Privacy Policy
Last updated: 7 October 2026
This policy explains what personal data LittleSaving collects, why, where it is stored, who it is shared with, and what rights you have. It is written to follow Vietnam’s Law on Personal Data Protection and its implementing regulations.
1. Who is responsible
The controller of personal data for LittleSaving is Nguyễn Văn Công, an individual based in Vietnam. Contact for personal data matters: vancongit87@gmail.com.
2. Data we collect
| Type | Includes | When |
|---|---|---|
| Account | Email, display name, language; name and profile picture from Google if you sign in with Google | Sign-up and sign-in |
| Household | Household name, members and roles, country, currency, time zone | Creating or joining a household |
| Financial data | Wallets and balances, transactions, notes, categories, budgets, recurring bills, goals, debts, term deposits; transfer payees (name, bank, account number) that you save | When you enter it in the app |
| Receipt photos | Photos you take for automatic reading | Only when you use receipt scanning — not stored after reading |
| Feedback | Your message; if you agree: browser, screen size, language, time zone and recent app errors | When you send feedback |
| Notifications | Browser push subscription; in the app: the device notification token (Firebase Cloud Messaging); notification settings | When you turn on notifications |
| Activity log | Who added, edited or deleted what in the household | While using the app |
| Technical | IP address and access times in infrastructure providers’ logs | When you visit |
| Payment | Plan, period, amount, payment provider transaction ID — no card numbers | Once LittleSaving opens payment |
Financial data is sensitive personal data. By signing up and entering data in the app, you consent to our processing it for the purposes in section 3. You can withdraw consent at any time (section 7); we will then no longer be able to provide the Service to you.
3. How we use data
- To provide the Service: store and show data to you and your household members, calculate balances, budgets and reports, and send reminders you turned on.
- To read receipts and suggest categories when you ask.
- To keep the Service secure and detect and prevent abuse.
- To provide support, answer feedback and fix bugs.
- To manage subscriptions and payments, and meet accounting and tax obligations under the law.
We do not sell data, show ads, or use your financial data for advertising or to train AI models.
4. Who processes data with us
We use the providers below to run the Service. Each receives only the data needed for its task.
| Provider | Task | Data |
|---|---|---|
| Supabase | Database, authentication, file storage (servers in Singapore) | All account, household, financial and feedback data |
| Vercel | Website hosting and delivery | IP address, access logs |
| Sign in with Google (if you choose it); Gemini API for reading receipt photos; Google Fonts | Google sign-in data; receipt photo and the household’s category names when you scan a receipt; IP address | |
| jsDelivr | Delivering the chart and Excel libraries | IP address |
| Sentry | Recording technical errors so we can fix them | Error details, the page open, browser / device type, user ID (no email, name or IP address) |
| Cloudflare Turnstile | Blocking fake accounts at sign-up / sign-in | IP address, browser signals |
| Resend | Sending sign-up confirmation and password reset emails | Email address, email content |
| Firebase Cloud Messaging (Google) | Push notifications in the Android app | Device notification token, notification content |
| Browser push services (Google, Apple, Mozilla…) | Delivering notifications to your device | Notification content — encrypted, readable only by your device |
| payOS, Paddle, Apple, Google Play | Payments (once payment opens) | Data needed for the transaction; card details are handled directly by them |
| RevenueCat | Managing in-app subscriptions and scan packs (App Store / Google Play) | Household ID (not your name or email), products purchased, subscription status reported by the store, basic device info (operating system, app version) |
About AI receipt reading: LittleSaving uses the paid tier of the Gemini API — under Google’s terms, content sent through the paid tier is not used to improve Google’s products. LittleSaving sets a monthly spending limit on the paid tier; when that limit is temporarily reached within a month, receipt photos may be read through the free tier of the Gemini API, and under Google’s terms content sent through the free tier may be used by Google to provide and improve its products. LittleSaving does not keep receipt photos after reading them. You can always skip receipt scanning and enter transactions by hand.
We may disclose data to competent authorities when required by law.
5. International transfers
Our database servers are in Singapore; some providers in section 4 process data in the United States and elsewhere. Transfers of data abroad are carried out in accordance with Vietnamese personal data protection law.
6. How long we keep data
- Account and household data: for as long as your account is active. Items you delete in the app go to the Trash and can be restored until they are permanently deleted.
- When you delete your account: your account, private wallets and their transactions, notifications, settings and feedback are deleted immediately; copies in the infrastructure provider’s backups expire within 30 days. Data we must keep by law (such as payment records) is kept for the legally required period. Transactions you recorded in the household’s shared wallets stay with the household, no longer linked to your account.
- Receipt photos: not stored. Feedback: kept until resolved and for at most 24 months.
7. Your rights
You have the right to be informed, to access, correct and delete your data, to restrict or object to processing, to withdraw consent, to receive a copy of your data, and to complain to the competent personal data protection authority.
- View, correct and export data: directly in the app (Data → Export / Backup).
- Delete your account: do it yourself in the app — Settings → Delete account (type your email to confirm). An owner with other members must transfer ownership first; if the only member (the owner) deletes their account, the whole household is deleted.
- Withdraw consent and other requests: email vancongit87@gmail.com from your account’s email address.
We respond within the time limits set by law.
8. Security
- All connections are encrypted (HTTPS).
- Each household is isolated by access rules enforced inside the database for every row; private wallets are readable only by their owner.
- Passwords are never stored in readable form. Administrative keys never reach the browser.
If a data breach occurs, we notify the competent authority and affected people as required by law.
9. Browser storage
The app uses browser storage (localStorage, IndexedDB, a service worker) to keep you signed in, remember display settings and support offline use. We do not use advertising cookies or trackers. This website sets no cookies.
10. Children
People under 16 may use LittleSaving only with the consent of a parent or guardian, typically as members of their family’s household.
11. Changes to this policy
If this policy changes materially, we will notify you in advance by email or in the app. The latest update date is always shown at the top of this page.
12. Contact
Nguyễn Văn Công — vancongit87@gmail.com