Introduction
Sagery ("we," "us," or "our") operates the Sagery website and application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our service and the choices you have associated with that data.
Data Collection & Storage
Before You Create an Account
If you use Sagery without signing in — every calculator and tool works this way — your numbers never leave your browser. They are held in your browser's localStorage. We do not collect, store, or have access to any of your financial information.
We do see that a page was viewed. Like most websites, we measure page views and loading performance so we know which tools people use and when something is broken. That measurement is anonymous and aggregate: no cookies, no profile, no identifier that follows you, and no way to connect a page view to a person. We never see what you typed into a calculator.
Once You Sign In
When you sign up — on any plan, including the free one — you are telling us to keep your plan, so it is there tomorrow and on your other devices. That means we store the details you enter: your profile (age, retirement age, income, spending, filing status, state, Social Security estimate, and partner equivalents) and the balances of accounts you add.
We store it to run the product and fix bugs. We never sell it, share it, or ask for a bank login. You can export it or delete it at any time.
We do not collect:
- Bank account numbers or balances
- Investment account details or holdings
- Income, expense, or savings data
- Retirement age targets or spending plans
- Any personally identifiable financial information
Pro Users (Data Sync Feature)
Pro users who choose to enable data sync create a Supabase account. When you sync, we collect and store:
- Your email address (for account authentication)
- Financial data (accounts, balances, projections, preferences)
- Calculation history and settings
All data is transmitted securely via HTTPS and stored using Supabase's managed security infrastructure, including row-level security (RLS) policies. You maintain full control over your data and can delete your account at any time.
How We Use Your Data
For free users, we don't process your data — it stays in your browser. For Pro users who sync, we use your data only to:
- Authenticate your account
- Store and retrieve your calculations
- Enable cross-device access to your retirement plan
- Provide technical support if requested
Third-Party Services
We do not use advertising networks, ad identifiers, or cross-site tracking.We do not sell or share your information with advertisers or marketing partners, and we never read your device's contacts, location, camera, or microphone.
We do use the following third-party services to operate Sagery:
- Anthropic (Claude): Powers Sage, the Pro advisors, the statement reader and the account-type guess. Anthropic processes this under its commercial API terms, which do not permit training on your data. Nothing is sent until you agree in the app or on this site, and you can withdraw that at any time in Settings → Data & Export, after which these features stop. Exactly what each one sends:
- Asking Sage: your age and target retirement age; how many years that leaves until retirement; your annual income; your portfolio value and annual contributions; your savings rate; the page you are looking at; the messages you type. So the answer is about your numbers rather than a generic explanation.
- The Pro advisors (debt, retirement, investment, tax, Social Security and the plain-English Monte Carlo explanation): your age and target retirement age; your annual income and annual spending; your total savings and monthly contributions; your filing status; whether you have a partner, and their age; your Social Security estimate; a summary of your accounts; the question you asked and any focus you picked. To write advice about your actual position instead of a general article.
- Reading a pasted statement: the statement text exactly as you pasted it, including balances, account names and transactions. To pull out debts and recurring charges so you do not type them in by hand.
- Naming an account for you: the account name you typed. To guess the account type, so the right tax treatment is applied.
- Product analytics (Vercel Analytics, PostHog): Which pages and features are used, how far people get through signup, and timings — tied to your account ID once you sign in, so we can see where the product loses people. We never send a dollar amount, a balance, or an income in an analytics event; form contents are never captured; session recording is off; Do Not Track is honored. You can opt out of PostHog in your browser settings.
- Supabase: Cloud database and authentication provider. Pro user data is stored in Supabase's managed PostgreSQL infrastructure with row-level security.
- Stripe: Payment processing for Pro subscriptions. Stripe handles all payment information directly — we never store your full card details.
- Resend: Transactional email service for account notifications and digests. We share only your email address with Resend to deliver these communications.
- Apple: If you buy a Sagery subscription or an AI credit top-up inside the iPhone app, Apple handles the payment and tells us that it succeeded. Apple never shares your payment details with us, and we never see them. What reaches us is which plan you bought and an identifier for the subscription, so we can switch your account to that plan and recognise the renewal.
- RevenueCat: Receives Apple's purchase notifications on our behalf and tells our server which plan you are on. We send it your Sagery account ID so the purchase can be matched to your account; it receives no financial figures from your plan, no balances, and no email address from us. It is used only for purchases made inside the iPhone app.
- Plaid: Used only if you choose to connect a bank or brokerage account to sync balances automatically. You enter your bank credentials with Plaid, never with us — we never see or store them. Plaid returns the account names and balances you approve, which we store alongside the accounts you entered by hand. If you never connect a bank, nothing is sent to Plaid.
Of these, Apple and RevenueCat apply only to purchases made inside the iPhone app, Stripe only to purchases made on this website, and Plaid only if you connect a bank yourself.
Cookies
We only use essential cookies necessary for authentication and basic functionality. These include:
- Session authentication cookies (for anyone signed in, on any plan)
- CSRF protection tokens
We do not use cookies for advertising or cross-site tracking. Page-view and performance measurement is cookieless; the product-analytics tool stores a first-party identifier in your browser so that a signup and a later visit count as the same person — it never follows you to other sites.
Data Deletion
If you never signed in: Clear your browser's localStorage, and all your data is permanently deleted. Nothing about you exists on our servers to delete.
If you have an account (free or paid): Clearing your browser is not enough — the copy saved to your account stays until you delete the account. Delete it in your settings and we immediately remove all data from our servers. Your data is no longer accessible, and any backups are purged according to our retention policy (30 days).
CCPA & GDPR Compliance
If You Have Not Signed In
Until you create an account we hold no personally identifiable information about you at all — there is no record on our side for CCPA or GDPR to reach. Your data never leaves your device. Once you create an account, the rights described below apply to you on every plan.
For Pro Users (GDPR Residents)
If you are a resident of the European Union or United Kingdom, you have the right to:
- Access: Request a copy of your encrypted data
- Rectification: Correct inaccurate information
- Deletion: Request complete removal of your account and data
- Portability: Export your data in a machine-readable format
- Object: Opt-out of any optional data processing
For Pro Users (CCPA Residents - California)
If you are a California resident, you have the right to:
- Know: What personal information is collected
- Delete: Request deletion of your data
- Opt-Out: Opt out of data sales (we do not sell data)
- Non-Discrimination: We do not discriminate based on your privacy choices
Data Security
Sagery implements industry-standard security measures:
- HTTPS encryption for all data in transit
- Supabase-managed database security with row-level security (RLS)
- Secure authentication protocols
- Regular security audits and updates
- No storage of passwords (only secure hashes)
While we employ robust security practices, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Children's Privacy
Sagery is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete it immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of Sagery after such changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, your data, or our privacy practices, please contact us at:
We will respond to all privacy inquiries within 30 days.