Privacy Policy

Effective date: 8 October 2026

CAJGI Pty Ltd (“we” or “us”) operates Zalt and zalt.fyi. This policy covers the app, optional watch features and website. Questions or requests: [email protected].

Your privacy

Your plan stays on your device. No Zalt account, bank login or bank connection. Core planning works offline.
Backups are your choice. They are encrypted before saving to your chosen location. Keep your recovery code safe.
Some technical information leaves your device. Hosting providers, app stores and Google’s Android scanning service receive information described below. Sponsorship measurement excludes your financial records.
You control optional features. Manage backups, watch connections and permissions in Zalt or device settings. Delete backups and readable exports separately.

Your financial records

Balances, bills, spending, notes, income dates, accounts, savings goals and debts are stored in the app’s private storage on your device, along with your preferences. We do not receive your plan on a CAJGI server or use it to target ads. Zalt does not move money.

Backups, imports and exports

Zalt encrypts backups on your device before saving them to a location you choose, including iCloud Drive or Google Drive. Automatic backup saves copies after changes while Zalt is running, if enabled. Your storage provider controls cloud uploads and handles files under its own policy.

We cannot recover your recovery code or decrypt your backup. Keep the code private and safe.

If you choose account protection during backup setup, Zalt uses device authentication and also saves your recovery code in iCloud Keychain on Apple devices or in your Google account’s end-to-end encrypted backup (Block Store) on Android. Saving a recovery code separately is the alternative. Apple or Google handles the account copy under its own policies. Anyone who can sign in to that account and knows your device passcode or screen lock could open your backups. Zalt checks local storage acceptance, but cannot confirm cloud synchronization or recovery on another phone. iCloud Keychain must be enabled and finish syncing; Android recovery requires Google’s backup and device-setup restore. Keep a separate recovery code for account loss or switching platforms. Turn the option off in Backup and restore to remove the account copy; Zalt first asks you to confirm a separately saved code if you have not already done so. Turning backup off stops future copies; it does not delete existing ones.

Imports add information to your local plan. CSV and other readable exports are not encrypted backups and may expose financial information. Share them only with people or services you trust.

Photos and receipt scanning

Scanning processes photos and recognised text on your device, without sending them to CAJGI. Temporary scan copies are removed after processing; originals in your photo library remain. Only details you confirm enter your plan.

On Android, Google’s ML Kit scanning software collects diagnostic and usage data, including device and app information, an installation identifier, performance, errors and details about processing requests. This is separate from your photos and recognised text. See Google’s data disclosure, ML Kit terms and Privacy Policy. You can enter details manually instead.

Location, reminders and app lock

Location is used only when you choose to attach it to spending. Coordinates, accuracy and capture time stay with the entry and encrypted backups. There is no background location tracking or use for ads. Opening Maps sends coordinates to your map provider, without the amount or note.

Notifications and home-screen widgets may be visible to others. Optional app lock uses device authentication; Zalt receives the result, not your face data, fingerprint or passcode. Manage these features and revoke camera, location or notification permissions in app or device settings.

Watch connection

Watch features are off until enabled. Your paired watch receives plan status, such as a shortfall date, but not balances, account or bill names, notes or spending locations. Spending entered on the watch sends its amount, category and time to your phone.

Transfers use Apple’s or Google’s encrypted connection and may pass through their servers, not a CAJGI server. Turn the connection off in Zalt’s settings.

App update checks

Zalt checks Apple or Google for updates at most daily, without sending financial records or notes. The store receives technical information, including your IP address; Apple’s check also includes Zalt’s app identifier and your device’s region country. Apple and Google handle requests under their own privacy policies. Choosing an update opens the app store.

Website services

Cloudflare hosts our website and reporting services. It receives ordinary network information, including IP addresses and requested URLs, to deliver and protect services. Our reporting database does not store IP addresses. When enabled, Cloudflare Turnstile checks browser and device signals for abuse. See Cloudflare’s Privacy Policy and Turnstile Privacy Addendum.

Website measurement honours Global Privacy Control and Do Not Track. These controls do not govern native-app software diagnostics. Our measurement uses no advertising cookies or persistent visitor IDs. Your website language choice is saved in your browser; clear site data to remove it.

Support and other providers

Emailing us shares your address, message and attachments with us and our email provider so we can respond. Never send bank credentials, recovery codes or unnecessary financial records. App stores and operating systems may also collect diagnostics under their own settings and policies.

How long information remains

Local records: remain until deleted in Zalt or removed with the app’s data. On Android, clear app storage; on iOS, delete rather than offload the app. We cannot erase your plan remotely.
Backups and exports: delete separately, including cloud trash and version history. Deleting entries or uninstalling Zalt leaves older copies intact. Remove Zalt from your watch to remove its app data too.
Ad measurement: campaign totals have no automatic deletion date. Event identifiers are eligible for deletion after 48 hours, but removal depends on later measurement activity. If activity stops, identifiers may remain indefinitely. Browser verification expires after five minutes; expired session records can also remain until later activity triggers removal.
Support messages: kept as needed for requests, follow-up, disputes or legal obligations. You can request deletion; we will explain any required retention.
Provider-held information: storage files, service logs and diagnostics follow each provider’s retention and deletion policies.

Security and your rights

We use private device storage, encrypted backups and encrypted network connections. Local files rely on device protection; app lock does not separately encrypt every file. No system is completely secure.

Providers may process information outside your country. We may disclose information we hold when required by law or to protect rights and investigate abuse. This does not give us access to your local plan.

Depending on applicable law, you may have rights to access, correct, copy or delete information, restrict or object to processing, withdraw consent, or complain to a privacy regulator. Contact [email protected]. We may verify your request. Campaign totals are not linked to your identity, so we may be unable to isolate your contribution. There is no Zalt online account to delete.

Age requirement

Zalt welcomes teenagers and adults aged 13 or older, as stated in our Terms of Service. It is not intended for children under 13. If a child under 13 has sent us personal information, contact us so we can investigate and delete information we hold where appropriate. Users under legal adulthood must have a parent or guardian’s permission, as required by our terms; local laws may add further requirements.

Policy changes

We will update this page and its effective date when practices change. Where required, we will give additional notice or request consent.