Introduction

This addendum applies to users located in Canada and supplements our main Privacy Policy. It is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

Information We Collect from Canadian Users

Financial Information via Plaid

When you connect your bank accounts through Plaid Technologies Inc., we collect:

• Bank account balances and transaction history

• Account holder names and account numbers

• Financial institution information

• Transaction descriptions, dates, and amounts

Purpose: To provide account aggregation, spending visualization, savings tracking, and financial insights within the Savrr app.

Account and Profile Information

• Name and email address

• Device information and identifiers

• App usage data and preferences

Purpose: To maintain your account, provide customer support, and improve our services.

Your Consent Rights

Express Consent

By connecting your bank accounts through Plaid, you provide express consent for us to:

• Access your financial account information through Plaid

• Store and process this information to provide Savrr's services

• Use aggregated, anonymized data for service improvements

  
  

Withdrawing Consent

You may withdraw your consent at any time by:

• Disconnecting bank accounts within the Savrr app (Settings > Connected Accounts)

• Deleting your Savrr account (Settings > Delete Account)

• Contacting us at privacy@savrrapp.com

Note: Withdrawing consent may limit or prevent your ability to use certain Savrr features. Upon withdrawal, we will delete your personal information within 30 days unless we have a legal obligation to retain it.

How We Use Your Information

We use your personal information only for the purposes disclosed at the time of collection:

• Service Delivery: Displaying account balances, categorizing transactions, providing savings insights

• Customer Support: Responding to inquiries and troubleshooting issues

• Service Improvement: Analyzing aggregated, anonymized usage patterns

• Legal Compliance: Meeting regulatory and legal requirements

We do NOT:

• Sell your personal information to third parties

• Use your financial data for marketing purposes

• Share your information with advertisers

Data Sharing and Third-Party Service Providers

Plaid Technologies Inc.

Plaid connects to your financial institutions on our behalf. When you use Plaid:

• Plaid collects your bank login credentials and account information

• Plaid is subject to its own privacy policy

• We are accountable for how Plaid handles your data on our behalf

  
  

Other Service Providers

We may share your information with:

• Cloud hosting providers (e.g., AWS, Google Cloud) for data storage

• Analytics providers (anonymized data only)

• Customer support tools

All service providers are contractually required to protect your information and use it only for specified purposes.

Data Storage and Cross-Border Transfers

Where Your Data is Stored: [Specify: e.g., "Your data is stored on servers located in the United States/Canada"]

Cross-Border Transfers: Your personal information may be processed and stored outside of Canada, including in the United States. When transferred outside Canada, your information remains protected by:

• Contractual safeguards with service providers

• Compliance with PIPEDA's cross-border transfer requirements

• Industry-standard security measures

Please note that data stored in other countries may be subject to lawful access by courts, law enforcement, and national security authorities of that jurisdiction.

Data Security

We implement appropriate technical and organizational safeguards to protect your financial information, including:

• Encryption of data in transit and at rest

• Secure authentication mechanisms

• Regular security assessments

• Access controls limiting who can view your data

• Employee confidentiality agreements

  
  

However, no system is completely secure. We cannot guarantee absolute security of your information.

Data Retention

We retain your personal information only as long as necessary for the purposes identified:

• Active accounts: Data retained while your account is active

• Deleted accounts: Personal information deleted within 30 days of account deletion

• Legal requirements: Some information may be retained longer to comply with legal obligations (e.g., tax records, fraud prevention)

Your Privacy Rights

Under PIPEDA, you have the right to:

• Access Your Information

  Request access to the personal information we hold about you. We will respond within 30 days.

• Correct Your Information

  Request corrections to inaccurate or incomplete personal information.

• Request Deletion

  Request deletion of your personal information (subject to legal retention requirements).

• Withdraw Consent

  Withdraw consent for data collection and processing at any time.

• File a Complaint

  Challenge our compliance with privacy laws by contacting us or filing a complaint with the Office of the Privacy Commissioner of Canada.

To exercise these rights, contact us at: privacy@savrrapp.com

Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will:

• Notify affected individuals as soon as feasible

• Notify the Privacy Commissioner of Canada

• Provide information about the breach, its potential impact, and steps we're taking

Quebec Residents - Additional Rights

If you reside in Quebec, you have additional rights under Law 25:

• Enhanced consent requirements: We obtain explicit consent for sensitive information processing

• Right to data portability: Request your information in a structured, commonly used format

• Automated decision-making: Right to know about and challenge any automated decisions affecting you (Savrr does not currently use automated decision-making that significantly impacts users)

• Privacy impact assessments: We conduct privacy impact assessments for high-risk processing activities

Language

For Quebec residents: This privacy policy is available in both English and French. In case of any discrepancy, the French version prevails for Quebec residents.

Version française disponible sur demande à privacy@savrrapp.com

Children's Privacy

Savrr is not intended for use by individuals under the age of 13 (or 16 in Quebec). We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We will notify you of material changes to this privacy policy by:

• Email notification to your registered email address

• Prominent notice within the Savrr app

• Updating the "Last Updated" date

Continued use of Savrr after changes constitutes acceptance of the updated policy.

Contact Us

Email: privacy@savrrapp.com 

Mailing Address: 1401 Lake Plaza Drive, Suite 200 - 147, Spring, Texas 77389

For privacy complaints or inquiries:

• Email us at privacy@savrrapp.com

• We will respond within 30 days

  
  

Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca

• Toll-free: 1-800-282-1376

  
  

Commission d'accès à l'information du Québec (for Quebec residents):

• Website: www.cai.gouv.qc.ca

• Toll-free: 1-888-528-7741