saftr.app/privacy
Privacy Policy
Last updated 6 September 2026
The short version
Saftr reads your email to find receipts and connects to your accounts to match charges. That is all. We do not sell data, we do not build advertising profiles, and we do not share your purchase history with merchants or third parties.
What we access
With your explicit permission, Saftr requests read-only access to your mailbox through Google or Microsoft's own OAuth consent screen and, if you choose to connect them, read-only access to card and bank transactions through a regulated aggregator. We scan for order confirmations, shipping notices, refund notices and subscription receipts. Messages that are not receipts are ignored and never leave your provider.
What we store
From a matched receipt or transaction we extract and store structured fields: merchant, item name, price, order date, delivery estimate, category, order number and the stated return window. We do not retain the full body of your emails, attachments, or any message we did not match.
Where it lives
Purchase records are stored encrypted at rest and transmitted over TLS. Access tokens issued by your email provider or bank aggregator are stored encrypted and can be revoked by you at any time, either inside Saftr or from the provider's own security settings.
What we never do
We do not send email on your behalf, do not modify or delete messages, do not move money, do not contact merchants for you, and do not read anything outside the receipt and transaction patterns described above. Saftr has no advertising business, so there is no commercial incentive to hold more than the app needs.
Analytics
We collect anonymous, aggregated usage events — screens opened, features used, crashes — to fix problems and prioritise work. These events carry no purchase data and no message content, and you can turn them off in Settings.
Deleting your data
Disconnecting a source stops all scanning immediately. Deleting your account removes your purchase records and revokes stored tokens within thirty days, including from backups on their normal rotation.
Children
Saftr is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially, you will see an in-app notice before the change takes effect. The date above always reflects the current version.
Questions about this document? Write to saftrpurchaseprotection@gmail.com.