Privacy Policy

Last updated: May 11, 2026

1. Introduction

SaveFy ("we", "us", or "our") is a personal finance management platform that helps you track spending, discover hidden subscriptions, and save money. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website and services (collectively, the "Service").

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, and a hashed password. If you sign up via a third-party provider (e.g. Google), we receive your name and email from that provider.

2.2 Financial Data

Bank connections (Salt Edge): If you connect a bank account, we receive read-only transaction data via Salt Edge, a licensed Account Information Service Provider. We never receive your banking credentials.
PDF/email uploads: You may optionally upload bank statements or paste email transaction data. This content is processed on our servers and stored in your account.
Manual entries: Any data you enter manually (amounts, categories, notes).

2.3 Usage & Technical Data

We automatically collect IP address, browser type, pages visited, click events, and error logs to operate and improve the Service.

2.4 Payment Information

Payments are processed by Stripe. We do not store your card number or CVV. Stripe may share with us your billing name, last-four card digits, and transaction status.

3. How We Use Your Information

Provide, maintain, and improve the Service.
Analyse your transactions using AI models to surface savings insights.
Send transactional emails (account verification, subscription receipts, alerts).
Detect fraud, abuse, and security incidents.
Comply with applicable legal obligations.
Respond to your support requests.

We do not sell your personal data or financial data to third parties. We do not use your financial data to train general AI models accessible outside your account.

4. AI & Data Processing

SaveFy uses large language models (LLMs) to analyse your transactions and provide personalised recommendations. When you use the AI Chat feature, your messages and relevant transaction context are sent to our AI provider. We use contractual safeguards (data processing agreements) with all AI providers to restrict secondary use of your data.

You can delete your AI chat history at any time from the Settings page.

5. Sharing of Information

We share data only in the following circumstances:

Service providers: Salt Edge (bank data), Stripe (payments), AI model providers, hosting and infrastructure providers — all under strict data processing agreements.
Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of SaveFy or its users.
Business transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred. We will notify you in advance.

6. Data Retention

We retain your account and financial data for as long as your account is active, or as needed to provide the Service. Upon account deletion, we purge your personal and financial data within 30 days, except where retention is required by law.

7. Security

We implement industry-standard security measures including encryption at rest and in transit (TLS 1.2+), hashed passwords (bcrypt), least-privilege access controls, and regular security audits. No method of transmission over the internet is 100% secure; use the Service at your own risk.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, or to restrict or object to certain processing. To exercise these rights, email us at privacy@savefy.app. We will respond within 30 days.

EU/EEA residents have additional rights under GDPR. You may lodge a complaint with your local supervisory authority.

9. Cookies

We use strictly necessary cookies for authentication sessions. We do not use advertising or tracking cookies. You can control cookies through your browser settings; disabling session cookies will prevent you from logging in.

10. Children

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, contact our Data Protection team at: privacy@savefy.app