YOUR MONEY, YOUR SPACE

Privacy, in plain language.

Effective October 22, 2026. This page describes the Savelo web beta offered by Elo AI. It describes the current web app; future native, bank, AI or proof features will have their own accurate disclosures before they are enabled.

Your financial records stay in your browser.

Entries, CSV contents, receipt line items, budgets and goals are processed locally. The app has no financial-record upload endpoint, advertising integration, third-party analytics, bank connection or cloud-model connection. Sample mode uses illustrative records in memory and does not save a vault.

Your passphrase protects the stored copy.

A 600,000-iteration PBKDF2-SHA256 derivation produces the root key material. Elo AI’s eKAP-style HKDF isolation derives separate AES-256-GCM keys for transactions, receipts, budgets, goals and import history, bound to a random vault profile. Encryption authenticates the profile, category and schema version. The passphrase is not stored, and derived root keys remain in memory only while unlocked.

This is encryption and key isolation. It is not a zero-knowledge proof of a balance, bank authenticity or financial eligibility. We do not claim that encryption alone proves those properties.

Keep a backup you control.

The encrypted vault is stored in this browser’s local storage on the domain you use. Clearing browser data, changing browsers, losing the device, or forgetting the passphrase can remove access. We cannot reset your passphrase or recover your records. Download encrypted backups and keep the passphrase separately. Restoring a backup replaces the local vault after your explicit choice.

What the hosting provider can see.

Cloudflare serves the app and may process connection metadata such as IP address, request time, requested path and user agent to deliver and protect the service under its policies. These connection details are separate from your financial records. We do not put financial data in URLs or send it to application logs.

What encryption does not protect against.

A person using your unlocked browser can see your records. Malware, a compromised browser or operating system, or malicious app code could access records while the vault is unlocked. Category isolation does not prevent a compromised running app with access to the root from deriving other category keys. Browser locking and encryption reduce exposure; they do not make a device immune to compromise.

Imports, exports and sharing.

CSV parsing happens locally. Exported backups contain encrypted financial records plus format and key-derivation metadata. No sharing, bank verification, blockchain anchoring or financial ZKP is enabled in this beta. Contacting support by email is your separate choice; do not email passphrases, bank credentials or transaction exports.

Control and contact.

You can lock the vault, remove individual records, restore an encrypted backup, or clear this site’s data through browser settings. Back up first if you want to keep your records. Privacy questions can be sent to support@eloai.co.