Privacy Policy

Welcome to SavrPay. We are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance management application and services across all platforms.

1. Information We Collect

1.1 Account & Authentication Information

When you create an account or use our services, we may collect the minimum information needed to provide the app:

• Account Identifiers: Firebase UID (anonymous identifier) and, where provided by your chosen sign-in method, display name and email address for account recovery and multi-device sync.
• Authentication Data: Information provided through Email/Password, Google Sign-In, or Apple Sign-In solely to authenticate you.
• Profile Data: User-created profiles for managing multiple financial scenarios

1.2 Financial Information (User-Provided)

To provide our core services, we collect and store:

• Transaction Data: Income, expenses, categories, amounts, dates, and notes
• Asset Information: Property values, vehicle details, investments, and other assets
• Debt Information: Loan balances, interest rates, and payment schedules
• Budget Data: Budget categories, spending limits, and tracking information
• Investment Data: Investment positions, transactions, and portfolio information
• Financial Goals: Savings targets, retirement planning, and goal tracking
• Currency Preferences: Your preferred currency for financial calculations

Data Minimization: We do not collect government IDs, bank credentials, or contacts. We collect only what is necessary to provide the app’s features.

1.3 Technical Information

We automatically collect certain technical information:

• Device Information: Device type, operating system, and app version
• Usage Analytics: App usage patterns, feature interactions, and performance data (aggregated and de-identified where possible)
• Log Data: Error logs, crash reports, and diagnostic information
• Network Information: IP address, connection type, and network performance

1.4 Third-Party Services

We integrate with third-party services that may collect additional information under their own policies:

• Google Services: Google Sign-In, Google Drive (backup), Firebase Auth/Firestore/Storage.
• Payments: Google Play Billing and Apple In‑App Purchases for Premium access. We do not receive your full payment card details. Platform providers process payments and may share limited transaction metadata with us (e.g., product ID, purchase status) to grant Premium features.
• Advertising: Google Mobile Ads (AdMob) for Freemium users; includes device/advertising identifiers as per platform policies.
• Currency Rates: Frankfurter API for exchange rates; no personal data is sent. We cache results locally for up to 1 hour.

2. How We Use Your Information

2.1 Core Service Provision

• Process and store your financial transactions and data
• Generate financial reports, charts, and insights
• Provide budget tracking and goal management features
• Enable multi-profile support for different financial scenarios
• Support data export and backup functionality

2.2 Service Improvement

• Analyze usage patterns to improve app functionality
• Identify and fix technical issues and bugs
• Develop new features based on user needs
• Optimize app performance and user experience

2.3 Communication

• Send important service updates and notifications
• Provide customer support and respond to inquiries
• Send security alerts and account notifications
• Communicate about new features and updates (with consent)

2.4 Security and Compliance

• Verify user identity and prevent fraud
• Comply with legal obligations and regulations
• Protect against security threats and unauthorized access
• Maintain data integrity and backup systems

3. Where Your Data Is Stored

3.1 Local Storage (SQLite)

Your financial data is stored locally on your device using SQLite with encryption for fast, reliable access. To provide multi‑device access and secure backup, your data is also synchronized to our cloud services.

3.2 Cloud Backup/Sync (Core Feature)

Cloud synchronization and backup are core features of SavrPay. Your data is stored and synchronized using:

• Firebase Firestore: For user-specific data synchronization (identified by your Firebase UID)
• Google Drive: For backup and data export functionality
• Firebase Storage: For secure file storage and sharing

3.3 Security Measures

• Encryption for sensitive financial data at rest and in transit where supported
• Secure authentication using industry-standard protocols
• Regular security audits and vulnerability assessments
• Access controls and user permission management
• Data backup and disaster recovery procedures

3.4 Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time; app-level deletion is immediate locally and cloud data is removed within 30 days.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

SavrPay does not sell, rent, or trade your personal or financial information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our app (e.g., Google services, platform payment processors). Contracts require appropriate confidentiality and security.
• Legal Requirements: When required by law, court order, or government request
• Security: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)

4.3 Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• Google Services: Google Privacy Policy
• Apple App Store: Apple Privacy Policy
• Google Play Store: Google Privacy Policy
• Frankfurter API: Frankfurter Service

5. Legal Bases and Regional Disclosures

5.1 Australia (Privacy Act 1988 and 2024 Amendments)

• APPs: We adhere to the Australian Privacy Principles including notice, consent where required, data minimization, access/correction, and security.
• Breach Notification: We will notify affected users and the OAIC of eligible data breaches as required by the Notifiable Data Breaches (NDB) scheme.
• Cross‑Border: Where data is processed overseas (e.g., Firebase hosting regions), we take reasonable steps to ensure comparable protections.

5.2 European Union (GDPR)

• Controller: SavrPay (individual developer, Australia).
• Legal Bases: Contract performance (provide the app), legitimate interests (security, improvement), consent (optional analytics/marketing, where applicable).
• Rights: Access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent without affecting prior processing.
• Transfers: We use providers that implement appropriate safeguards (e.g., Standard Contractual Clauses) for transfers outside the EEA.

5.3 California (CCPA/CPRA)

• Rights: Know, access, delete, correct, and portability; opt‑out of sale/share of personal information; and non‑discrimination for exercising rights.
• Sale/Share: We do not sell personal information. AdMob may be considered “sharing” under CPRA for cross‑context behavioral advertising; you can opt out via device settings or platform privacy controls.

5.4 Canada (PIPEDA)

• We follow the principles of accountability, identifying purposes, consent, limiting collection/use/retention, accuracy, safeguards, openness, individual access, and challenging compliance.

5.5 Brazil (LGPD)

• We process data under legal bases such as contract execution, legitimate interest, consent, and legal obligation; Brazilian users have rights to confirmation, access, correction, anonymization, portability, and deletion.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access, view, and download your financial data
• Correct or update inaccurate information
• Delete your account and associated data
• Export your data in various formats (CSV, PDF)
• Control which features and permissions you grant

6.2 Data Portability

You can export your data in commonly used formats such as CSV and PDF from within the app.

6.3 Opt-Out Options

• Disable analytics and usage tracking
• Opt out of marketing communications
• Adjust Ad preferences via device settings (Limit Ad Tracking/Ad Personalization)

7. International Data Transfers

SavrPay operates globally and may transfer your information to countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

7.1 GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to data portability
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent

7.2 CCPA/CPRA (California Users)

California residents have rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price

7.3 Other Regions

We endeavor to comply with applicable local privacy laws in other regions where we operate, including PIPEDA (Canada) and LGPD (Brazil). Regional rights can be exercised by contacting us.

8. Children's Privacy

SavrPay is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending notifications through the app
• Updating the "Last Updated" date

Your continued use of SavrPay after any changes indicates your acceptance of the updated Privacy Policy.

10. Contact Information

11. Legal Basis for Processing (EU Users)

For users in the European Union, we process your personal data based on the following legal grounds:

• Contract Performance: To provide our services as outlined in our Terms of Service
• Legitimate Interest: To improve our services, ensure security, and prevent fraud
• Consent: For optional features and marketing communications
• Legal Obligation: To comply with applicable laws and regulations

12. Data Protection Officer

If you have questions about our data processing activities or wish to exercise your rights, you may contact our data protection officer at the email address provided above.

13. Additional Notices

• Not Financial Advice: SavrPay provides tools and information for educational purposes only and does not provide financial, investment, tax, or legal advice.
• Terms of Service: Use of SavrPay is governed by our Terms of Service.
• Business Details: Developer based in Australia. ABN: 39 254 859 453.