Privacy Policy

Overview

Savvy Financial Technologies, Inc. ("Savvy," "we," "us," or "our") operates the Savvy app and website at savvyfinance.io. We built Savvy to help you find money you've already earned — expiring credits, forgotten gift cards, pending refunds, and unwanted subscriptions.

This Privacy Policy explains what personal information we collect, how we use it, and your choices. By using Savvy, you agree to the practices described here.

Information We Collect

We collect information you provide directly, information from your connected financial accounts, and standard technical data from your use of the app.

We do not collect Social Security numbers, government-issued ID numbers, or full payment card numbers.

How We Use Your Information

We use your information only to operate and improve Savvy. Specifically:

• Provide the service — Detect expiring credits, track refunds, identify forgotten charges and gift cards, and surface alerts.
• Personalize your experience — Show your net worth, suggest which card to use, and tailor recommendations to your accounts.
• Send notifications — Alert you to time-sensitive items like expiring credits or overdue refunds. You can adjust these in Settings.
• Improve Savvy — Analyze usage patterns in aggregate (never linked to individual identities) to improve features.
• Communicate with you — Respond to support requests and send product updates. You can unsubscribe from marketing at any time.
• Prevent fraud and abuse — Detect unauthorized access and comply with legal obligations.

We do not use your financial data for advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.

Plaid & Financial Data

To connect your bank accounts, Savvy uses Plaid Technologies, Inc. Plaid is a trusted financial data network used by Venmo, Robinhood, Coinbase, and thousands of other apps.

When you connect a financial account through Plaid:

• You authenticate directly with your bank — Savvy never sees your banking username or password.
• Plaid transmits your financial data to us using bank-level encryption.
• Your data is governed by both this Privacy Policy and Plaid's End User Privacy Policy.
• You can revoke Plaid access at any time — in Savvy under Settings → Connected Accounts, or directly at my.plaid.com.

Financial data retrieved via Plaid is encrypted at rest (AES-256) and in transit (TLS 1.2+) at all times.

Sharing Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers — Trusted vendors who help us operate Savvy (e.g., cloud hosting, email delivery, analytics). These providers are contractually required to protect your data and may not use it for their own purposes.
• Plaid — To facilitate bank account connectivity as described above.
• Household members (if you choose) — If you invite a household member, they can see shared accounts and joint balances. Private accounts remain hidden. You control what is shared.
• Legal requirements — If required by law, court order, or to protect the rights and safety of Savvy or others, we may disclose information as legally required.
• Business transfers — In the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. Specifically:

• Account data is retained for the duration of your account and deleted within 30 days of account closure.
• Financial transaction data from Plaid is retained for up to 7 years following account closure to comply with applicable financial regulations.
• Usage and analytics data is retained for up to 24 months in identifiable form, after which it is anonymized or deleted.

You may request deletion of your account and associated data at any time by emailing privacy@savvyfinance.io. We will process deletion requests within 30 days, subject to any legal retention requirements.

Security

We take security seriously. Measures we have in place include:

• All data encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Multi-factor authentication required to access your account
• Role-based access controls — only authorized employees can access production systems
• Regular vulnerability scans across all infrastructure
• Bank-level connectivity via Plaid (your banking credentials are never stored by Savvy)

Your Rights

Depending on where you live, you may have the following rights regarding your personal information. To exercise any of these rights, email us at privacy@savvyfinance.io.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To submit a verifiable consumer request, email privacy@savvyfinance.io.

Children's Privacy

Savvy is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@savvyfinance.io and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the address associated with your account) and update the "Last updated" date at the top of this page at least 30 days before the changes take effect.

Your continued use of Savvy after any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may close your account.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: privacy@savvyfinance.io
• Security issues: security@savvyfinance.io
• Mailing address: Savvy Financial Technologies, Inc., [Your Address]

We will respond to all privacy-related requests within 5 business days.