Privacy Policy.
We believe privacy is a right, not a feature. Hibo is designed to give you full visibility and control over your personal data —
Effective Date
June 9, 2026
Roles & Responsibilities.
Hibo is the controller of your Personal Data as outlined in this Privacy Policy, unless stated otherwise. If we act as a processor on behalf of a customer, this policy does not apply. Customers control the information they submit, and their practices may differ from ours. For privacy details related to our customers, please contact them directly. If you wish to exercise rights under UK data protection laws, contact us directly at privacy@hibo.co.uk. For more information, visit our Trust & Compliance documentation.
Data Collect & Data Sources.
Covered Data Processing Activities
This Privacy Policy covers how we collect and process your Personal Data, including:
Information You Provide: We gather contact and financial details when you interact with us, sign up for an account, or connect your bank accounts. This includes your name, email, and account preferences.
Account & Authentication Data: When you create a Hibo account, we collect details like your name, email, phone number, and login credentials to manage your access securely.
Financial Data: When you connect your bank accounts via open banking, we receive transaction data, account balances, and spending categories solely to deliver your Hibo experience.
Biographical & Profile Data: We collect information from your profile settings, including preferences and financial goals you choose to share with us.
Contract & Payment Data: If you subscribe to Hibo Premium, we handle billing information including payment method details and transaction records.
Device & Usage Data: When you use the Hibo app or website, we collect information about how you interact with our product to improve performance and experience.
Support & Communications Data: When you contact our support team, we collect the details of your enquiry and any information you provide during that interaction.
For sensitive financial data, we provide additional notice or seek explicit consent as required by UK law.
Personal Data We Collect From Other Sources.
In the course of operating Hibo, we may receive Personal Data from third parties for the following purposes:
Open Banking Providers: We receive transactional and account data from your connected banks via regulated open banking APIs, strictly limited to what you have authorised.
Identity Verification Partners: We may collect identity confirmation data from regulated third-party verification services to comply with financial regulations and prevent fraud.
Security Data: We gather data to enhance platform security, including flagged credentials and anomalous activity signals, to protect our services and our users.
Analytics Providers: We receive aggregated usage data from analytics tools to understand how people use Hibo and where we can improve.
Marketing & Referral Data: If you were referred to Hibo through a partner or campaign, we may receive basic contact information to attribute and manage that relationship.
For regulated financial services, Hibo may receive Personal Data from partners in connection with product delivery and compliance obligations.
Device Data, Usage Data, and Metadata We Collect.
Hibo collects various types of data when you use our app and website to maintain performance, security, and a personalised experience. This data includes:
Device Data: Information about your device including unique identifiers, operating system, and browser type, used to maintain service performance and meet compliance requirements.
Location Data: General location data derived from your IP address, collected with consent where required, used to tailor your experience and comply with regional regulations.
Usage & Behavioural Data: How you navigate and interact with the Hibo app, including features accessed, session duration, and in-app actions, used to improve the product.
Diagnostic Data: Crash reports, error logs, and performance data collected automatically to help us identify and resolve issues quickly.
Financial Metadata: Aggregated and anonymised patterns derived from your connected account data, used solely to improve Hibo's analytical and budgeting features.
How We Use Personal Data.
Hibo uses your Personal Data to deliver, maintain, and improve our services. Specifically we use it to:
Operate and personalise your Hibo account and financial dashboard
Process open banking connections and surface accurate financial insights
Send you relevant product updates, security alerts, and support communications
Comply with UK financial regulations and legal obligations
Detect, investigate, and prevent fraudulent or unauthorised activity
Improve our product through anonymised usage analysis and user research
Personal Data Disclosed.
Hibo does not sell your Personal Data. We may share it only in the following limited circumstances:
Service Providers: Trusted third parties who support our infrastructure, security, and operations — bound by strict data processing agreements
Open Banking Partners: Regulated API providers through whom your bank connections are established and maintained
Legal & Regulatory Bodies: Where required by UK law, court order, or regulatory obligation
Business Transfers: In the event of a merger or acquisition, your data may transfer to the successor entity under the same privacy commitments
Security Posture & Measures.
Hibo takes the security of your Personal Data seriously. Our measures include:
End-to-end encryption for all data in transit and at rest
SOC2 compliant infrastructure and regular independent security audits
Strict internal access controls — only authorised personnel can access user data, and all access is logged
Immediate incident response protocols in the event of any suspected breach
