Privacy Policy.

01Who we are

Wakeel is operated by Sawt Tech LLC, a private AI studio based in Muscat, Sultanate of Oman. Wakeel is not a regulated financial service or a financial adviser. It is a personal decision-support tool for households and the family members they choose to invite.

02What we collect

We collect the minimum we need to run the product, and nothing else:

• Your account email and name — from Google sign-in or email/password registration, used to create your account and sign you in.
• A token for your Kubera account — granted by you when you connect Wakeel, used to read your live portfolio positions and net worth. It is encrypted at rest (AES-256-GCM) and decrypted only in memory at the moment of each request.
• Custodian IDs you paste into Settings — used to map your bank accounts to your Kubera book.
• Household & family-access data — the family members you invite, the sections you share with them, and (if you set one up) your Islamic Will and legacy-access contacts.
• Property documents you upload — stored privately in Firebase Storage and accessible only through short-lived signed links.
• Billing data — when you subscribe, our payment processor (Tap Payments) handles your card. We store only a payment token and your subscription status — never your full card number.
• Your preferences — currency, language, briefing time, privacy mode.

03What we don't collect

• We don't collect your Kubera password — we never see it. Authorisation happens via OAuth and a scoped read-only token.
• We don't collect your bank statement PDFs. They are parsed locally in your browser and never uploaded to Sawt Tech servers.
• We don't collect tracking data for advertising. We don't use third-party analytics tags. We don't sell, share, or rent your data to anyone.

04How your portfolio data is processed

To generate your morning briefing and Ask-CFO answers, Wakeel sends a snapshot of your portfolio to OpenRouter, which routes the request to a frontier model (currently Anthropic Claude for complex analysis, Google Gemini or OpenAI for day-to-day questions, statement parsing, and chart reads). Requests are encrypted in transit. We require zero data retention and no training use on the providers we allow. The response is returned to your browser and stored only in your session.

Sawt Tech staff cannot see your portfolio data or briefing content. We do not log it. We do not retain it. The only operator-side artefact is an anonymised count of API calls per user, used for billing and rate-limiting.

05Bank statements & documents

When you drop a PDF bank statement into Wakeel's Cash Management module, the parsing happens entirely in your browser using JavaScript — the file is never uploaded to our servers. We extract opening balance, closing balance, and transaction count, then write the result back to your Kubera book via the read-write extension of your token (which you grant explicitly).

06Sign-in & authentication

We use Firebase Authentication for sign-in, via either Google or an email and password. When you use Google, Wakeel requests the minimum scope — your name and email. We never request access to your Gmail, Drive, Calendar, or any other Google service.

06bWho processes your data (subprocessors)

We rely on a small number of trusted providers to run Wakeel. Each receives only the data needed for its function:

• Vercel — application hosting (servers in the Frankfurt, EU region).
• Google Firebase — authentication, database, and document storage.
• OpenRouter — routes AI requests to the model providers below; does not train on your data.
• Anthropic (Claude) — complex briefings and Ask-CFO reasoning; data is not used to train models.
• Google (Gemini) — day-to-day Ask-CFO, statement parsing, and chart reads; data is not used to train models.
• OpenAI — fallback model if the primary provider is unavailable; data is not used to train models.
• Perplexity — supplies live market facts when your question needs current public-market data.
• Kubera — the portfolio source you connect.
• Tap Payments — processes subscription payments.
• Purelymail — sends transactional email (invitations, alerts, receipts).
• Market-data providers — public price/quote lookups for your holdings.

07AI training & learning

Your data is never used to train AI models — neither ours, nor our model providers' (Anthropic, Google, OpenAI), nor OpenRouter's. We send requests only to zero-data-retention endpoints and deny providers that collect prompts for training.

08Cookies

We use a single first-party session cookie to keep you signed in. We don't use advertising cookies. We don't fingerprint your browser. We don't share session data with third parties.

09Data location & retention

The data we hold (sign-in records, preferences, encrypted Kubera tokens, household and family-access data, property documents, and subscription status) is stored on Vercel infrastructure in the Frankfurt (EU) region and in Google Firebase. We retain it for as long as your account is active. If you delete your account, we delete this data within 30 days.

10Your rights

You can request a copy of all data we hold about you, ask us to correct it, or delete it. You can delete your account and all associated data yourself from Settings at any time, or email support@sawt.tech and we'll handle it — usually within one business day.

11Changes to this policy

If we change this policy materially, we will notify invited family members by email and post the updated version here with a new "Last updated" date.