Privacy Policy

1. Overview

This Privacy Policy explains how Savvy Duty, a division of Solid Axis Group Limited (“we”, “us”, “our”), collects, uses, and protects your personal information when you use our website, applications, and services (the “Service”). We are committed to handling your information responsibly and only as described here.

2. Who is responsible for your data

The data controller responsible for the personal information processed through the Service is Solid Axis Group Limited (NZBN 9429051604783, New Zealand Company Number 8914308), a company registered in New Zealand, trading as Savvy Duty. Registered office: 6 William Lewis Drive, Sockburn, Christchurch 8042, New Zealand. Postal address: PO Box 8258, Riccarton, Christchurch, New Zealand. This policy is governed by New Zealand law, including the Privacy Act 2020. If you have any questions or requests, contact us at hello@savvyduty.com.

3. Information we collect

Depending on how you use the Service, we may collect:

• Account information — your name, email address, and a securely hashed password.
• Profile and personal content — your WHY, goals, habits, check-ins, journals, counsel sessions, sprints, and other content you create.
• AI coaching conversations — the messages you exchange with the AI coach.
• Financial information — read-only account and transaction data you choose to connect via open-banking providers, and any budgeting or net-worth entries you make.
• Subscription and billing information — your plan and billing status (card details are handled by our payment provider, not stored by us).
• Device and usage data — log data, device and browser information, and how you interact with the Service.
• Notifications — push-notification subscriptions, if you enable them.
• Leads and waitlists — details you submit through early-access, VIP, or book-waitlist forms (such as name, email, phone, and any notes).

4. How we use your information

We use your information to:

• Provide, personalise, and improve the Service;
• Power features such as AI coaching, progress tracking, and financial summaries;
• Process subscriptions and manage your account;
• Communicate with you about the Service, including updates you have asked for;
• Keep the Service secure and prevent abuse;
• Comply with our legal obligations.

5. AI processing

AI coaching features are powered by a third-party AI provider (Anthropic). When you use the AI coach, your messages and relevant context are sent to that provider to generate a response. Please avoid sharing sensitive information you would not want processed by a third party. The AI coach is automated and may produce inaccurate output — see our Terms of Service.

6. Open-banking and financial data

If you connect a financial account, we use regulated open-banking providers (such as Akahu, Plaid, or Basiq, depending on your region) to retrieve read-only data. We do not store your bank login credentials, and we cannot move money. You can disconnect a financial account at any time, and we will stop retrieving new data.

7. How we share information

We do not sell your personal information. We share it only with service providers who help us run the Service, and only as needed, including:

• AI provider (Anthropic) — to power AI coaching;
• Open-banking providers (Akahu, Plaid, Basiq) — to retrieve financial data you connect;
• Email and CRM provider — to manage communications and waitlists;
• Hosting and storage providers — to operate the Service and store uploads;
• Push-notification services — to deliver notifications you opt into.

We may also disclose information where required by law, to protect our rights, or in connection with a business transfer.

8. Cookies and sessions

We use essential cookies and similar technologies to keep you signed in and to operate core features. We do not use them to sell your data.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymise your personal content within a reasonable period, except where we must retain it by law.

10. Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your rights and choices

Depending on where you live, you may have the right to:

• Access and export your data — you can export your data from your account settings;
• Correct inaccurate information;
• Delete your account and associated personal content;
• Opt out of marketing emails at any time;
• Disconnect any connected financial account.

To exercise a right we cannot action in-app, contact us at hello@savvyduty.com. If you are in New Zealand and are not satisfied with our response, you may raise a complaint with the Office of the Privacy Commissioner (privacy.org.nz).

12. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.

13. International transfers

Our providers may process your information in countries other than your own. Where we transfer information internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The “last updated” date above shows when this policy was last revised.

15. Contact us

Questions about your privacy? Email us at hello@savvyduty.com, or write to Solid Axis Group Limited, PO Box 8258, Riccarton, Christchurch, New Zealand.