Privacy Policy
Last updated: 31 August 2026 · Version 1.0
This Privacy Policy describes how UDT s.r.o. ("we", "us", "our") handles information when you use the Saventa mobile application (the "App"). Saventa is designed with a privacy-first approach: your financial records stay on your device and, optionally, in your personal Apple iCloud account. We operate no servers of our own and Saventa never connects to your bank.
1. Data Controller
The data controller is UDT s.r.o., Horníkova 2965/32f, Líšeň, 628 00 Brno, Czech Republic. Company ID: 28288670, VAT: CZ28288670, registered at the Brno Regional Court, file no. C 58849 (D-U-N-S 88057446). Contact: support@udt.cz.
2. What Data We Collect
Your financial data never reaches our servers. The App requires no registration, no login, and no bank credentials. We never collect, transmit, store, or process any of the following:
- Accounts, transactions, budgets, savings goals, categories, or notes you create
- Receipts, screenshots, or bank statement files you import, or the text extracted from them
- Bank login credentials — the App has no bank connection at all
- Personal identifiers, advertising IDs, or device fingerprints
Anonymous usage analytics (opt-in, off by default). If — and only if — you switch on "Share anonymous statistics", the App sends anonymous usage events (for example "app launched" or "report opened") to Aptabase, a privacy-focused analytics service hosted in the European Union. These events contain no financial data, name, email, account, advertising identifier, or persistent device identifier, are not linked to your identity, and are never used for tracking or advertising. The toggle lives in onboarding and in Settings → Privacy; it is off unless you turn it on.
3. Where Your Data Lives
On your device: All financial records are stored locally in the App's private database. Receipt and screenshot recognition runs entirely on-device using Apple's Vision framework — no image and no text leaves your device for processing. Statement files (CSV, OFX/QFX, MT940, CAMT.053) are parsed on-device as well.
In your iCloud account (optional): If you enable iCloud sync, your data is synchronized to your personal Apple iCloud account via Apple CloudKit. It is encrypted in transit and at rest by Apple; we have no access to it. Apple acts under its own privacy policy (apple.com/legal/privacy).
Shared budgets (optional): If you invite a family member to a shared budget, the shared records travel through your own iCloud account to the people you invite — never through us.
4. Exchange Rates
To convert foreign currencies, the App downloads public exchange rates from the Czech National Bank (cnb.cz) and from the European Central Bank reference rates via the frankfurter.dev service. These requests contain only currency codes and dates — no personal or financial data. Like any web request, they expose your IP address to the provider, subject to the provider's own policies. You can also enter exchange rates manually and the App works fully offline.
5. Face ID / Touch ID
The optional privacy lock uses Face ID, Touch ID, or your device passcode via Apple's LocalAuthentication framework. Biometric data is evaluated by iOS on your device only; the App never sees, stores, or transmits it.
6. In-App Purchases
Saventa offers in-app purchases (Saventa Pro — annual subscription or lifetime one-time purchase) processed by Apple Inc. via the App Store and StoreKit. We do not receive, store, or have access to your payment information, card numbers, or Apple ID. Apple provides us only with anonymized purchase receipts to validate entitlements.
7. Legal Basis (GDPR)
For users in the European Economic Area, the United Kingdom, and Switzerland, our legal basis under the GDPR for the limited processing described above is:
- Contract performance (Art. 6(1)(b) GDPR) — processing your in-app purchase to deliver the Pro entitlement.
- Legitimate interest (Art. 6(1)(f) GDPR) — ensuring the App functions correctly, including fetching public exchange rates.
- Consent (Art. 6(1)(a) GDPR) — anonymous usage analytics, only after you opt in; withdrawable at any time in Settings → Privacy.
8. Your Rights
Under GDPR and similar laws (including the California Consumer Privacy Act), you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. Because we hold no personal data on servers, most of these rights are exercised directly on your device:
- Export your data: Settings → Export (CSV / OFX).
- Erase your data: Delete records in the App, use Reset App Data, or delete the App.
- Erase iCloud data: iOS Settings → Apple ID → iCloud → Manage Storage → Saventa → Delete Data.
- Manage subscriptions: iOS Settings → Apple ID → Subscriptions.
- Contact us: For any other request, write to support@udt.cz. You also have the right to lodge a complaint with your supervisory authority (in the Czech Republic: Úřad pro ochranu osobních údajů, uoou.cz).
9. Children
Saventa is not directed to children under 13. We do not knowingly collect personal data from children. As we collect no personal data on servers at all, this restriction is satisfied by design.
10. International Transfers
We transfer no data internationally because we collect none. If you use iCloud sync, Apple may store your encrypted data in data centers outside your country, subject to Apple's privacy policy and Standard Contractual Clauses. Aptabase analytics (if you opt in) is hosted in the European Union.
11. Changes to this Policy
We may update this Privacy Policy. The current version will always be available at apps.udt.cz/Saventa. Material changes will be announced in App Store release notes.
12. Contact
Questions about this Privacy Policy: support@udt.cz.