Saken

Privacy Policy

Last updated 24 July 2026

Saken is a shared financial ledger for residential buildings. One resident (the admin) records the building’s budget, the money collected from each apartment, and what it is spent on; the other residents can see where their money went. This policy explains exactly what information that involves, where it is stored, and who can reach it.

Saken contains no advertising, no analytics, and no third-party tracking of any kind. We do not build profiles, we do not track you across apps or websites, and we never sell or rent personal information.

1. Who is responsible

Saken (“we”) operates the Saken web application at saken.com and the Saken mobile app. If you have any question about this policy or your information, contact us at hello@saken.com.

An important distinction: your building’s admin decides what gets recorded about your apartment and your payments. For that building’s records, the admin directs how the information is used, and we provide the software that stores it on their behalf.

2. Information we collect

Account information

Your name, and the email address and/or phone number you sign in with. We record which sign-in method you used (Google, email link, email and password, or phone code) and your language preference (English or Arabic). We never see or store your Google password. If you use email and password, the password is stored only as a salted hash by our authentication provider — never in readable form.

Information your admin enters about you

To set a building up, an admin enters apartment labels, each apartment’s share value, and the name and contact details of the resident of each apartment. This means information about you may exist in Saken before you ever create an account, and even if you never create one. If you would like to know what a building holds about you, ask that building’s admin, or contact us at hello@saken.com.

Financial records

The building’s ledger: the annual budget and its line items, collections recorded against each apartment (amount, date, receipt number, payment method, notes), expenses (amount, vendor, category, date, notes), opening cash, carryover balances, and one-off special projects. These are records about a shared building fund, not about your personal bank accounts — Saken has no access to any bank, card, or payment network, and processes no payments.

Receipt images

If an expense is logged with a photo of a receipt, that image is stored and shown alongside the expense. On mobile, this is the only reason Saken asks for camera or photo-library access. Images are served through links that expire after a short period, rather than being publicly readable.

Mobile app

If you enable notifications, we store a push token for your device along with whether it is iOS or Android, so reminders can reach you. If you enable the app lock, the biometric check is performed by your phone’s operating system — your fingerprint or face data is never sent to us and never leaves your device. Your signed-in session is stored encrypted on the device, with the encryption key held in the operating system’s secure keychain. If you record something while offline, it is held on your device until it can be sent.

Technical information

Our servers keep standard logs (such as IP address, timestamp, and which endpoint was called) to operate the service, diagnose faults, and limit abuse. If crash reporting is enabled for a release, we receive diagnostic information about the error — configured to exclude personal information and to collect no performance or behavioural traces.

3. What we do not collect

  • No advertising identifiers, ad networks, or ad profiles.
  • No analytics or product-usage tracking SDKs.
  • No location data. Saken never requests location access.
  • No contacts, calendar, call logs, or SMS access.
  • No microphone access. The mobile app explicitly blocks the microphone permission.
  • No biometric data. It never leaves your device.
  • No bank, card, or payment-network credentials.

4. How we use information

  • To run the service: show the dashboard, calculate what each apartment owes, and produce reports and receipts.
  • To sign you in and keep you signed in securely.
  • To send transactional email you have asked for or that your admin triggered — sign-in links and invitations to join a building.
  • To send reminders and notifications, if you have enabled them.
  • To keep the service working and secure: diagnosing faults, preventing abuse, and enforcing rate limits.
  • To meet legal obligations where they apply.

We do not use your information to advertise to you, and we do not use it to train machine-learning models.

5. Who can see your information

Inside your building

Saken is built for transparency within a building. Members of a community can see the building’s finances, including per-apartment amounts due and paid, and the name attached to each apartment. Your role determines what you can change, but the building’s financial picture is deliberately shared with its members.

Share links

An admin can generate a link that shows the community’s read-only view. Anyone who has that link can open it without signing in, so it should only be shared with the building’s residents. The link contains a long, unguessable code; if it is shared more widely than intended, ask your admin to have it reissued.

Across buildings

Buildings are strictly isolated. If you belong to more than one, only the one you are currently viewing is in scope. Members of one building can never see another building’s data.

Our staff

A small number of authorised operators can access data to provide support, fix faults, and recover accounts. These actions are restricted and recorded in an internal, append-only audit log.

We do not sell your data

We do not sell, rent, or trade personal information, and we do not share it with advertisers or data brokers. We disclose information to third parties only as described below, or where we are legally required to.

6. Service providers

We use a small number of providers to run Saken. They process information on our instructions only:

ProviderWhat it doesWhere
SupabaseDatabase, sign-in, and file storageFrankfurt, Germany (EU)
RenderHosting for our APIFrankfurt, Germany (EU)
VercelHosting for the websiteGlobal edge network
ResendSending sign-in links and invitation emailsEU
ExpoMobile app builds, updates, and notification deliveryUnited States
GoogleOptional “Sign in with Google”Global
SentryCrash diagnostics, when enabled for a releaseEU / United States

Your building’s records are stored in the European Union. Where a provider processes information outside your country, that transfer is made under appropriate safeguards.

7. How long we keep information

A building’s financial records are kept for as long as the building uses Saken, because a ledger only makes sense as a complete history — removing past entries would misstate the current balance.

When a collection, expense, or community is deleted in the app, it is marked as deleted and hidden from everyone, rather than being erased immediately. This makes accidental deletions recoverable and keeps the audit trail intact. Receipt images are retained with the expense record they belong to. If you want information permanently erased, see your rights below — we will honour it unless we are required to keep it.

8. Security

  • All traffic is encrypted in transit (HTTPS), and stored data is encrypted at rest by our hosting providers.
  • Access rules are enforced by the database itself, not only by the app, so a request can only ever reach the building it belongs to.
  • Receipt images are reachable only through short-lived signed links.
  • On mobile, your session is stored encrypted with the key held in the operating system keychain, and can be additionally protected by an app lock.
  • Operator access is restricted and written to an append-only audit log.

No system is perfectly secure, but we take this seriously: the service is audited, and if a breach ever affects your information we will notify affected users and the relevant authority where the law requires it.

9. Your rights

You can ask us to:

  • Give you a copy of the personal information we hold about you.
  • Correct anything inaccurate.
  • Delete your account and personal information.
  • Restrict or object to how we use your information.
  • Withdraw consent — for example by turning notifications off.

Depending on where you live, these may be legal rights (for example under the GDPR if you are in the European Union, and under Lebanon’s Law No. 81/2018). We apply them to everyone regardless.

Write to hello@saken.comand we will respond within 30 days. One limit worth being upfront about: where you appear in a building’s shared ledger, we may need to keep the underlying financial entries so the building’s accounts remain correct, even after your account is removed. We will tell you if that applies.

You can leave a community at any time from the app’s settings, and an admin can delete a community they manage.

10. Children

Saken is intended for adults managing a building’s finances. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child’s information has been entered into Saken, contact us and we will remove it.

11. Changes to this policy

If we change how we handle information, we will update this page and change the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

12. Contact

Questions, requests, or complaints: hello@saken.com. If you are in the European Union and are unsatisfied with our response, you may complain to your national data protection authority.

Saken — saken.com