Privacy Policy

1. Scope

This Privacy Policy applies to Savlivo's mobile applications, website, APIs and related services (collectively, the "Services").

By using the Services, you acknowledge that information will be processed as described in this Privacy Policy.

2. Information we process

Account information

When you create a Savlivo account, we process information such as your email address, account identifier, country, currency, timezone and account creation information. Passwords are processed using a password hash; Savlivo does not store your password as readable plaintext.

Subscription information

Savlivo processes information you provide or manage about your subscriptions, including the subscription service, plan, billing provider, status, price, currency, renewal date and related subscription-management information.

Savings and action information

We may process information about estimated or verified savings, subscription actions, action status, provider routes, scheduled actions and related records needed to provide Savlivo's subscription management and savings features.

Preferences

Savlivo may process settings and preferences such as language, country, currency, timezone, theme, notification preferences and other app settings.

Information stored on your device

The Savlivo mobile app stores certain information locally on your device, which may include app preferences and, when persistent sign-in is enabled, an authentication token used to authenticate requests to Savlivo.

3. Savlivo AI

When you use Savlivo AI, the information required to generate a response is transmitted to Savlivo's AI service provider, Groq.

This may include:

• the message you send to Savlivo AI;
• up to 10 recent user and assistant conversation messages;
• a language hint;
• your Savlivo plan, country and currency;
• spending and savings totals; and
• relevant subscription information such as service name, status, price, currency, renewal date, plan and billing provider.

Savlivo uses this information to generate the requested AI response and provide context relevant to your account.

Savlivo's current application logic does not write AI chat prompts or generated responses to Savlivo's account database as a separate chat-history record. Information may nevertheless be processed in transit and by the AI service provider as necessary to provide the feature.

Groq states that inference inputs and outputs are not retained by default, but that they may be temporarily logged in limited circumstances for service reliability or abuse monitoring. Groq currently states that such temporary logs may be retained for up to 30 days unless applicable data controls, such as Zero Data Retention, are enabled. Groq also states that customer inputs and outputs are not used to train or fine-tune models unless the customer explicitly permits or instructs that use.

4. Voice input and transcription

If you choose to use voice input, Savlivo receives the audio you submit and sends it to Groq for transcription.

During processing, the Savlivo API temporarily writes the uploaded audio to a temporary server file. After transcription processing, the service attempts to delete that temporary file.

The resulting transcription may then be used as input to Savlivo AI in the same way as a typed message.

5. Face ID, Touch ID and biometric unlock

If you enable biometric unlock, biometric authentication is handled by your device and operating system through the device's authentication capabilities.

Savlivo receives the result of the local authentication request but does not receive or store your underlying fingerprint or facial biometric template.

Savlivo stores a local setting indicating whether biometric unlock is enabled. Enabling biometric unlock may also cause the app's authentication token to remain stored locally so that your Savlivo session can be unlocked after successful device authentication.

6. Notifications

If you grant notification permission, the Savlivo app may obtain an Expo push token and provide that token, together with the device platform, to the Savlivo API.

Savlivo stores notification preferences and notification delivery information needed to send requested reminders.

For push notifications, Savlivo uses the Expo Push Service. Information sent for delivery can include the Expo push token, notification title and body, a Savlivo subscription identifier and navigation information needed to open the relevant subscription in the app.

Expo states that it stores push tokens required to provide its push service and that notification contents are not stored longer than needed to deliver them to the push services operated by Apple or Google.

If email reminders or other transactional emails are enabled or requested, Savlivo may use Resend to deliver them. Information provided for email delivery may include your account email address, the email subject and content, and links or other information needed for the requested communication.

Apple, Google and other platform providers may also process notification information under their own terms and privacy policies.

7. How we use information

We use information as reasonably necessary to:

• create, authenticate and maintain Savlivo accounts;
• provide subscription tracking and management features;
• calculate and display spending and savings information;
• provide Savlivo AI and voice transcription;
• send requested reminders and notifications;
• maintain user preferences and entitlements;
• protect the security, integrity and reliability of the Services;
• diagnose and resolve technical problems;
• enforce applicable terms and prevent misuse; and
• comply with applicable legal obligations.

8. Advertising, analytics and tracking

Savlivo does not currently include third-party advertising, advertising-attribution or behavioral-analytics SDKs in the Savlivo mobile application.

Savlivo does not use subscription information for third-party targeted advertising.

Technical service providers may process limited operational information that is necessary to provide their services, subject to their own terms and applicable agreements.

9. Service providers and disclosure of information

Savlivo uses service providers to operate specific parts of the Services. Depending on the feature you use, these providers can include:

• Groq, for Savlivo AI inference and voice transcription;
• Render, for production backend infrastructure;
• Expo, for push-notification delivery;
• Apple and Google, for mobile operating-system, app-distribution and notification services; and
• Resend, for transactional email delivery, including password-reset emails and, where enabled, email notifications.

These providers process information only to the extent relevant to the services they provide, subject to their applicable terms, privacy practices and agreements.

We may also disclose information where reasonably necessary to comply with law, legal process, enforce applicable agreements, investigate misuse, protect users or protect the rights, security and integrity of Savlivo and others.

If Savlivo is involved in a merger, acquisition, financing, reorganization or transfer of all or part of its business, information may be transferred as part of that transaction subject to applicable law.

10. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain the account, fulfill the purposes described in this Privacy Policy and meet applicable security, operational and legal requirements.

Different types of information may have different retention periods. Third-party service providers may also retain information according to their own applicable retention policies.

We do not promise that every copy of information disappears immediately when an account or record is deleted. Limited information may remain temporarily in backups, security records, operational records or third-party systems where reasonably necessary or legally required.

11. Account deletion

Savlivo provides an account-deletion process. When an account deletion request is made, permanent deletion is scheduled for 7 days later.

If you sign in again before the scheduled deletion time, the pending deletion request is cancelled and your account remains active.

Once the scheduled deletion time is reached, Savlivo deletes the user account from its primary application database. Core records linked directly to that account are configured to be deleted with the user account, including subscriptions, entitlements, subscription actions, Autopilot rules, savings records and notification records.

Some information may remain for a limited period in backups, security or operational records, or systems operated by service providers, where retention is reasonably necessary or required by law.

12. Third-party subscriptions and Savlivo purchases

Third-party subscriptions

Savlivo is designed to help you understand and manage information about subscriptions you have with third-party providers. Savlivo is not a bank and does not act as the payment processor for those underlying third-party subscriptions.

Savlivo's subscription-management design does not require Savlivo to store the usernames and passwords you use to sign in to third-party subscription services. Provider-management flows may instead open the applicable provider or platform so that authentication can occur through that provider, your browser, existing sessions or operating-system credential tools.

Purchases of Savlivo plans

If you purchase a Savlivo plan through Apple's App Store, the purchase and payment are processed through Apple and StoreKit under Apple's applicable terms and privacy practices. Savlivo does not receive or store your full payment-card details through this purchase flow.

To verify the purchase and provide the corresponding Savlivo entitlement, the app sends purchase-verification information to the Savlivo API. This may include the Savlivo product identifier, an Apple transaction identifier and Apple's signed transaction data. Savlivo uses the signed transaction data to validate the purchase.

After successful verification, Savlivo may retain information needed to maintain the entitlement and prevent a purchase from being improperly claimed by another account. This may include your Savlivo account identifier, platform, Savlivo product identifier, Apple's original transaction identifier, plan or entitlement status and the applicable expiration date. The purchase and entitlement records created by this verification flow do not include Apple's signed transaction data.

13. International processing

Savlivo and its service providers may process information in countries other than the country where you live.

For example, Savlivo's production API is hosted in Europe, while some service providers may process or retain information in the United States or other locations.

Where required by applicable law, Savlivo takes appropriate steps for international transfers of personal information, which may include relying on adequacy decisions, contractual safeguards or other lawful transfer mechanisms, as applicable.

14. Your privacy choices and rights

Depending on where you live, privacy law may give you rights concerning your personal information. These may include rights to request access to or a copy of your information, correction, deletion, restriction of or objection to certain processing, and, where applicable, data portability or withdrawal of consent.

Some information can be reviewed or changed directly through Savlivo. You can also use Savlivo's account-deletion feature to request deletion of your account.

Additional rights may apply under the laws of your country or region. We will assess valid privacy requests in accordance with applicable law and may need to verify your identity before fulfilling a request. Where applicable, you may also have the right to lodge a complaint with the competent data-protection or privacy authority.

15. Security

Savlivo uses technical and organizational measures intended to protect information against unauthorized access, loss, misuse or alteration.

Account passwords are stored as password hashes rather than readable plaintext. Authenticated API requests use bearer authentication tokens, and the production mobile application communicates with the Savlivo API over HTTPS.

No system or method of transmission or storage is completely secure, and Savlivo cannot guarantee absolute security.

16. Children's privacy

Savlivo is not designed to knowingly collect personal information from children in circumstances where parental or guardian consent is required by applicable law.

If we learn that personal information relating to a child has been collected in violation of applicable law, we will take appropriate steps to address it.

17. Changes to this Privacy Policy

We may update this Privacy Policy when the Services, our processing practices or applicable requirements change.

When we make changes, we will update the "Last updated" date on this page and provide additional notice where appropriate.

18. Contact

If you have questions about this Privacy Policy, want to exercise a privacy right, or have questions about Savlivo's handling of personal information, you can contact Savlivo at support@savlivo.com or through the support channel made available in the Savlivo app or on the Savlivo website.

Additional operator and contact information may be provided where required by applicable law.