Privacy Policy
Saldin is an app for organizing personal and small-business finances. This policy explains which data Saldin handles, why, who it is shared with, and how you exercise your rights under Brazil's General Data Protection Law (Lei nº 13.709/2018, LGPD). The Portuguese version prevails.
Who is responsible
The data controller is PEDRO HENRIQUE CAMPOS DIAS PHCD, CNPJ 42.201.188/0001-86, based in Brasília (DF), Brazil. For anything about privacy and personal data, write to contato@saldin.app.br.
Data we handle
- Account: name, email, your password stored only as a hash, the public part of your passkeys, the identifier and email of the Apple or Google accounts you sign in with, and your open sessions with the IP address and app or browser of each.
- Financial data: everything you record or import in Saldin, in the app or through API keys and connected apps you authorize: personas, accounts, cards, bills, transactions, recurrences, categories, tags, budgets, goals and attachments (photos and PDFs).
- Imports: the name and the parsed content of the statements and spreadsheets you import, to review and record the transactions.
- Change history: a record of every creation, change and deletion in your data, with the values before and after, so corrections can be checked.
- Technical data: the IP address of requests, used to limit sign-in attempts and protect the service, and technical operation logs.
Saldin does not collect your location or contacts, shows no ads, uses no third-party analytics or tracking, and does not sell data.
What we use it for
- Providing the service: storing and syncing your data between the app and the server, calculating balances, bills, budgets and reports, and producing the exports you request.
- Authenticating you and protecting your account, including against unauthorized access attempts.
- Sending account emails: email confirmation, password reset and account deletion notices.
- Meeting legal obligations.
The legal bases are performance of the contract with you (art. 7, V), legitimate interest in the security of the service and fraud prevention (art. 7, IX), and compliance with legal obligations (art. 7, II).
Where data is stored
Data is stored on servers operated by the controller in Brazil. A copy of your data stays on your iPhone so the app works offline, protected by iOS data protection and, if you turn it on, by the app lock with Face ID or passcode.
Who we share it with
- Cloudflare: network and protection for the service. Traffic between the app and the server passes through Cloudflare.
- Resend (on Amazon Web Services infrastructure): delivery of account emails. It receives your email address and the message content.
- Apple and Google: when you choose to sign in with your Apple or Google account. When you delete your account, we ask Apple to revoke Saldin's authorization.
- Integrations you authorize: API keys and connected apps, such as AI assistants, access only the personas and permissions you choose, until you revoke them in the app's settings.
- Authorities: when required by law or court order.
Cloudflare and Resend may process data outside Brazil, under these providers' data processing agreements and article 33 of the LGPD.
How long we keep it
We keep your data while your account exists. You can delete your account in the app at any time: you have 14 days to change your mind, after which your data and attachments are permanently erased. Database backups are taken on every server update and the 20 most recent are kept; deleted data disappears from them as those backups are replaced. The content of sent emails is erased from the server as soon as it is handed to the email provider.
Your rights
At any time you can:
- confirm whether we handle your data and access it;
- correct incomplete, inaccurate or outdated data, which you can also do directly in the app;
- take your data to another service: the app exports transactions as CSV, Excel, OFX and PDF;
- ask for your data to be erased, which you can also do in the app under Delete account;
- learn who we share your data with;
- revoke access for integrations you authorized;
- file a complaint with Brazil's data protection authority (ANPD).
To exercise any right, write to contato@saldin.app.br from your account's email address.
Security
Connections use HTTPS, passwords are stored only as hashes, sign-in can use passkeys, and the database isolates each account's data. No system is completely immune to failures; if an incident may put you at risk, we will notify you and the ANPD as the law requires.
Minors
Saldin is not intended for anyone under 18.
Changes to this policy
When this policy changes, we will update this page and the date at the top. Relevant changes will be announced in the app or by email.