Last updated: 12 July 2026 · Version 1.0
Operated by Technify Solutions · Singapore
Technify Solutions ("we", "us", "our") operates SaveLah ("the Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). By using SaveLah, you consent to the practices described in this Policy.
Technify Solutions is the data controller responsible for your personal data collected through the SaveLah platform. For all privacy-related enquiries, please contact us at privacy@save-lah.com.
We collect the following categories of personal data: (a) Account Data: Full name and email address, collected when you register an account or sign in via Google OAuth. (b) Point Balance Data: Self-reported credit card and loyalty programme point balances that you voluntarily enter on the Platform. This data is not verified against any bank or financial institution. (c) Identity Verification Data: Singapore mobile number, collected solely for one-time identity verification via SMS OTP. This data is not used for marketing purposes. (d) Technical Data: IP address, device type, browser type, and session metadata, collected automatically when you access the Platform. (e) Consent Records: IP address, timestamp, and version number recorded at the time you accept our Terms of Service and Privacy Policy. (f) Usage Data: Feature interactions, page views, and session duration, collected in aggregate to improve Platform performance.
We use your personal data for the following purposes: (a) To create and manage your SaveLah account. (b) To generate personalised AI recommendations via SaveBuddy based on your self-reported point balances. (c) To verify your Singapore residency through SMS OTP verification. (d) To send transactional emails including account verification, password reset, donation confirmations, and service updates. (e) To send marketing communications where you have opted in to receive them. You may opt out at any time. (f) To comply with legal obligations under Singapore law, including the PDPA and applicable financial regulations. (g) To detect, prevent, and investigate fraud, misuse, or unauthorised access to the Platform. (h) To improve Platform features, AI recommendation accuracy, and user experience through aggregate usage analysis.
We process your personal data on the following legal bases under the PDPA: (a) Contractual necessity — to provide the SaveLah service you have signed up for. (b) Legitimate interests — to improve our Platform, detect fraud, and ensure platform security. (c) Consent — for marketing communications and optional data processing activities. You may withdraw consent at any time. (d) Legal obligation — to comply with applicable Singapore laws and regulations.
We do not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients: (a) Service Providers: Third-party technology providers who assist in operating the Platform, including Supabase (database hosting), Railway (backend hosting), Vercel (frontend hosting), Resend (email delivery), Stripe (payment processing), and Twilio (SMS delivery). All service providers are bound by data processing agreements. (b) Charities: Aggregated, anonymised donation totals are shared with recipient charities quarterly. No personal data is shared with charities. (c) Legal Authorities: We may disclose your data to law enforcement or regulatory authorities where required by Singapore law or court order. (d) Business Transfer: In the event of a merger, acquisition, or sale of Technify Solutions, your data may be transferred to the successor entity, subject to equivalent privacy protections.
We retain your personal data for the following periods: (a) Account data — for the duration of your active account, plus 30 days following account deletion. (b) Point balance and usage data — for the duration of your active account. (c) Consent records — for 7 years from the date of consent, as required for legal compliance. (d) Transaction and payment records — for 7 years from the date of transaction, as required by Singapore financial regulations. (e) Technical and security logs — for 90 days. Upon account deletion, we will delete or anonymise all personal data within 30 days, except where retention is required by law.
We implement industry-standard security measures to protect your personal data, including: (a) Encryption of data in transit using TLS/HTTPS. (b) Encryption of passwords using bcrypt hashing. (c) JWT-based authentication with refresh token rotation. (d) Rate limiting on all API endpoints to prevent brute force attacks. (e) Row-level security on our database. (f) Real-time error monitoring via Sentry. (g) Two-factor authentication on all platform infrastructure accounts. While we take all reasonable precautions, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
SaveLah uses minimal client-side storage for essential platform functionality only: (a) Authentication tokens (access token and refresh token) — stored in browser localStorage to maintain your login session. These expire after 7 days. (b) Session preferences — stored in localStorage to remember your platform settings. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that track you across other websites. We do not display advertisements.
Under the Singapore Personal Data Protection Act 2012, you have the following rights: (a) Right of Access — you may request a copy of the personal data we hold about you. (b) Right of Correction — you may request correction of any inaccurate or incomplete personal data. (c) Right of Withdrawal — you may withdraw consent to processing at any time, subject to legal or contractual restrictions. (d) Right of Deletion — you may request deletion of your account and associated personal data via the Profile settings page. (e) Right to Data Portability — you may request a copy of your data in a portable format. To exercise any of these rights, please contact us at privacy@save-lah.com. We will respond within 30 days.
Your personal data may be processed and stored on servers located outside Singapore, including in the United States and Australia, where our service providers operate. We ensure that all international transfers are subject to appropriate safeguards, including data processing agreements with our service providers that require equivalent data protection standards.
SaveLah is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at privacy@save-lah.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated to registered users via email and/or in-app notification with a minimum of 30 days notice. The date of the most recent revision is shown at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.
For privacy-related enquiries, requests, or complaints, please contact: Technify Solutions Privacy Officer Email: privacy@save-lah.com Website: www.save-lah.com If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.
This Privacy Policy is compliant with the Singapore Personal Data Protection Act 2012 (PDPA). For questions contact privacy@save-lah.com