Privacy Policy — Save Vibe

Our position in plain language

Your spending data is among the most personal data that exists. It reveals where you live, what you eat, how you travel, what you buy for your children. We take that seriously.

Save Vibe is built on a simple principle: you control what enters the system. Nothing is automatic. Nothing is taken without your action. Every receipt you scan is a deliberate choice you make.

What we say honestly

Your data is encrypted at rest and in transit. That protects it from external breach. It does not mean we are technically incapable of reading it — we are not going to claim something that isn't true. What we commit to is intent, accountability, and legal compliance. We do not access your data except to operate the product. We never will.

Who we are

Save Vibe is operated by [Save Vibe / entity name to be confirmed on incorporation]. The product is currently in beta under the Fils brand, accessible via @FilsUAEBot on Telegram and at fils.me.

For privacy enquiries: privacy@savevibe.ae

What data we collect

We collect only what is necessary to operate the product. There are three categories:

Identity. Your Telegram user ID. This is how we identify your account. We do not collect your name, email, phone number, or any other personal identifier unless you provide it voluntarily.
Receipts you send. When you forward a receipt to the bot, we extract the store name, platform, transaction amount, date, category, and individual items. The raw image or PDF is discarded after extraction — we do not store it.
Budget and balance information. Monthly budget limits and balance figures you enter manually via bot commands. You choose what to provide.

We do not collect location data, contact lists, device identifiers, or any data from your phone beyond what you explicitly send to the bot.

How we use your data

To extract spending information from receipts you send
To calculate your budget position, burn rate, and financial runway
To show your spending history and patterns in the dashboard
To send you daily summaries if you have opted in (Gold and Platinum tiers)
To generate spending insights and pattern observations

We do not use your data for advertising, profiling, or any purpose beyond operating the product. We do not sell your data. We do not share it with third parties except as described in the section below.

Third parties

We use a small number of third-party services to operate the product:

Telegram. The bot runs on Telegram's platform. Messages you send to the bot are processed by Telegram before they reach us. Telegram's own privacy policy applies to that processing.
Anthropic Claude API. Receipt images are sent to the Claude API for extraction. We send only the receipt content — not your Telegram ID or any other personal identifier. Anthropic processes this data under their API terms.
AWS. Our database and server infrastructure runs on Amazon Web Services (eu-central-1, Frankfurt). Data is encrypted at rest and in transit. AWS does not access your data.
Netlify. The fils.me dashboard is hosted on Netlify. Netlify may log standard web access data (IP address, browser type) as part of their infrastructure.

What we never do with third parties

We never sell your data. We never share your spending data with financial institutions, advertisers, or data brokers. If we surface a financial product recommendation (such as a savings account or investment platform), we generate that recommendation locally based on your data — we do not send your data to the partner. You choose whether to act on it.

Data storage and security

All data is stored in a PostgreSQL database on AWS RDS (Frankfurt, eu-central-1)
Encryption at rest: AES-256
Encryption in transit: TLS
Access is restricted to authorised personnel only
Raw receipt images are discarded immediately after extraction
Data is currently held in Frankfurt, Germany. This falls under GDPR jurisdiction, which provides strong protections compatible with UAE PDPL requirements. We intend to migrate to UAE-region infrastructure when AWS UAE regional infrastructure stabilises.

Your rights

You have the following rights over your data:

Access. You can request a copy of all data we hold about you. Email privacy@savevibe.ae.
Deletion. You can delete all your data at any time by sending /delete to the bot. This permanently removes all transactions, budgets, savings goals, and your account record. This action cannot be undone.
Correction. If any data we hold is inaccurate, contact us and we will correct it.
Objection. You can object to any processing at any time. Contact privacy@savevibe.ae.
Portability. You can request your data in a portable format. Email privacy@savevibe.ae.

Consent

When you first use Save Vibe, you are asked to confirm your consent before any data is stored. Your consent date is recorded. You can withdraw consent at any time by deleting your data using the /delete command.

UAE PDPL compliance

Save Vibe is designed to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Specifically:

Explicit consent is recorded at onboarding
Data is collected only for defined, legitimate purposes
Encryption protects data at rest and in transit
Users have the right to access, correct, and delete their data
Data is not shared with third parties for commercial purposes

We are in the process of registering with the UAE Data Office ahead of the January 2027 compliance deadline.

Data retention

We retain your data for as long as you have an active account. If you delete your account using the /delete command, all data is removed immediately and permanently.

We do not retain data after account deletion for any purpose, including analytics or model training.

Children

Save Vibe is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has provided data to Save Vibe, please contact privacy@savevibe.ae and we will delete it immediately.

Changes to this policy

We will notify users of material changes to this policy via the Telegram bot before changes take effect. The effective date at the top of this page reflects the most recent version.

Contact

For any privacy-related questions, requests, or concerns:

Email: privacy@savevibe.ae
Telegram: @FilsUAEBot

Note: This privacy policy reflects our current practices during the beta period. It will be reviewed by a UAE-qualified lawyer before public launch.