Legal

Privacy Policy for Saldo APP

Last Updated: September 12, 2026

1. Introduction

Welcome to Saldo APP ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines how we collect, use, and safeguard your data when you use our personal financial management application (the "Service").

2. Information We Collect

We only collect and store data strictly necessary for application functionality. We do not store your banking credentials or account routing numbers, and we never see or store your Saldo password on our servers. Saldo APP contains no advertising, no tracking and no analytics of any kind.

• Account Information: When you register, we collect your name, email address, and authentication credentials via Firebase Authentication.
• Financial Data: Through our integration with the Plaid API, we access and store account names, real-time balances, and transaction history to provide budgeting and tracking features. Bank descriptions may include the names of other people, for example a transfer you send or receive, because that is how your bank describes the movement.
• Plaid Credentials: We store Plaid Item IDs and encrypted Access Tokens to maintain the connection with your linked financial institutions.
• Face ID (optional): If you turn on Face ID, your email and password are saved in your phone's iOS Keychain so the app can sign you in. That item stays on your device, is scoped to Saldo APP only, and we never receive it. You can remove it at any time from Settings.
• Voice dictation: When you dictate an expense, iOS sends the audio to Apple to transcribe it. Only the resulting text is sent to Google to extract the transaction details. We do not store the audio.
• Receipt photos and PDF statements: When you scan a receipt or import a statement, the image or document is sent to Google's Gemini API to read it. In all of these cases we also send the names of your accounts and cards, so that the correct payment method can be assigned. Scanned receipt images may be retained as proof attached to a transaction; uploaded statement files are not stored after processing.
• Debts and other manual entries: Expenses, income, credit limits, bills, subscriptions, savings goals and debts you enter yourself, including any payment screenshots you attach. These may contain information about other people (for example, the name of someone you owe money to). You are responsible for what you choose to enter.

3. How We Process Your Information

We process your personal information for the following purposes:

• To facilitate account creation, authentication, and secure session management.
• To provide real-time updates on your account balances and transaction history.
• To enable you to manually log expenses, income, and manage financial goals.
• To automatically extract and categorize transactions from voice input, receipt photos, and uploaded bank/credit card statements.

4. When and With Whom We Share Your Personal Information

We do not sell your personal information. We may share your data in the following situations:

• Service Providers: We use Google Cloud Platform and Firebase for secure backend infrastructure, data storage, and authentication.
• Plaid: We use Plaid Inc. ("Plaid") to gather your data from financial institutions. By using Saldo APP you grant us and Plaid the right, power and authority to act on your behalf to access and transmit your personal and financial information from your financial institution. You acknowledge and agree that your information will be treated in accordance with Plaid's End User Privacy Policy, available at plaid.com/legal.
• Apple: Voice dictation is transcribed by Apple's speech recognition service, which receives the audio from your device.
• Google (Gemini API): We send receipt photos, PDF statements, dictated text, and the names of your accounts and cards to Google's Gemini API, solely to extract and categorize transaction data. Because our Gemini usage runs through a Google Cloud project with active billing, Google does not use this content or the responses to train or improve its products, and processes it as a data processor under its Data Processing Addendum. Google does retain prompts and responses for a limited period to detect abuse and to meet legal requirements, and this data may be stored or cached in any country where Google operates.

5. Data Retention and Deletion

Your data retention and disposal are enforced at the infrastructure level:

• Active Accounts: Transaction records and balances are retained as long as your account is active to provide historical insights.
• Disconnecting a bank: The connection is revoked with Plaid first. If that revocation fails, nothing is deleted and the app tells you, so you can try again.
• Deleting your account: The deletion always proceeds: your records are removed from our databases, your uploaded images from storage, and your login from Firebase Authentication. If a bank could not be disconnected automatically, the app shows you which one, and you can remove the access from your bank's website.
• No backups: We do not keep backups or point-in-time recovery of user data, so there are no surviving copies after deletion.
• One exception: If a bank disconnection fails on Plaid's side, we keep a technical record of the failure (the Plaid item identifier and the error code) so that the connection can be revoked manually. These records contain no name, email or transaction data.

6. Security Measures

We implement industry-standard security measures to protect your data:

• All sensitive tokens and data are securely handled server-side using Google Cloud Functions and encrypted at rest in Google Firebase Firestore.
• We enforce strict Role-Based Access Controls (RBAC) via Firebase Security Rules.
• All network communication is secured using TLS 1.3/HTTPS.
• Developer access: Saldo APP is built by an individual developer, who can access stored data through the Firebase console when needed for support or debugging.

7. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: