Privacy Policy

The short version

• Your Steamworks Web API key stays on your device.
• Your raw Steam financial data stays on your device.
• Honoo servers store only the account and app configuration needed to run the service.
• Optional cohort sharing sends normalized growth shapes, not raw counts or revenue rows.
• Optional Discord webhook posts are sent from your device, not from Honoo servers.
• Honoo does not include advertising SDKs, third-party analytics SDKs, or crash reporting SDKs.

Data that stays on your device

Honoo stores and processes the following data on your device:

• Steamworks Web API key. Stored in the iOS Keychain through expo-secure-store. Honoo does not send this key to our servers, Supabase, RevenueCat, Discord, or any other third party.
• Raw Steam Financial API responses. Wishlists, sales, revenue, refunds, and related Steam financial reporting are fetched from Steam to your device and processed there.
• Local app state. Display currency, biometric lock setting, active game, per-game goals, insight dismissals, hidden games, notification settings, cached game snapshots, and Discord webhook URL if you add one.
• Biometric lock setting. If you enable Face ID or Touch ID, Apple handles the biometric check on your device. Honoo stores only whether the lock is enabled.

About your Steam API key

Steam's guidance is that partner Web API calls should come from a secure server. Honoo takes a different approach: your key is used only on your own device. This avoids sending your partner key or raw financial data through Honoo infrastructure.

This has tradeoffs. If your Steamworks API key is restricted by IP address, calls from your phone may fail because mobile IP addresses change. If Valve changes the Steamworks APIs, Honoo may need an app update or some features may pause until they are adapted.

You can remove the key from Honoo at any time in Settings > Steam connection > Disconnect. You can also revoke or rotate the key in Steamworks.

Data stored by Honoo servers

Honoo uses Supabase for account and configuration storage. Server-side data may include:

• Account record. Your Supabase user ID, Sign in with Apple identifier, creation time, cohort opt-in status, and app tier or entitlement state.
• Tracked game configuration. Public Steam App IDs you choose to track, per-game visibility, and last-seen timestamps used to detect games that no longer appear in your Steamworks account.
• Cohort contribution status. Whether you opted in and when you opted in.
• Cohort contributions, only if you opt in. Normalized growth points, bucketed by tags, price band, studio-size bucket, and lifecycle status. These are relative shapes, not raw counts, raw revenue, or full Steam financial responses.

Honoo may also keep basic operational logs for security, abuse prevention, and reliability. These logs are not used for advertising.

Cohort sharing

Cohort sharing is off by default. If you turn it on, Honoo can submit normalized growth shapes so the app can build better benchmarks for similar games.

Before submission:

• Raw financial rows stay on your device.
• Absolute wishlist counts and revenue totals are not submitted.
• The submitted shape is normalized into relative growth points.
• Fixture and demo data are blocked from submission.

Cohort benchmarks are returned only when enough games are available for a bucket. Previously submitted normalized contributions may remain in aggregate benchmark data after you turn sharing off, because they are designed not to be extracted back to a specific user or game.

Services your device contacts

Honoo may contact these services from your device:

Service	What is sent	Why
Steam Financial API, partner.steam-api.com	Your Steamworks Web API key and app-specific requests	Fetch your Steam financial and wishlist reporting
Steam Store API, store.steampowered.com	Public Steam App IDs	Fetch public game metadata, images, price, review, and CCU information
Apple	Standard Sign in with Apple and App Store purchase data	Authentication, app distribution, and purchase handling
RevenueCat	App user ID and purchase or entitlement events	Subscription entitlement management
Supabase, EU West Ireland	Account record, tracked public App IDs, configuration, and opt-in cohort data	Backend hosting, authentication, and cohort benchmarks
Frankfurter, api.frankfurter.dev	Currency pair requests, such as USD to EUR	Display currency conversion
Discord, only if you add a webhook	Insight highlight embed from your device	Post selected Honoo highlights to your Discord channel

Discord webhooks

Discord webhook support is optional and available only when you add a webhook URL.

The webhook URL is stored on your device. Honoo servers do not receive it. When iOS gives Honoo background time, your device may post a highlight directly to Discord. iOS controls when background refresh runs, so Discord delivery is best effort and should not be treated as real-time or scheduled delivery.

A Discord embed may include:

• Game name
• Public Steam App ID
• Insight finding
• Insight interpretation
• Rule ID
• Severity

Discord posts do not include your Steam API key or raw Steam financial rows.

Notifications and background refresh

Honoo can schedule local notifications on your device for account, sync, key, and insight-highlight events. These notifications are not sent through a Honoo push server.

Honoo can also use iOS background refresh to update recent Steam data from your device. Background refresh is controlled by iOS. It may run often, rarely, or not at all depending on device state and system policy.

Background refresh uses the same privacy model as the foreground app: Steam data is fetched from your device, and raw financial data is not sent to Honoo servers.

What Honoo does not collect

• No advertising identifiers.
• No third-party advertising SDKs.
• No third-party analytics SDKs.
• No third-party crash reporting SDKs.
• No cross-app tracking.
• No sale of personal data.

Purchases

Purchases are processed by Apple through the App Store and managed in Honoo through RevenueCat. Honoo receives entitlement state so the app knows whether your account has access to Indie features.

Refund requests for App Store purchases are handled by Apple at reportaproblem.apple.com. Honoo support can help troubleshoot app issues, but Apple decides refund eligibility for App Store purchases.

Where data is stored

Server-side Honoo data is stored in Supabase in the EU West region in Ireland.

On-device data is stored in iOS Keychain and local app storage. Some local data may remain on your device until you delete the app, sign out, disconnect Steam, or delete your account.

How long data is kept

• Account and game configuration: kept while your Honoo account exists.
• On-device data: removed when you delete the app, sign out, disconnect Steam where applicable, or delete your account.
• Cohort contributions: retained as part of aggregate benchmark data after submission.
• Operational logs: kept only as long as needed for security, abuse prevention, and service reliability.

Account deletion and sign out

You can delete your account in Settings > Account > Delete my account. Account deletion removes your account record and tracked game configuration from Honoo servers, then clears local Honoo data from your device.

Deleting your account does not cancel an active App Store subscription. Cancel subscriptions in Apple settings before deleting your account.

Signing out clears local Honoo data and signs you out. It does not cancel App Store purchases.

Your choices

• Disconnect Steam from Settings > Steam connection > Disconnect.
• Turn cohort sharing on or off in Settings > Account.
• Manage notifications in Settings > Notifications.
• Remove a Discord webhook from Settings > Notifications.
• Delete your account from Settings > Account.
• Request account-level data by contacting privacy support.

Children

Honoo is intended for game developers. It is not directed at children under 13, or under 16 where that higher age applies. We do not knowingly collect data from children.

Changes

We may update this policy as Honoo changes. We will update the date at the top of this page when that happens. Material changes will be announced in the app where practical.

Contact

Privacy questions and data requests: [email protected]

General support: [email protected]