Security & Trust Center
Your money data belongs to you. Here is exactly how we secure, process, and respect your privacy at every level.
1. Real-Time Bank-Free Ingestion
Savingy does not link to internet banking or ask for banking passwords or PINs. Financial tracking uses records you enter and supported statement imports.
2. Data Classifications & Purposes
We collect and store only the minimal data required to gamify and analyze your budgets:
- Budget Configurations: Categories, limits, and planned amounts to calculate pacing.
- Expense/Income Records: Amounts, categories, dates, and optional tags to identify spending shifts.
- Gamification Stats: Level progress, weekly resets, and streak milestones to award virtual rewards.
3. Infrastructure & Encryption Standards
The application uses the following controls that are directly evidenced in the codebase:
- In transit: Production web traffic is redirected to HTTPS and HSTS is enabled.
- Access control: User-data routes authenticate requests and enforce ownership or role checks.
- Authentication: JSON Web Tokens (JWT) are signed and stored strictly within ephemeral
sessionStorageclient-side.
4. AI Data Handling
AI-assisted features send the financial context required for the requested analysis through authenticated server routes. Do not enter passwords, PINs, card numbers, or other secrets in free-text fields.
5. Authorized Subprocessors
6. Vulnerability Reporting & Grievance Redressal
We welcome responsible disclosure of security issues. If you identify a potential vulnerability or have questions about your data rights under the DPDP Act, contact our security desk immediately: