Privacy Policy

Last updated: October 19, 2026

SaveGuard ("SaveGuard," "we," "us," or "our") is operated by RevenArc LLC, a California limited liability company. This Privacy Policy explains what we collect when you use the SaveGuard app and website, why, who receives it, how long we keep it, and how you remove it.

1. Information We Collect

Account information

• Email address (required). It is your sign-in, and we use it for verification codes and password resets.
• Password. Handled by Amazon Cognito. We never see or store it in plain text.
• Name (optional).
• An account identifier. A random ID that Cognito assigns to your account. We use it to keep your data separate from everyone else's, and it is the identifier we give to Plaid and RevenueCat so they can serve you.
• The date and version of the Terms and Privacy Policy you agreed to when you created your account, so we can show what you agreed to.

Financial information you choose to give us

SaveGuard works from one of two sources. Neither is required to create an account.

• A bank connection through Plaid Inc. We receive your transactions (amounts, dates, descriptions, merchant names and categories), the institution name and, for premium members, the balances of your checking and savings accounts with each account's name and last digits. We receive these balances with each sync and keep the latest figure for 14 days. Your bank login is typed into Plaid's own screen. It never passes through SaveGuard. Our access is read-only: we request your transactions and read your balances, we never request account or routing numbers, and we cannot move money or change anything at your bank.
• A statement file you upload (CSV, OFX, QFX or QIF). The file is read on your phone and sent to us over an encrypted connection. Our server reads it in memory, keeps the transactions it contains (dates, descriptions, amounts) and the file's name, and does not store the file itself. The app deletes its temporary copy of the file on your phone as soon as it has been read.

What SaveGuard works out from that

Detected subscriptions, price changes, fees, trials, renewals, alerts, the findings and drafts you ask for, your confirmed-savings ledger, and monthly reports. For premium members with a bank connection, SaveGuard also works out a two-week balance forecast: whether your checking balance could drop below a small safety amount, on which day, and which bill or payment would cause it. We keep the projected balance for each of the next 15 days and, once each day has passed, the actual balance for that day, for up to 90 days, so we can measure how accurate the forecast was. These are derived from your transactions and are treated as your data.

What you enter yourself

Debts, goals and trials you add by name, an optional profile photo, notification choices, and a household invite code if you invite a partner. If you tell SaveGuard the new monthly price you got after calling a provider, we keep that figure with the finding it belongs to for up to 400 days. A lower price counts toward your total only when it shows up on your statement.

What you do in the app

Whether you opened an alert, which finding you acted on (opened a cancel link, copied a draft or script) and how you answered the follow-up question, plus counts of how often you use certain AI features each month to enforce fair-use limits.

Push notifications

If you allow notifications, we store a push token for your phone so we can send alerts. A notification can include a merchant name and a dollar amount (for example, "Netflix charged you after you canceled: $15.49 on Aug 3"). Notifications are optional and the app works without them.

Subscription and purchase information

If you subscribe, Google Play handles your payment and we do not receive your card. RevenueCat tells us your plan, period and status so the app can unlock premium features.

Crash and diagnostic information

The app sends crash reports and basic diagnostics to Sentry: device model, Android version, app version, memory state and the technical trace of what failed. We configure the app so reports do not include your account identifier, email, request details or extra context. A report can include the text of an error message. This reporting is part of the app and cannot be turned off.

Website

If you request early access on our website before creating an account, we collect only the email address you provide, to contact you about access. We delete it if you ask, by emailing privacy@usesaveguard.com.

What we do not collect: your location, contacts, calendar, messages, call or SMS history, microphone or camera data, health data, or your advertising ID. We store your phone's time zone (for example "America/Los_Angeles") so quiet hours work; that is not a location.

2. How We Use Your Information

We use your information to:

• Detect recurring subscriptions and charges, and show what is safe to spend
• Find unused, duplicate, overpriced or unexpected charges and fees
• Alert you before money leaves your account, and write the drafts and scripts you ask for
• Produce your monthly report and confirmed-savings ledger
• Run your account, subscription and household features
• Keep the service secure and fix crashes
• Communicate with you about your account

We do not:

• Sell your personal or financial data, or share it for advertising
• Use it for credit, lending or insurance decisions
• Give it to anyone other than the service providers in Section 3, and the household partner you choose

3. Who Receives Your Information

These companies process data on our behalf to run SaveGuard. Each gets only what it needs for its job.

• Plaid Inc. connects to your bank. Plaid collects your bank login and device information inside its own screen under its own privacy policy. We give Plaid your account identifier and receive your transactions.
• Amazon Web Services (AWS) hosts SaveGuard in the United States (Oregon region): sign-in (Cognito), data storage (DynamoDB, S3), computing, email delivery and encryption keys.
• Amazon Bedrock (Anthropic's Claude models), an AWS service, writes insights, roasts and drafts. For one insight it receives the merchant names, categories, amounts and dates relevant to it; for premium findings it can receive up to your 60 most recent transactions (description, amount, date). It never receives your name, email, account identifier, account numbers, tokens or file names. Bedrock does not use this content to train models.
• RevenueCat manages your SaveGuard subscription. It receives your account identifier and purchase information, plus standard app and device details (app version, OS, locale, IP address). It does not receive your financial data.
• Sentry receives crash and diagnostic reports as described above. Sentry keeps them for 30 days.
• Expo and Google Firebase Cloud Messaging deliver push notifications. They receive your push token and the notification text (which may include a merchant name and amount).
• Google Play processes your subscription payment.
• A household partner, only if you invite one. A household lets two people see overlapping subscriptions and, if you turn it on, Safe-to-Spend. The sharing switches are on your Household screen. The subscriptions switch starts on when you invite someone, and the Safe-to-Spend switch starts off. You can change either or leave the household at any time.

We may also disclose information if the law requires it, or to protect the rights, property or safety of users or the public.

4. Security

• In transit: all traffic between the app and our servers, and to every provider above, uses TLS (HTTPS).
• At rest: stored data is encrypted with AES-256 using AWS's built-in encryption. Your Plaid access token is separately encrypted with its own key before it is stored, and is never sent back to the app.
• Authentication: accounts are protected by Amazon Cognito with email verification.
• Access: access to production systems and data is limited to the people and services that need it. API keys and service credentials are kept in AWS Secrets Manager.

No system is perfectly secure. If a breach affects your information we will tell you as the law requires.

5. Retention and Deletion

We keep your data while your account is active. You control deletion:

• Delete account (in the app: your profile, then Delete account). This removes your profile, transactions and imported files, detected subscriptions, findings, alerts, balances and balance forecasts, reports, confirmed-savings ledger, goals, debts and trials, saved images and profile photo, push registration and bank connection records. We tell Plaid to remove your bank connections (and keep retrying if Plaid is unavailable), delete your subscriber record at RevenueCat, and delete your sign-in. Deleting your account does not cancel a SaveGuard subscription you bought in Google Play. Cancel it in Google Play first.
• Delete all files & data (profile, then Data). This removes everything above except your sign-in, name, email, notification choices, SaveGuard subscription and household link, and disconnects your banks. The app lists exactly what goes and what stays before you confirm.
• By email if you cannot sign in: write to privacy@usesaveguard.com from the address on your account.

What remains for a short time after deletion:

• A clean-up marker with an opaque identifier and no personal data stays for up to about two hours (at most three days if a clean-up run is delayed) so we can remove anything written by a session that was still open when you deleted.
• Backups: our database keeps point-in-time recovery backups for up to 35 days. They are used for disaster recovery and never to restore a deleted person.
• Operational logs are kept for 30 days. They can contain your account identifier and some merchant names, and cannot be edited per person.
• Crash reports at Sentry are kept for 30 days.
• Providers' own records. Plaid, RevenueCat, Expo, Google and AWS keep what their own policies say. Google Play keeps your subscription until you cancel it there.

The statement file you upload is not stored by us. On your phone, signing out or deleting your account also removes the app's local copies (cached data, bank name, imported file name, push registration and RevenueCat identity).

6. Your Rights

Depending on where you live, including under the California Consumer Privacy Act, you may have the right to know what we hold about you, to correct it, to delete it, and to limit certain processing. We do not sell personal information or share it for cross-context behavioral advertising.

You can correct your name in the app and delete your data as described above. To ask for a copy of your personal information, or to exercise any other right, email privacy@usesaveguard.com from the address on your account; we respond within 45 days. SaveGuard does not currently have a self-serve data export, so a copy is prepared by us on request. We will not treat you differently for exercising a right.

7. Consent

When you create an account, the sign-up screen links to this policy and the Terms of Service. We record the date and the version you agreed to. By connecting a bank or uploading a file you agree to the collection, processing and storage described here. You can withdraw consent at any time by deleting your data or deleting your account; deleting removes the record with the rest of your profile.

Unconfirmed sign-ups (an email and password where the emailed code was never entered) are removed automatically after 7 days.

8. Children's Privacy

SaveGuard is not intended for anyone under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy. We will tell you about material changes by email or in the app, and show the date above.

10. Contact Us

• Email: privacy@usesaveguard.com
• Company: RevenArc LLC
• Location: San Diego, California