Saqta Privacy Policy

Last updated: 17 September 2026

Who processes your data

The operator is Rustem Yessaliyev, Shymkent, Kazakhstan. For privacy questions, contact privacy@saqta-app.com.

What we collect

• Email address. You sign in with a one-time code sent there. If you sign in with Apple, Apple gives us the address — it may be a private relay address like …@privaterelay.appleid.com that forwards mail to your real inbox. People you are connected with in the "Account access" section see this address too.
• Name. Only if you sign in with Apple and keep your name in Apple's sheet. You see it, and so does anyone you are connected with in the "Account access" section — even if you do not currently share an account with them.
• Apple account identifier. Only if you sign in with Apple: the number Apple assigned to you for Saqta, which we use to recognise you the next time you sign in, and an access token we use to ask Apple to revoke Saqta's access when you delete your account.
• Financial records. Transactions, accounts, categories, limits and balances — everything you enter yourself or confirm after a statement is parsed.
• Voice recordings. Only when you dictate a transaction by tapping the microphone. A recording lasts at most two minutes.
• Attached files. PDF statements and payment screenshots that you attach yourself.
• Device details. An installation identifier and your device language, so that sync can tell your devices apart and emails and replies arrive in your language.

We do not collect your location, contacts, health data or advertising identifiers.

Why we use it

• To show your transaction feed, analytics, budgets and forecasts.
• To parse statements and transcribe dictated transactions.
• To answer your questions to the assistant and suggest transaction categories.
• To send your sign-in code.
• To sync your data between your devices.

Who we share it with

• Google (Gemini) and Anthropic (Claude) AI models — through the OpenRouter service. Only after you allow it in the app, and only for the feature you are using. This includes: the text of your messages to the assistant together with the names of your accounts and categories and their totals; files you attach — statements, receipts, screenshots; voice recordings; transaction names and notes — to suggest a category. We don't add your email, name, or account and device identifiers to requests. But the files themselves may contain personal data: a bank statement usually shows the holder's name, and sometimes their IIN (individual identification number) and card number. Requests go only to Google and Anthropic — our server doesn't allow any other model providers. These companies process the data to produce the answer and to check requests for abuse, don't train models on it, and protect it at least as well as we do. Google keeps requests for up to 90 days and Anthropic for up to 30 days to check them for abuse; requests that Anthropic's safety systems flag as violating its rules are kept for up to two years. OpenRouter doesn't keep requests. You can withdraw your permission in Profile → "Data for AI".
• The email provider (Resend). The recipient address and the sign-in code.
• Apple. When you sign in with Apple, we verify the sign-in with Apple; when you delete your account, we ask Apple to revoke Saqta's access to your Apple Account.
• Hosting providers: Hetzner for the server that runs the service and Cloudflare for file storage.

We do not sell your data and do not share it with advertising networks.

How long we keep it

• A statement you send for parsing stays in our storage until you confirm the parsed transactions: it is deleted after confirmation, and an unconfirmed one is deleted together with your account.
• Voice recordings and files in your messages to the assistant are not stored on the server: they are needed for a single model response.
• Copies of attached files on your device are deleted after 24 hours.
• Everything else is kept for as long as your account exists.

Tracking

The app does not track you across other companies' apps or websites. It does not use the device advertising identifier (IDFA), does not show ads, and does not ask for App Tracking Transparency permission.

Your rights

Deletion. Profile → "Delete account". Your account, transactions, accounts, limits and files are deleted from the server and from this device. This cannot be undone. If you signed in with Apple, we also ask Apple to revoke Saqta's access to your Apple Account.

Access and correction. You can see and change all of your records in the app. For anything else, write to privacy@saqta-app.com.

Changes

If this policy changes, we will update the date above and show the new version in the app.