Privacy Policy

SaveMe (operated by Dixit Lukhi, based in Surat, Gujarat, India) is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. What We Collect

When you use SaveMe, we collect:

• Account information: name, email address, and an encrypted password hash (we never see your plain-text password).
• Financial data you enter: transactions, budgets, goals, dues, recurring rules, and notes. This data is stored in our database and tied to your account.
• Device tokens: push notification tokens (if you opt in) so we can deliver reminders.
• Diagnostic data: anonymised crash reports and performance metrics via Sentry. No personally identifiable financial transactions are included.

2. What We Do NOT Collect

• We do not collect your bank account credentials.
• We do not access your SMS, contacts, photos, or call logs.
• We do not sell, rent, or share your data with advertisers.
• We do not use your financial data to train any third-party AI model.

3. How We Use Your Data

Your data is used only to:

• Show you your own transactions, budgets, and insights inside the app.
• Send you in-app notifications you have opted in to (e.g. budget alerts, expiry reminders).
• Generate personalised insights via the AI advisor (your data is sent to our AI provider Anthropic only when you actively send a message; messages are not retained for training).
• Process subscription payments via Razorpay (we never see your card details — payment information is collected directly by Razorpay).

4. Data Storage & Security

• Data is stored in MongoDB Atlas, encrypted at rest and in transit (TLS 1.2+).
• Passwords are hashed with bcrypt before storage.
• Authentication tokens are stored locally on your device using iOS Keychain / Android Keystore (never plain-text).
• The app supports biometric lock for an additional layer of protection.

5. Third-Party Services

SaveMe uses a small number of third-party services strictly necessary for the app to function:

• Razorpay — payment processing (subscription purchases). Their privacy policy applies to payment data.
• Anthropic — powers the AI advisor feature. Messages are processed in real-time and not retained for training.
• Sentry — anonymised crash reporting to help us fix bugs. All text and images are masked by default.
• Expo / Google FCM / Apple APNs — push notification delivery.

6. Your Rights

You have the right to:

• Access — view all your data anytime through the in-app History, Insights, and Profile screens.
• Export — download your transactions as PDF or CSV from the Insights screen.
• Delete — permanently delete your account and all associated data from Settings → Danger Zone → Delete Account. This action is irreversible.
• Correct — edit any transaction, budget, or profile detail at any time.

7. Account Deletion

When you delete your account, we permanently remove your transactions, dues, goals, recurring rules, subscription records, AI chat history, financial profile, month configs, splits, feedback, and the user record itself.

We retain an anonymised audit record (SHA-256 hash of your email, deletion timestamp, and aggregate counts) for compliance and dispute-resolution purposes only. This audit record does not contain any personally identifiable information.

8. Children's Privacy

SaveMe is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has created an account, please contact us at privacy@savemeapp.online and we will delete the account immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification or email. The "Last updated" date at the top of this policy reflects the most recent revision.

10. Contact

For privacy questions, data access requests, or deletion requests, contact us at privacy@savemeapp.online. We aim to respond within 72 hours.