Privacy and your choices
Pre-launch product. Operating and deployment details must be confirmed before a public pilot.
Operator: Operating entity pending confirmation
What is collected
Account email, securely hashed password, optional profile/budget details, manual account names and opening balances, income/expense/refund/transfer records, recurring bills, category budgets, savings goals and allocations, your entered obligations and payment records, and complaint statements are stored to provide the service. Signup does not require CNIC. Supported reports yield minimal normalised facts; original PDFs, raw extracted report text and unrelated identifiers are not persisted.
Purposes and external services
Report processing needs separate, versioned consent for your own report. From your report or your own records Savvy calculates an educational credit-health estimate, factor breakdown and what-if simulations; these are not a bureau score, lending decision or advice. Report AI and foreign document OCR are disabled. No marketing pixels, session replay or third-party chat are loaded. Optional anonymous comparisons use your factors only if you opt in, store only group counts, and never show groups under 50 people. Transactional email must be configured and its provider disclosed before a public pilot. Financial information is excluded from reminder emails and analytics events.
Retention, withdrawal and deletion
Normalised report facts expire after 90 days; maintenance removes expired records. You can delete a report or withdraw report consent to delete active report data. Account deletion removes active account records, sessions, manual finance accounts and transactions, bills, budgets, savings goals and allocations, payments, complaints and consent records. Backup expiry, countries, processor contracts and any applicable obligations must be documented for the actual deployment; active deletion is not a claim of instant erasure from backups.
Privacy requests and restored backups
An independently encrypted privacy journal keeps minimal account/report identifiers, requested action and date so a restored database cannot revive data you asked us to erase. It contains no report text, balances or complaint statements. These protected erasure records are retained to cover recoverable backups; the actual backup and journal retention periods must be published for the deployment.
Your control and access
Export your data, change reminders, withdraw report consent, revoke other sessions or delete your account in settings. Support access is limited and attributable through audit records. No employer, lender or UAE parent is granted automatic access to your credit data. The current applicable privacy and sector requirements must be verified for the operating role.
Support contact will be published before the pilot opens. Do not send credit reports through email or chat.