Privacy Policy

Effective Date: June 1, 2026

1. Who We Are

SaveSense ("we," "our," or "us") is a financial subscription management service operated by 1598609 B.C. Ltd., operating as SaveSense. Our app helps you discover and track your recurring subscription services by analyzing your bank transaction data.

This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the SaveSense mobile application and related services (collectively, the "Service").

2. Information We Collect

2.1 Account Information

When you create a SaveSense account, we collect:

• Email address: used to identify your account and send service communications
• Legal full name: used for account verification and support purposes
• Password: stored as a securely hashed value using PBKDF2-SHA512 with a unique random salt per user. We never store your password in plain text.
• Account creation date and last login timestamp

2.2 Financial Data (via Plaid)

If you choose to connect your bank account, we use Plaid Technologies, Inc. ("Plaid") to access your financial data. Through Plaid we may receive:

• Bank account names, types (checking, savings, credit), and last four digits of account numbers
• Transaction history: merchant name, amount, date, and category for the past 24 months
• Account balance information (current and available)

We access this data in read-only mode. We cannot initiate transactions, move money, or modify your bank accounts. Your banking credentials are entered directly into Plaid's secure interface and are never transmitted to or stored by SaveSense.

2.3 Uploaded Bank Statements (PDF)

As an alternative to Plaid, you may upload PDF bank statements. When you do:

• PDF files are uploaded securely over an encrypted connection
• We extract transaction text for subscription analysis
• Raw PDFs are processed in memory and never stored on our servers; only extracted transaction records are retained
• Extracted transaction records are retained and subject to the same deletion rights as Plaid-sourced data

2.4 Referral Information

• We generate a unique referral code tied to your account
• We record when your referral link is used and which accounts were created through your referral
• We do not access personal information of people you refer until they create their own account

2.5 Usage and Technical Data

• Device type, operating system version, and app version
• App feature usage (aggregate only, not linked to individual users)
• Error logs and crash reports
• IP address and general geographic region (country/province level only)

2.6 Subscription & Purchase Data

If you purchase a paid subscription, the transaction is processed by the Apple App Store (or Google Play) and our subscription-management provider, RevenueCat, Inc. We receive and store:

• Subscription status, product identifiers, and the plan you are subscribed to
• Purchase, renewal, and expiration dates, and anonymized store transaction identifiers
• A pseudonymous app user identifier used to link your subscription to your account

We do not receive or store your full payment card number, CVV, or billing address. Your payment details are handled solely by Apple or Google.

3. How We Use Your Information

• Subscription detection: Analyzing your transaction history to identify recurring charges
• Account management: Creating and maintaining your account, authenticating your identity
• Service communications: Sending account-related notifications. We do not send marketing emails without your consent.
• Referral program: Tracking and crediting referrals when your code is used
• Customer support: Responding to questions and troubleshooting issues
• App improvement: Understanding how users interact with the app to fix bugs and improve features
• Legal compliance: Meeting obligations under applicable laws
• Security: Detecting, investigating, and preventing fraudulent or unauthorized activity

4. How We Share Your Information

We do not sell, rent, or trade your personal information or financial data to any third party. We share your information only in the following limited circumstances:

4.1 Service Providers

• Plaid Technologies, Inc.: bank account connection and transaction data retrieval. plaid.com/legal
• RevenueCat, Inc.: subscription management and in-app purchase validation. revenuecat.com/privacy
• Apple App Store / Google Play: payment processing and billing for in-app subscriptions. Your payment details are handled directly by Apple or Google.
• Cloud infrastructure providers: secure hosting and data storage (servers in Canada and/or the United States)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority, or to protect the rights, property, or safety of SaveSense, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred. We will notify you via email and a prominent in-app notice before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, which you may revoke at any time.

5. Your Bank Connection & Plaid

By connecting your bank account, you also agree to Plaid's End User Privacy Policy available at plaid.com/legal/end-user-privacy-policy. You can disconnect your bank account at any time from Settings, which will revoke our access and delete all synced transaction data.

6. Data Security

• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is encrypted via infrastructure-level encryption; Plaid access tokens are additionally encrypted at the application level with AES-256-GCM
• Passwords are hashed using PBKDF2-SHA512 with a unique random salt per user. We cannot recover your plaintext password.
• Access to user data is restricted to authorized personnel on a need-to-know basis
• Sessions expire automatically after 30 days

If you believe your account has been compromised, contact us immediately at privacy@savesense.app and change your password.

7. Data Retention

• Account information: Retained until you delete your account
• Transaction data from Plaid: Deleted immediately upon disconnect or account deletion
• Uploaded PDF statements: PDFs are processed in memory and never stored; extracted transaction records are deleted immediately upon account deletion or when you remove the statement
• Referral records: Retained for 12 months from the date the referral was made
• Security logs: Retained for up to 90 days

8. Your Rights & Choices

8.1 Access & Portability

You may request a copy of the personal information we hold about you by contacting privacy@savesense.app.

8.2 Correction

You can update your account information at any time from Settings. Contact us to correct any other inaccurate data.

8.3 Deletion (Right to be Forgotten)

You can delete your account and all associated data from Settings → Delete Account. Upon deletion, your account, personal information, and all synced transaction data are permanently and immediately deleted.

8.4 Canadian Users: PIPEDA Rights

• Know what personal information we collect and why
• Access your personal information
• Challenge the accuracy of your personal information
• Withdraw consent (subject to legal restrictions)
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca)

8.5 California Users: CCPA Rights

• Right to know what personal information is collected, used, disclosed, or sold
• Right to delete personal information we hold about you
• Right to opt out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination for exercising your CCPA rights

To exercise CCPA rights, contact privacy@savesense.app with the subject line "CCPA Request."

9. Children's Privacy

SaveSense is not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe your child has provided us with personal information, contact privacy@savesense.app immediately.

10. International Data Transfers

SaveSense is operated from Canada. Your information may be transferred to, stored, and processed in Canada and the United States. By using the Service, you consent to the transfer of your information to these countries.

11. Third-Party Services & Links

• Plaid: plaid.com/legal

12. Changes to This Privacy Policy

When we make material changes, we will update the Effective Date, send you an email notification, and display a prominent in-app notice. Your continued use after the effective date constitutes acceptance of the changes.

13. Contact Us