Privacy policy

Sayvings · effective 19 October 2026

The short version. Your expenses live on your phone. We never ask for a bank login. If you turn on sync, your expenses are encrypted on your phone before they leave it, so our server only stores scrambled data it can't read. If Claude parsing is on, only the sentence you say or type, or a receipt photo you choose to scan, is sent to be read. Receipt photos are never stored. No ads, no tracking, and we don't sell data.

What stays on your phone

Expenses, favorites, settings and reminders are stored in the app's storage on your device. They stay there until you delete them or remove the app.

Voice

When you tap the mic, your phone's own speech recognition (from Apple or Google) turns your words into text. That service is run by your phone's maker under their privacy policy. Sayvings gets only the resulting text and does not keep recordings.

Claude parsing (optional)

When it's on, the sentence you said or typed (for example "lunch 12 at Chipotle"), today's date, your currency and the list of categories are sent through our proxy (on Cloudflare) to Anthropic's Claude to be read. The proxy does not store the text. It keeps only a count of requests per day so it can apply daily limits. Anthropic processes the text under its commercial terms, which do not allow it to train models on it. With Claude parsing off, everything is read on your phone.

Receipt scanning (optional)

When you scan a receipt, the photo is shrunk on your phone and sent the same way, through our proxy to Claude, to read the store, total and date. The photo is not saved on your phone, on the proxy or by us; only the expense you confirm is kept. Scanning needs Claude parsing; it uses your camera only when you tap Scan a receipt.

Sync and your account (optional)

Account: you sign in with your email address and a one-time code. We store that email to sign you in and send codes.
Encrypted data: each expense and your favorites list are encrypted on your phone with a key that only your sync passphrase unlocks. The server (Supabase) stores the encrypted data, its size and when it changed. It never sees your amounts, merchants, categories, dates, notes, your passphrase or your key.
Emails: sign-in codes are sent by an email delivery service on our behalf.

Subscriptions

Payments are handled by the App Store or Google Play. We never see your card details. We use RevenueCat to check which plan you have. It receives an anonymous app ID, the product you bought and the purchase receipt from the store.

Feedback

If you send feedback, we receive what you write and, if you email it, your email address. We use it only to reply and improve the app.

What we don't do

No bank or card login, ever.
No advertising, no ad tracking, no third-party analytics.
We don't sell or rent personal data, or share it except with the services named above, which process it only to run the app.

Deleting your data

Account and synced copy: in the app, Settings → Sync & your data → Delete account. This permanently deletes your sign-in and everything on the sync server.
Can't open the app? Email us from the address you signed in with (contact below) and we'll delete your account and synced data within 30 days.
Data on your phone: delete expenses in the app, or remove the app.
You can export everything as a CSV file at any time from Settings → Sync & your data.

Children

Sayvings is not directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date above and mention the change in the app's release notes.

Contact

Questions or requests about your data: privacy@example.com