This policy explains how the Sajilo app for iPhone and Android (the “App”) handles information. It is published by Integrate AI LLC, a North Dakota limited liability company (“we”, “us”), the developer of the App.
This policy covers the App only. Our website is covered by a separate website privacy policy.
1.What we collect
- Account information. Your email address, used to sign you in — from Apple, from Google, or from the code we email you. That is the whole of it — we do not ask for your name, address, phone number, or date of birth.
- Financial data you choose to connect. When you link a bank through Plaid, we receive account names, types, balances, and transaction history (date, amount, merchant, and the merchant’s logo and website where Plaid provides them). When you link an investment account, we also receive what it holds: each holding’s name and ticker, how many shares or units, what they are worth, the price per share with its date, what you paid, and each purchase’s date, shares and price. You choose which institutions to connect, and you can disconnect any of them at any time.
- Data you enter yourself. Manual accounts and transactions, categories, tags, notes, budgets, and your plan settings.
- Your chats with Sajilo AI. If you turn Sajilo AI on and ask it something, we keep the chat (your questions and its answers) so you can go back to it. If you report an answer, we keep a copy of that question and answer so we can fix the problem.
- Diagnostics and usage. Crash reports and basic product analytics, so we can find bugs and see which features are used. These never contain your transactions, balances, or account numbers.
2.How we use it
Only to run the App for you: sorting your spending into categories, detecting recurring bills, subscriptions and paychecks, working out your Safe to Spend number, and answering the questions you ask Sajilo AI.
We do not sell personal data, and we do not share it for advertising. We do not build profiles for anyone else, we do not use your financial data to train machine-learning models, and we run no automated decision-making or profiling as defined by the GDPR. Nothing in the App is used for credit decisions.
3.Who else processes it
These are our processors. It is the complete list — there are no data brokers and no advertising networks.
- Plaid Inc. connects your bank and delivers your transactions to us. Plaid’s own handling of your information is governed by the Plaid End User Privacy Policy.
- Supabase hosts our database and server functions, on managed infrastructure in the United States.
- Anthropic makes Claude, the AI model behind Sajilo AI. Sajilo AI stays off until you turn it on, and Anthropic receives something only when you ask a question: your question, the chat so far, and the figures Sajilo looks up to answer it. Those can include your plan (income, bills, savings and Safe to Spend), transactions (date, merchant, amount, category and account), totals by category and merchant, your recurring bills and paychecks, and account names with their balances. Anthropic never receives account or card numbers, your bank sign-in, your notes, your name, or your email. The work is done on servers in the United States. Under the terms we use it on, Anthropic does not train its models on what we send, and it deletes what we send within 30 days. If its safety systems flag a chat as breaking its usage policy, it can keep that chat for up to 2 years.
- Apple and Google distribute the App and process purchases made in it. We never see your payment details.
- RevenueCat keeps track of your subscription: it knows your Sajilo account’s id and what you bought, whether in the App or on our website, and nothing about your money.
- Stripe processes purchases made on our website. Your card or wallet details go to Stripe and never to us.
- Google, only if you choose Sign in with Google: Google confirms your email address to us. Nothing about your money goes to Google.
- Brandfetch supplies merchant and company logos. For a merchant Plaid has no logo for, the merchant’s name as it appears on your statement is sent to Brandfetch to find one, and the answer is kept so the same name is not sent twice. A holding’s ticker is sent the same way. Amounts, dates and accounts never go with it.
- Sentry (crash reports) and PostHog (product analytics) receive diagnostic and usage events only — never your transactions, balances, or account numbers.
4.How we protect it
- Encrypted in transit and at rest. Every connection uses TLS, and the database is encrypted on disk.
- Bank access tokens never touch your phone. They are held in a separate encrypted secrets vault, reachable only by our server functions.
- Row-level security on every table. The database itself enforces that your rows are readable only by your account, rather than relying on application code to remember.
- Signed webhooks. Updates from Plaid are cryptographically verified before they are allowed to touch anything.
- Read-only access. Sajilo requests transaction data and nothing else. It cannot initiate a payment or move money, by construction.
5.Retention and deletion
This is our data retention and disposal policy. We review it at least annually and whenever our data practices change.
- While your account is active, we keep your data so the App can show your history and your plan.
- Unlink a bank (open one of its accounts → Unlink bank) and our access is revoked at Plaid right away, and the stored access token is destroyed. Its accounts close, and their past transactions stay in your budget, so your history does not change. To erase them, delete your account.
- Sajilo AI chats are deleted 30 days after their first question. You can delete one sooner, or all of them, from Past chats in Sajilo AI. A report you send about an answer is deleted after 90 days.
- Delete a transaction you typed in and it moves to Recently deleted (Settings → Recently deleted), where you can restore it for 30 days. After 30 days, or when you tap Delete all now, it is erased.
- Delete your account (Account → Delete account) and everything of yours — accounts, transactions, categories, tags, rules, settings, Sajilo AI chats and reports, and every bank connection — is erased immediately, with our access revoked at every linked bank at the same moment. We keep no copy, and there is nothing to restore afterwards.
- If you stop using Sajilo for two years, we email you once, and 30 days later the account and everything in it is erased the same way Delete account erases it — unless you open the App in between, which cancels the notice and starts the two years again.
- Backups. We keep no separate copies of your data ourselves. Any database backups our hosting provider holds are encrypted and expire automatically within 35 days, so deleted data does not outlive that window.
Deletion is enforced by the product, not by a manual process: each action above is a button in the App and takes effect when you tap it.
6.Your rights
You can access, correct, export, or delete your information at any time. Export and account deletion are built into the App (Account → Export CSV and Account → Delete account). For anything else, email integrateai2026@gmail.com and we will respond within 30 days.
These rights apply to everyone who uses Sajilo, not only to residents of places that require them — including the rights to know, delete, correct, and to non-discrimination under the California Consumer Privacy Act. We have never sold or shared personal information as those terms are defined by the CCPA, so there is nothing to opt out of.
7.Children
Sajilo is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, email us and we will delete it.
8.Changes to this policy
If this policy changes we will update this page and change the effective date above. Meaningful changes will also be announced in the App.
9.Contact
Integrate AI LLC
integrateai2026@gmail.com