Privacy Policy

Who We Are

Selrey is a personal finance and AI assistant application. Selrey is a product of PDG & Associates LLC ("we," "our," or "us"), a company organized under the laws of Florida, which is responsible for the personal information processed through the Service. Our principal place of business is:

PDG & Associates LLC
3900 Alton Rd, Apt 206
Miami Beach, FL 33140
United States

Email: support@sapphirecore.net

Scope of This Policy

This Privacy Policy explains how Selrey collects, uses, retains, and shares personal information when you use our iOS mobile application and related services (collectively, the "Service"). It applies to all users, including users of both the Personal and Business workspace features.

Section 3.3 also describes the limited, aggregate visitor statistics we collect on our public website, selrey.com. Those statistics are not linked to any Selrey account.

This Policy does not apply to third-party services we connect to — those services have their own privacy policies, which we link to throughout this document. It also does not apply to information Apple collects directly through the App Store.

This Policy should be read together with our Terms of Service, which govern your use of Selrey. Subscription pricing, automatic-renewal, and cancellation terms are presented in the app before you purchase and are also governed by Apple's App Store terms. Account deletion is described in Section 14 of this Policy.

Information We Collect

3.1 Information You Provide Directly

• Account credentials: Your name, email address, and password. Selrey does not store your plaintext password.
• Profile information: Your display name and, if you choose to upload one, a profile photo.
• Financial settings: Budget amounts, savings goals, monthly income targets, your self-reported credit score (optional), and other planning values you enter manually.
• Profile photo: If you upload a profile photo, it is stored on Selrey's servers (Supabase cloud storage). The photo is selected from your device's camera or photo library using the iOS system picker.
• Tax documents: When you use the Tax Center (CPA) feature, you capture or select documents (receipts, invoices, statements) from your device and upload them to your own connected cloud storage account (currently Google Drive; other providers are planned, see Section 8). Raw document files are stored in your own cloud account — not on Selrey's servers. The document image is temporarily transmitted to Selrey's server and forwarded to Anthropic's API for AI extraction; it is not stored on Selrey's servers after processing. Selrey stores only the document metadata and AI-extracted fields described in Section 8.
• CPA package recipients: When you share a tax document or CPA package, you choose the recipient yourself on your device using the iOS share sheet (for example, your accountant's email app). Selrey does not store the names, email addresses, or firm details of accountants or other recipients, and does not send the package on your behalf.
• AI conversations: The text of your messages to the Selrey AI assistant, including any financial details you type or share within a conversation.

3.2 Information Collected from Third Parties

• Bank and financial data via Plaid: When you link a bank account, Plaid provides us with account names, account number masks (last four digits), institution names, account balances, transaction history, credit card liability data, and investment holdings. See Section 5.
• Apple subscription data: When you purchase a subscription or in-app item, Apple sends us cryptographically signed notifications containing a pseudonymous transaction identifier, product identifier, and purchase status.

3.3 Information Collected Automatically

• AI-extracted memory: Short factual summaries that the AI extracts automatically from your conversations after it replies (for example, "User is saving for a down payment") to personalize future responses within your session and across sessions. These memory facts are stored with your account for as long as the account exists. They are deleted when you delete your account; they are not deleted when you turn AI features off (see Section 6.5).
• Push notification token: A device identifier provided by Apple and routed via Expo to deliver push notifications.
• App usage information: Feature usage timestamps, chat thread history, and notification records.
• Connection audit data: When you connect a bank account, we record a one-way hash (SHA-256) of your IP address — not the raw IP address — along with your device's user agent string, the institution identifier, and the connection outcome. We use this for security and rate-limiting.
• Email engagement events: Delivery status and, when emails are opened, the IP address and mail client information reported by our email provider, Resend. We use this data to manage email deliverability and honor unsubscribes.
• Website analytics (selrey.com): On our public website we use Plausible Analytics, a privacy-focused service, to count visits in aggregate. For each page view it records the page address, the referring site and any campaign parameters contained in the link you followed (for example "utm_source" and "utm_campaign"), your browser and operating-system family, device type and screen-size class, and the country or region derived from your IP address at the time of the visit. Clicks on our "early access" and App Store buttons are counted as events together with the button's position on the page (for example "hero" or "pricing"). Plausible sets no cookies and no persistent identifier and does not store your IP address; according to Plausible's published data policy, unique visitors are counted within a single day using a one-way hash with a salt that is discarded every 24 hours, after which no visitor-level data remains. We use these statistics to understand how people find our website and which marketing campaigns bring visitors to it. Website statistics are not linked to your Selrey account, and no account, financial, or banking information is involved.

3.4 Information Processed On-Device Only

• Voice input: If you dictate messages using voice-to-text, audio is processed by Apple's Speech Recognition framework (SFSpeechRecognizer) and is never transmitted to Selrey's servers. Depending on device model, locale, and iOS settings, Apple's framework may route speech to Apple's own servers for processing; this is governed by Apple's privacy policy, not Selrey's. You can require on-device-only recognition by disabling "Improve Siri & Dictation" in iOS Settings > Privacy & Security > Analytics & Improvements.
• Google OAuth token: If you connect Google Drive, your Google OAuth access token is stored only on your device in iOS Secure Storage (Keychain). It is never transmitted to or stored on Selrey's servers.

3.5 Anonymous Learning Signals (Opt-In)

You may choose to contribute anonymous merchant classification signals to Selrey's shared learning system. This is off by default. If you enable it in Settings > Privacy > "Improve AI for everyone", we record a contribution identified only by a pseudonymous HMAC-SHA256 hash — your user ID and any personal identifiers are not included. No financial amounts are included. You can withdraw your participation at any time. See Section 20.

How We Use Your Information

We do not use your personal information for advertising or for sale to third parties.

Bank & Financial Account Data (Plaid)

Selrey uses Plaid Inc. to connect your bank, credit card, and investment accounts. When you link an account:

• You authenticate directly with your financial institution through Plaid's secure interface. Your bank username and password are entered only into Plaid's interface and are never seen by or transmitted to Selrey.
• Plaid provides Selrey with read-only access to your account data: account names, masked account numbers (last four digits), institution name, current balances, transaction history, credit card liability details, and investment holdings.
• Selrey cannot initiate transactions, move funds, or make payments on your behalf.
• Plaid's access credential (allowing ongoing data retrieval) is stored securely on our servers in a restricted server-side database column. It is not accessible to authenticated users or client applications, is never included in API responses, and is never logged. All data in our database, including this credential, is protected by AES-256 encryption applied at the storage layer by our database infrastructure provider.
• When you disconnect a bank account or delete your Selrey account, we call Plaid's API to revoke access, ending Plaid's authorization to share your data with us.
• Disconnecting deletes the imported data. When you disconnect a bank in the app (Settings > Connected > the bank > Disconnect), Selrey permanently deletes from its database the accounts, balances, transaction history, credit card details, statement snapshots, and payment reminders that were imported from that connection, in every workspace. This cannot be undone. Data that Plaid itself holds is governed by Plaid's policies and the Plaid Portal described below.
• You can also review the connections Plaid maintains on your behalf, disconnect them, and request deletion of data stored in Plaid's own systems through the Plaid Portal at my.plaid.com.

Selrey integrates with Plaid as a third-party service provider under Plaid's developer agreement and policies. Plaid's privacy practices for end users are described in Plaid's End User Privacy Policy at plaid.com/legal/#end-user-privacy-policy.

Artificial Intelligence Features (Anthropic)

The AI assistant and document analysis features in Selrey are powered by Anthropic PBC's Claude API. Anthropic processes data as our service provider under Anthropic's commercial API terms.

AI features are optional and are off until you turn them on. Nothing is sent to Anthropic until you have reviewed the in-app AI disclosure and turned AI features on. You can turn them off at any time. Section 6.5 describes how this works and what happens when you withdraw your consent.

6.1 What We Send to Anthropic

When you use AI features, we send Anthropic a prompt that may include:

• Your first name
• A summary of your linked accounts: account and card names with the last four digits (masked), account type and subtype, current and available balances, credit limits and utilization, upcoming payment due dates, minimum payments, and autopay status
• Transaction context: merchant names and transaction descriptions, amounts, dates, spending categories, and detected recurring subscriptions. A summary of recent activity accompanies your chat request; when your question requires it, the assistant may retrieve matching transactions from the current and previous calendar year
• Your self-reported credit score and monthly income, if you have provided them (Personal workspace only)
• Your savings goals and budget context
• Your AI memory facts (short summaries like "User is saving for a house")
• Your chat message and recent conversation history for the current session, including the assistant's earlier replies
• Your device time zone
• For document processing: the document image or PDF you submitted for AI extraction
• Images or photos you attach to an AI chat conversation for vision-based analysis, and the file name of a PDF you attach
• For Tax Center and CPA features: merchant names and amounts of business transactions, for AI-assisted tax categorization and preparation of CPA export packages
• The public product name of a credit card, to look up its published reward rates

This information is provided to Anthropic only in connection with an AI request you make — for example, sending a chat message, uploading a receipt, or generating a tax report. Additional transaction history is retrieved only when needed to answer your question.

We do not send Anthropic your: Supabase user ID, bank account numbers, bank access credentials, email address, phone number, or government-issued identifiers.

6.2 Anthropic's Data Use and Retention

Under Anthropic's Commercial Terms of Service, Anthropic does not train its AI models on content submitted via the commercial API. This is distinct from Anthropic's consumer product terms.

Under Anthropic's commercial terms and Data Processing Addendum, Anthropic acts as our processor and processes your data to provide the API service and for trust-and-safety monitoring. Anthropic states that API inputs and outputs are deleted from its systems within 30 days by default, except where longer retention is required to enforce its usage policies or by law. Anthropic is contractually required under its Commercial Terms and Data Processing Addendum to process this data only as our service provider and on our instructions, to safeguard it with security measures including encryption at rest and in transit, access controls, breach notification and deletion commitments, and to protect it to a level that is the same as or equivalent to the protections described in this Privacy Policy and required by applicable App Store privacy requirements.

These retention statements are Anthropic's, not ours. Once a request has been transmitted, Selrey cannot recall, inspect, or delete the copy held by Anthropic; its deletion follows Anthropic's own schedule and exceptions. Turning AI features off, deleting a chat, or deleting your Selrey account does not shorten Anthropic's retention of data already transmitted.

Anthropic's privacy information is available at anthropic.com/legal/privacy, and its commercial terms at anthropic.com/legal/commercial-terms.

6.3 No Use of Your Data to Train Language Models

Selrey does not use your personal information to train, fine-tune, or improve any large language model, and does not sell or share it for that purpose. As described above, Anthropic does not train its models on content submitted through the commercial API.

6.4 AI Usage Records

We maintain records of AI API usage for service health and cost management. These records contain only token counts, model identifiers, and cost data — no conversation content. When you delete your account, your identifier is removed from these records immediately; the remaining anonymized usage record is automatically deleted 90 days later. See Section 13.

6.5 Your AI Choice: Consent and Withdrawal

• Turning AI on. The first time you use an AI feature (for example, sending a chat message or uploading a document to the Tax Center), the app shows an AI disclosure describing what is sent to Anthropic. AI features are enabled only after you tap "Allow AI Features"; choosing "Not Now" sends nothing to Anthropic and the rest of Selrey keeps working. Your choice and its time are stored with your account.
• Turning AI off. You can withdraw your consent at any time with the "AI features" switch in Settings or in Help > Privacy & Data Controls. From that moment our servers refuse new AI requests from your account — chat, document analysis, AI tax categorization, CPA export classification, reminder and subscription parsing, memory extraction, and card reward lookups — and nothing new is sent to Anthropic. A request that was already in progress when you turned AI off may complete.
• What withdrawal does not do. Turning AI features off does not delete your existing chat history, your AI memory facts, or the document metadata already extracted into your account. They remain stored with your account until you delete the chat or clear chats, or delete your account (Section 14). It also does not delete information already transmitted to Anthropic (Section 6.2).
• Turning AI back on. You can re-enable AI features at any time from the same switch or from any AI feature; the AI disclosure is shown again before AI features are turned on.

Apple Services & In-App Purchases

7.1 In-App Purchases

All subscription and in-app purchases are processed by Apple Inc. through the App Store. Selrey does not collect or store your payment card information. We receive from Apple only: a pseudonymous transaction identifier, the product purchased, the purchase date, and subscription status changes via Apple's App Store Server Notifications (ASSN).

7.2 Apple App Store Server Notifications

Apple sends us cryptographically signed notifications when your subscription status changes (new subscription, renewal, cancellation, refund). We verify these notifications using Apple's published certificate chain — all verification happens locally. We store only a subset of notification data for compliance purposes. See Section 16.

Selrey operates under Apple's standard Paid Application and Free Application agreements, which govern Apple's role in processing transactions on our behalf.

7.3 iOS Speech Recognition

If you use voice dictation in Selrey, audio is processed by Apple's Speech Recognition framework (SFSpeechRecognizer) and is never transmitted to Selrey's servers. Depending on device model, locale, and iOS settings, Apple's framework may route speech to Apple's own servers for processing; this is governed by Apple's privacy policy, not Selrey's.

Cloud Document Storage

8.1 Architecture: Your Files Stay in Your Cloud

Selrey's Tax Center feature stores your documents in your own cloud storage account — not on Selrey's servers. When you connect a cloud provider and capture or select a document:

1. The document is uploaded from your device directly to your connected cloud account (currently Google Drive; see the note on other providers below).
2. Selrey reads the document back temporarily to perform AI extraction.
3. The document image is sent to Anthropic's API for OCR and field extraction (merchant, amount, date, category).
4. The AI-extracted metadata is saved to your Selrey account; the raw document file remains only in your cloud account.

Selrey stores in its database only: a reference to the file in your cloud (the cloud provider's file ID), a link to open the file in your cloud provider's app, and AI-extracted fields (merchant name, amount, date, tax category, document type, a short OCR excerpt). No raw document file is stored on Selrey's servers.

8.2 Google Drive Integration

If you connect Google Drive as your document cloud:

• We request the drive.file OAuth scope. This limits access to files and folders that Selrey creates on your behalf in your Google Drive — we cannot access your broader Google Drive content.
• Documents are saved into a Selrey/CPA [year]/[folder]/ directory in your Google Drive. Documents saved before the product was renamed remain in your existing SapphireCore/CPA [year]/[folder]/ directory and are not moved or deleted.
• We also request your Google account email and profile for display purposes only (shown in the connected account UI).
• Your Google OAuth token is stored only on your device in iOS Secure Storage (Keychain). It is never transmitted to or stored on Selrey's servers.
• Disconnecting Google Drive. When you disconnect Google Drive in the Tax Center ("Connect Cloud Storage" > Disconnect), the app asks Google to revoke Selrey's authorization, removes the tokens from your device, and marks the connection as disconnected. Disconnecting does not delete the files already saved in your Google Drive, nor the document metadata and AI-extracted fields already stored in your Selrey account; you can delete documents individually in the app or delete your account.
• Account deletion. When you delete your Selrey account, the app attempts to revoke your Google OAuth authorization with Google and removes the tokens from your device after the server-side deletion has completed. This revocation is best-effort: if it cannot be completed (for example, your device is offline), Selrey's access remains listed in your Google Account until the token expires or you remove it yourself at myaccount.google.com/permissions.

Google's privacy practices are described at policies.google.com/privacy.

8.3 CPA Export Reports

When you generate a business tax export (CSV and PDF), the generated report files are temporarily stored in Selrey's secure cloud storage to allow you to download or share them. These export files contain transaction data (merchant names, amounts, dates, tax categories) but not raw bank credentials or account numbers. They are associated with your account and deleted when your account is deleted.

Email Communications

We use Resend Inc. to deliver emails on our behalf.

9.1 Transactional Emails

We send emails required for account operation: account verification, one-time passwords, password reset, security alerts, and email address change confirmations. These cannot be unsubscribed from while you have an active account.

9.2 Lifecycle and Informational Emails

We may send lifecycle emails (such as onboarding tips or re-engagement messages) as permitted by applicable law. You may opt out at any time by clicking the one-click unsubscribe link included in any such email, or by emailing support@sapphirecore.net. Opting out through the unsubscribe link removes you from all lifecycle and marketing communications immediately; requests sent by email are honored promptly. The transactional and service emails described in Section 9.1 are not affected.

9.3 Annual Renewal Reminders

If you have an active annual subscription, California law (B&P Code §17602(h)) requires us to send you a renewal reminder before your annual renewal date. This email contains your plan name, renewal date, and cancellation instructions. It is transactional in nature and required while you have an active annual subscription.

9.4 Email Engagement Data

Resend reports delivery and engagement events (delivered, opened, clicked, bounced) to us. Open events may include the IP address and mail client reported to Resend at open time. We use this only to manage email deliverability and suppress future emails to addresses that have bounced or unsubscribed.

Push Notifications

We use Expo's push notification infrastructure, which routes through Apple Push Notification service (APNs). When push notifications are enabled, your device push token is stored in our database and used to deliver financial alerts, payment reminders, and goal notifications. Push notification content may include balance amounts or reminder text.

We do not share push tokens with advertisers or use them for cross-app tracking. Push tokens are deleted when you delete your account. You can disable push notifications at any time in iOS Settings > Notifications > Selrey.

Market Data Services

For market news and investment data, Selrey calls the APIs of Finnhub, Financial Modeling Prep, and MarketAux. We send only ticker symbols or general market data requests — no personal identifiers, account data, or financial details about you are transmitted to these services. Market data is cached and served to all users from that cache.

How We Share Your Information

12.1 Service Providers

We share your information with the following providers who process data on our behalf:

12.2 What We Do Not Do

• We do not sell your personal information.
• We do not share your personal information with advertising networks or data brokers.
• We do not share financial account data or transaction history for purposes other than delivering the Service.

12.3 Anonymous Learning Signals

If you opt in (Section 3.5), we contribute pseudonymized merchant classification signals to our internal learning system. These signals are identified only by an HMAC-SHA256 hash — they are not associated with your name, email, or user ID. These signals are not shared externally.

12.4 Legal Disclosures

We may disclose information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety, rights, or property of Selrey, our users, or the public.

12.5 Business Transfers

If Selrey is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

Data Retention

We retain your personal information for as long as your account is active, plus the periods described below.

Account Deletion

You may delete your account at any time from Settings > Security > Delete Account. The same action is available from Help > Privacy & Data Controls and from the subscription screen. The deletion process includes the following steps, in order:

1. Your Plaid bank connections are revoked with Plaid, ending their authorization to share your data with us.
2. All personal financial data is deleted from our database, including bank accounts, transactions, subscriptions, chat history, AI memory, tax document metadata, goals, reminders, notifications, settings, usage and rate-limit rows, and workspace data.
3. Your user profile, email preferences, and authentication account are deleted; your identifier is removed from the merchant correction log and the AI usage records (Section 13).
4. Selrey-hosted files (profile photo and CPA export reports) are deleted from our cloud storage.
5. After the server confirms deletion, the app attempts to revoke your Google OAuth authorization (if connected) with Google and removes all tokens and account data from your device (see Section 8.2 for what happens if revocation cannot complete).

After deletion, only the records described in Section 13 as surviving deletion remain: anonymized records, legally required compliance records, and the legal acceptance records. Deleted data may also persist for a limited period in provider backups as described in Section 13. Account deletion cannot be reversed.

Your raw tax documents stored in your Google Drive or other connected cloud account are not affected by Selrey account deletion — those files remain in your cloud account under your control.

U.S. Privacy Rights

We voluntarily provide the following privacy request options to all U.S. users. Where applicable state law grants you additional rights and requires us to honor them, we will do so. If your state's privacy law imposes specific obligations on businesses of our size and data practices, we will comply with those requirements.

15.1 Access

You may request information about the personal information we hold about you. Contact us at support@sapphirecore.net.

15.2 Deletion

You may delete your account and most associated personal information using the in-app deletion feature (Settings > Security > Delete Account). For requests beyond what the in-app feature covers, email us at support@sapphirecore.net. Some information may be retained as described in Section 13 where required by law or legitimate interest.

15.3 Correction

You may correct your profile, financial settings, and most personal information directly in the app. For corrections we cannot support in-app, contact us by email.

15.4 No Sale of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

We do not track you across third-party websites or apps over time, we do not permit third parties to collect information about your activity across other websites or apps through the Service, and we do not use cross-site tracking for advertising. Our website analytics (Section 3.3) is aggregate, uses no cookies or persistent identifiers, and does not follow you to other websites. Because we do not engage in such tracking, we do not respond to browser "Do Not Track" signals.

15.5 Opt Out of Sharing (Anonymous Signals)

If you have enabled the opt-in anonymous merchant signal contribution, you may withdraw at any time in Settings > Privacy > "Improve AI for everyone". See Section 3.5.

15.6 Non-Discrimination

We will not discriminate against you for exercising any privacy right described in this Policy.

15.7 How to Submit a Request

Email support@sapphirecore.net with "Privacy Request" in the subject line. We will respond within 45 days. We may need to verify your identity before processing your request.

California Automatic Renewal Law (ARL) Disclosures

Selrey's automatically renewing subscriptions are subject to California Business & Professions Code §17602 (as amended by AB 2863, effective July 1, 2025).

16.1 Consent Records

For each subscription purchase, we maintain a consent record as required by §17602(a)(6). This record contains: Apple's pseudonymous transaction identifier, the purchase date, and a cryptographic hash (SHA-256) of Apple's signed transaction document (JWS), which allows an auditor to verify the record against Apple's authoritative transaction history. No raw personal information (name, email, address) is stored in these records. Records are retained for the legally-required period — see Section 13.

16.2 Annual Renewal Reminders

If you have an active annual subscription, we send a renewal reminder 25–35 days before your renewal date as required by §17602(h). The email contains your plan name, renewal date, and cancellation instructions. We retain pseudonymized delivery evidence (a one-way hash of your email address) to demonstrate compliance — the raw email address is not stored in compliance records.

16.3 Cancellation

Cancel at any time through iOS Settings > Apple ID > Subscriptions, or through Settings > Subscription in the Selrey app.

Sensitive Personal Information

The following categories of information we process may be considered sensitive under applicable privacy laws:

• Financial account data: Bank account names, balances, and transaction history accessed via Plaid. We use this data solely to operate the Service.
• Login credentials: Email address and password. Passwords are not stored in plaintext.

We do not collect: Social Security Numbers, government-issued ID numbers, biometric identifiers, health information, precise geolocation, or racial or ethnic origin data.

We do not use sensitive personal information for advertising or to make inferences about characteristics unrelated to delivering the Service.

Children's Privacy

Selrey is for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If you are under 18, please do not use the Service.

If we learn that we have collected personal information from a person under 18, we will delete it promptly. If you believe we may have done so, contact us at support@sapphirecore.net.

Security

We implement technical and organizational measures to protect your personal information, including:

• Password handling: Selrey does not store your plaintext password. Authentication is managed through Supabase's authentication infrastructure, which handles credential security on our behalf.
• Account verification and password reset: Registration, email verification codes, sign-in, and password reset are handled by Supabase Auth, our authentication provider. The one-time codes it emails to you are stored only as one-way hashes, expire automatically, and are never stored or logged in plaintext by Selrey. Codes used to confirm an email address change inside the app are stored only as keyed one-way hashes (HMAC-SHA-256) and cannot be recovered from our database in plaintext.
• Bank access credentials: Plaid's access token is stored server-side in a restricted database column that client applications cannot access. It is never returned to the client application and is never logged. Our database storage is protected by AES-256 encryption at rest.
• IP address privacy: IP addresses associated with bank connection events are stored only as non-reversible SHA-256 hashes. Raw IP addresses are not stored.
• Database access controls: Row-level security (RLS) is enforced on all user data tables. Server-side code authenticates your identity from a verified token — never from values you supply in the request body.
• Error reporting: Client-side errors reported to our error monitoring service (Sentry) are scrubbed to remove email addresses, long numeric sequences, and dollar amounts before transmission. Identifiers in error reports do not allow re-identification.
• Google OAuth token: Stored only on your device in iOS Secure Storage (Keychain). Never transmitted to Selrey's servers.
• Apple notification verification: All Apple App Store Server Notifications are cryptographically verified against Apple's published certificate chain before processing.

No security system is fully impenetrable. We cannot guarantee the security of data in transit over the internet. You are responsible for keeping your account credentials confidential.

Your Privacy Choices

Contact & Privacy Requests

For questions about this Privacy Policy, to exercise your privacy rights, or to report a privacy concern:

PDG & Associates LLC (Selrey is a product of PDG & Associates LLC)
3900 Alton Rd, Apt 206
Miami Beach, FL 33140
United States
Email: support@sapphirecore.net

We will respond to verifiable requests within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial period.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the effective date at the top of this document and provide notice within the Selrey application. For changes that materially affect how we handle your personal information, we will provide advance notice before the changes take effect where required by applicable law or where appropriate given the nature of the change.

Prior versions are available upon request by emailing support@sapphirecore.net.

Definitions

• Personal information — any information that identifies or is reasonably capable of identifying you as an individual.
• Pseudonymized — data that has been processed so it can no longer be attributed to a specific individual without additional information (such as a key or algorithm). Unlike anonymization, pseudonymization may be reversible by someone who holds the linking information.
• Service — the Selrey iOS application and related features and services.
• Service provider / processor — a company that processes personal information on our behalf, under our instructions, and subject to appropriate data protection safeguards.
• Plaid — Plaid Inc., our bank connectivity provider.
• Anthropic — Anthropic PBC, the provider of the Claude AI API that powers Selrey's AI features.
• Apple ASSN — Apple App Store Server Notifications: Apple's system for sending cryptographically signed subscription status events to Selrey.