Privacy Policy
This policy explains how K2026392082 (South Africa) (Pty) Ltd, trading as "SaveSavvy" ("SaveSavvy", "we"), collects, uses, and protects your personal information, in line with the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
K2026392082 (South Africa) (Pty) Ltd, trading as "SaveSavvy", registration no. 2026/392082/07, 17 Arthurs Road, Sea Point, Cape Town, Western Cape, 8005, is the responsible party. Information Officer: Adam Edelberg, privacy@savesavvy.co.za.
2. What we collect
- Account: email address (and a password hashed by our auth provider).
- Financial documents: bank and investment statements you upload or forward by email, and the data extracted from them - transaction dates, descriptions, amounts, account names and types, and balances.
- App data you create: categories, budgets, and edits to transactions.
- Technical: IP address and request logs, kept short-term for security and debugging.
We do not use third-party analytics, advertising, or tracking SDKs.
3. Why we process it, and on what basis
| Purpose | Lawful basis (POPIA) |
|---|---|
| Create and operate your account | Performance of our agreement with you |
| Parse statements and categorise transactions | Performance of our agreement; your consent when you submit a statement |
| Show spending, budgets, and insights | Performance of our agreement |
| Security, fraud prevention, debugging | Our legitimate interests |
We do not sell your personal information.
4. Automated statement parsing (AI processors)
To read your statements we send the document text to a third-party AI service (Anthropic) which extracts the transactions. Anthropic processes the data only to return the result and, per its commercial terms, does not use it to train its models. If you are not comfortable with this, do not submit statements.
This parsing is automated. You can review and correct every extracted transaction in the app.
5. Who we share it with (operators)
We use these operators (processors) under contract:
| Operator | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, hosting | EU |
| Mailgun | Inbound statement-import email | EU |
| Anthropic | Statement parsing (AI) | USA |
6. Cross-border transfers
Your data is stored in the EU and, for statement parsing, processed by Anthropic in the USA. We transfer it under POPIA section 72 on the basis that the recipients are bound by contractual terms providing protection substantially similar to POPIA, and that the transfer is necessary to perform our agreement with you.
7. Security
Sensitive financial fields (such as transaction descriptions) are encrypted at rest. Access is restricted to your authenticated account; no endpoint serves another user's data. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.
8. Retention
We keep your data while your account is active. When you delete your account we delete your personal data from our live systems promptly; residual copies in encrypted backups are purged on the backup rotation cycle.
9. Your rights
Under POPIA you may: access your data; correct or delete it; object to processing; and complain to the Information Regulator. To exercise these, contact privacy@savesavvy.co.za.
Information Regulator (South Africa): inforeg@inforegulator.org.za, inforegulator.org.za
10. Deleting your account
You can delete your account and all associated financial data from within the app at any time. This is immediate and irreversible.
11. Children
SaveSavvy is not intended for anyone under 18. We do not knowingly collect data from children.
12. Changes
We may update this policy. Material changes will be notified in the app or by email. Continued use after the effective date means you accept the update.
13. Contact
K2026392082 (South Africa) (Pty) Ltd, trading as "SaveSavvy", privacy@savesavvy.co.za.