Privacy Policy

Your privacy is important to us. It is Shayr's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including via our app, Shayr, and its associated services.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use an app or online service.

In the event our app contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our app.

Information We Collect

Information we collect falls into one of two categories: 'voluntarily provided' information and 'automatically collected' information.

Log Data

When you access our servers via our app, we may automatically log the standard data provided by your device. It may include your device's Internet Protocol (IP) address, your device type and version, your activity within the app, time and date, and other details about your usage.

Device Data

Our app may access and collect data via your device's in-built tools, such as your identity and background data refresh. The specific data we collect can depend on the individual settings of your device and the permissions you grant when you install and use the app.

Personal Information

We may ask for personal information which may include:

• Name
• Email
• Date of birth
• Phone/mobile number

Sensitive Information

The types of sensitive information we may collect include Financial Information (Balances and Transactions). We will not collect sensitive information about you without first obtaining your consent.

Collection and Use of Information

We may collect personal information from you when you register for an account, use our app, contact us, or mention us on social media. We use this information to:

• Provide you with our app's core features and services
• Enable you to customize or personalize your experience
• Contact and communicate with you
• For analytics, market research, and business development
• For advertising and marketing purposes
• For security and fraud prevention
• For technical assessment and improvement

Security of Your Personal Information

When we collect and process personal information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification. Although we will do our best to protect the personal information you provide to us, no method of electronic transmission or storage is 100% secure.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. If your personal information is no longer required, we will delete it or make it anonymous by removing all details that identify you.

Children's Privacy

We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to third-party service providers, our employees and contractors, and agents or business partners. Third parties we currently use include:

• Google Analytics
• MailChimp
• Stripe
• Apple Pay / Google Payments
• Plaid (to link financial accounts)

Connected AI Assistants (Claude and Other Connectors)

Shayr offers an optional connector that lets an AI assistant, such as Claude from Anthropic, answer questions about your own Shayr data. The connector is off by default. It works only after you sign in to your Shayr account and approve the connection on a Shayr consent screen, and you can disconnect at any time.

What the connector can access

Access is read-only and limited to your own account. When you ask your assistant a question that needs it, the assistant can request:

• Your net worth, total assets and liabilities, and net worth trend
• Your transactions (merchant, amount, date, and category), optionally filtered by date, category, or search text
• Your budgets and spending against them
• Your savings goals and progress

The connector cannot create, change, or delete anything in your account, and it cannot move money. It does not provide your bank login credentials, your Shayr sign-in credentials, or full account numbers to the assistant.

How the data is used

Shayr returns the requested data to the assistant only to answer the question you asked. We do not use data accessed through the connector for advertising, and we do not sell it.

Who receives the data

Data returned through the connector is received by the AI assistant provider you chose to connect (for example, Anthropic when you use Claude). That provider handles your conversation, including the Shayr data in it, under its own terms and privacy policy, which we do not control. Please review them before connecting. We do not send connector data to any other third party for this feature.

What we store

When you approve a connection we store a record of the authorization (the application's name, the access granted, and timestamps) and access credentials in hashed form only. We do not store the contents of your conversations with the assistant. Our servers keep standard operational logs (such as the time of a request and which function was called) for security and troubleshooting, retained only as long as needed for those purposes.

Security

Connections use HTTPS and industry-standard OAuth 2.0 authorization with PKCE. Access tokens are short-lived and bound to the Shayr connector, and each request is limited to the account that approved it.

Your choices

You can disconnect Shayr at any time from your AI assistant's connector settings, which stops the assistant from requesting new data. To revoke an existing authorization immediately, or to ask what was shared, contact privacy@shayrapp.com. Deleting your Shayr account also ends all connections to it.

Your Rights and Controlling Your Personal Information

You have the right to access, correct, or request deletion of your personal information. You may also withdraw consent for data processing and opt out of marketing communications at any time by contacting us.

Use of Cookies

Our privacy policy covers the use of cookies between your device and our servers. Please refer to our Cookie Policy for more information.

GDPR, CCPA, PIPEDA & UK GDPR Compliance

Shayr complies with applicable data protection regulations including GDPR (EU), UK GDPR, CCPA (California), and PIPEDA (Canada). Residents of these jurisdictions have additional rights including the right to restrict processing, object to processing, request data portability, and erasure. Please contact us to exercise any of these rights.

Changes to This Policy

We may change our privacy policy to reflect updates to our business processes or legislative changes. We will post changes here and, for significant changes, notify you directly.