PRIVACY POLICY
Effective Date: November 20, 2025
This Privacy Policy describes how SaveWithLuna ("we", "us", "the Service") collects, uses, and protects your personal data.
1. DATA CONTROLLER
Timotej Žitnik s.p.
Ulica pohorskega bataljona 3a
2000 Maribor, Slovenia
VAT: SI81525702
Email: hello@savewithluna.com
2. PERSONAL DATA WE COLLECT
Account & Identity Data:
- Name (optional)
- Email address
- Password (encrypted)
Billing Data:
- Billing address
- Payment details (processed by Shopify Payments – we do not store full card numbers)
Usage & Technical Data:
- IP address
- Device type, browser information
- Pages viewed and actions taken
- Application usage events
Financial Data Entered by User:
- Income, expenses, budgets, categories, notes
- (Stored securely; never shared with 3rd parties)
3. HOW WE USE YOUR DATA
Contract Necessity:
- Provide access to the Service
- Manage subscriptions and payments
- Maintain account authentication
- Deliver budgeting features
Legitimate Interest:
- Improve product performance
- Prevent fraud or abuse
- Maintain security and stability
Consent:
- Cookies
- Optional communication (e.g., updates)
4. COOKIES
We use:
- Necessary cookies (required for login, security)
- Functional cookies (preferences)
No marketing or advertising cookies are used.
5. DATA STORAGE & PROCESSORS
We store and process data using:
- Shopify (payments, checkout)
- Supabase (database, hosting)
- Email service providers (transactional emails)
All providers comply with GDPR and have Data Processing Agreements (DPAs) in place.
6. INTERNATIONAL TRANSFERS
Some data may be processed outside the EU. Transfers occur under GDPR-approved safeguards such as Standard Contractual Clauses (SCCs).
7. YOUR GDPR RIGHTS
You may request at any time:
- Access to your data
- Correction
- Deletion
- Restriction of processing
- Withdrawal of consent
- Data portability
- Objection to processing
To exercise your rights, email: hello@savewithluna.com
8. DATA RETENTION
We retain:
- Account data: until account deletion
- Billing data: for 5–10 years (legal requirement)
- Usage data: up to 36 months
- Financial entries you create: until you delete them or your account
9. SECURITY
We use industry-standard security measures, including SSL encryption, secure password hashing, and server-side authentication.
10. CHILDREN'S PRIVACY
The Service is not intended for individuals under 18. We do not knowingly collect data from minors.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. The "Effective Date" indicates the latest revision.
12. CONTACT
For privacy questions or GDPR inquiries: hello@savewithluna.com
