com from your account’s address. We remove it from our systems within 30 days.
- Deleting your account doesn’t cancel a subscription. Cancel it in your App Store or Google Play settings.
- Copies of contacts you shared with other users belong to them and aren’t removed with your account.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict how we use it. Most of this you can do directly in the app; for anything else, email privacy@example.com. We won’t treat you differently for exercising these rights. If you’re in the EU or UK, you can also complain to your local data protection authority.
We process your data to provide the service you asked for (performance of a contract) and, for preventing abuse such as promo code guessing, on the basis of our legitimate interests.
Children
Hellodex isn’t intended for children under 13, or under 16 in the EU and UK, and we don’t knowingly collect their data. If you believe a child has created an account, contact us and we’ll delete it.
Where data is stored
Your data is stored on Google Cloud servers in the United States and may be processed by our providers in other countries. Where required, these transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Changes to this policy
If we change this policy, we’ll update the date at the top. For significant changes, we’ll also tell you in the app before they take effect.
Contact us
Email privacy@dreamsmithlabs.com, or write to DreamSmith Labs, LLC., [registered address].