Privacy Policy

Who we are and how to reach us

Sortd is a personal spending tracking and analytics app for the MENA region (including the United Arab Emirates, Saudi Arabia, Egypt, and the wider region), available for iPhone and Android. The app and this website (thesortd.com) are offered in both English and Arabic, with full right-to-left support for Arabic.

Sortd is a product of MENTECH, a company established in the Arab Republic of Egypt, with a registered address at [registered address]. For the purposes of this policy, MENTECH is responsible for the personal data described here.

How to reach us

• Privacy questions and requests: privacy@thesortd.com
• Product help and support: support@thesortd.com
• General enquiries: hello@thesortd.com

The scope of this policy

This Privacy Policy applies to the Sortd mobile app (on iPhone and Android) and to this website at thesortd.com. Together we refer to them as the Sortd services.

It explains how Sortd handles the information you provide and the information generated as you use the services. It does not cover the practices of third parties that Sortd does not control, such as your bank, your device's operating system, an app store, or an external AI provider you connect under Bring Your Own Key. Where those services are involved, their own terms and privacy notices apply.

Information we collect

Sortd is designed to work from the information and financial signals you already have and choose to provide, not from a direct connection to your bank. Sortd does not connect to your bank and never asks for or stores your bank login credentials. The information we handle falls into the following categories.

Account data

When you create an account we collect your email address and the sign-in identifiers you use, including identifiers from social sign-in if you choose that option.

The financial data you bring

As you use Sortd you build up a picture of your spending. This can include transactions, merchant names, amounts and currencies, account and card labels and the last four digits of a card, balances derived from your entries, budgets, savings goals, debts and installments, family-support commitments, and any notes and tags you add. Sortd only holds the data you choose to give it.

Raw captured content

To help you record spending, Sortd processes the content you capture. This includes bank message text (SMS or push notifications that you provide, or that flow in through an iOS Shortcuts automation you set up), receipt photos, voice notes, and files you import (CSV or Excel).

Optional biometric app lock

If you turn on the biometric app lock, the biometric check is performed by your device's operating system and the biometric data stays on your device. Sortd does not receive or store your biometric data.

Device and usage data

We collect usage and diagnostic data that helps us operate, secure, and improve the services, such as your interactions within the app and technical information from your device.

Website data

When you visit this website, and only after you accept analytics, we collect limited, non-sensitive marketing context. This is described in the Website analytics and cookies section below. The website never receives your financial data.

How we use your information

Sortd uses your information to run the services you expect and to keep them safe. Specifically, we use it to:

• Provide the core experience: read the information and financial signals you bring, turn bank messages, receipts, voice notes, and imports into draft transactions, and organize your transactions, budgets, goals, debts, and other records.
• Process captured content in tiers: Sortd first uses deterministic pattern matching and learned templates, and calls on AI extraction only for formats it does not yet recognize (a premium capability).
• Produce your spending analytics and show you insights and reminders, such as budget and review reminders and spending alerts.
• Maintain and secure the services, prevent misuse, and troubleshoot problems.
• Communicate with you about your account, important changes, and support requests.
• Meet legal, regulatory, and compliance obligations.

How Sortd AI works and the AI providers involved

Some Sortd features use AI. We call this Sortd AI. By default, Sortd AI uses third-party AI providers managed by Sortd. You can also Bring Your Own Key and connect your own provider.

When AI runs, and what is sent

AI is used only for tasks that need it, for example reading a bank message in a format Sortd does not yet recognize, or answering a question about your own figures. When an AI feature runs, the relevant content is sent to the applicable AI provider to be processed and returned. Depending on the feature, that content can be a bank message, receipt text, a voice transcript, or your question together with figures that Sortd has already computed on its servers.

Bring Your Own Key

Instead of the providers Sortd manages, you can connect your own account with OpenAI, Google Gemini, Anthropic Claude, DeepSeek, or a custom OpenAI-compatible endpoint. When you do, AI content is sent to the provider you chose, under your own arrangement with them. Your API key is encrypted at rest.

Grounded in your own data

When Sortd AI answers a question, the answer is grounded in your own data, computed on Sortd servers. The model is asked to phrase the numbers rather than invent them, and it never sees another user's data.

Confirmation-first and the control you keep

Sortd AI is confirmation-first. It proposes drafts and suggestions, but it never books, edits, or deletes a transaction on its own.

You review, edit, and confirm every transaction. Nothing is recorded in your records without you. This means you stay in control of what your Sortd data says at all times.

How and when we share information

Sortd does not sell your personal data. We share information only in the limited situations below, and only to the extent needed.

Categories of third parties

• AI providers: the third-party AI providers Sortd manages, or the provider you connect under Bring Your Own Key, when an AI feature runs. See How Sortd AI works above.
• Infrastructure providers: hosting, cloud storage, and related providers that run the service on our behalf.
• Website analytics: a privacy-friendly, consent-first analytics provider for this website, which never receives your financial data.
• Legal and safety: authorities or advisers where disclosure is required by law, or to protect rights, safety, and the integrity of the services.

International processing and transfers

Sortd operates in the MENA region, but some of the providers that help run the service, such as AI providers and infrastructure providers, may process data in other countries. As a result, your information may be processed outside your country of residence.

Where data is processed internationally, Sortd aims to keep appropriate safeguards in place so that your information stays protected in line with this policy and with applicable data protection laws.

How long we keep data

Sortd keeps your information for as long as your account is active and as long as we need it to provide the services, and afterwards only where a longer period is required or permitted by law.

Receipt images

When you capture a receipt, its text can be read on your device, and the image is deleted after processing, unless you choose to keep it as an attachment on the transaction.

When you delete

When you delete your account, Sortd removes your data as described in the account deletion flow, subject to any limited retention required by law. You can also ask us to delete specific data.

How we protect your data

Sortd uses a range of technical and organizational measures to protect your information.

• Data is encrypted in transit.
• Sensitive fields, specifically raw bank message text, are encrypted at rest using AES-256-GCM with versioned keys.
• Bring Your Own Key API keys are encrypted at rest.
• Receipt image text can be read on your device, and images are deleted after processing unless you keep one as an attachment.
• Access to data is scoped to each user, so your data is not visible to other users.
• The biometric app lock relies on your device's operating system, and your biometric data stays on your device.

Your rights and choices

You have choices and rights over your information. Depending on where you live, these can include the right to:

• Access the personal data Sortd holds about you.
• Export all of your data as JSON at any time, from within the app.
• Correct your data: you can edit and confirm every transaction, and update your records directly in the app.
• Delete specific data, or request its deletion.
• Delete your account, with an in-app preview of what will be removed before you confirm.
• Object to, or restrict, certain processing.
• Withdraw consent you previously gave, such as your consent to website analytics.

How to exercise your rights

You can export your data and manage most of these choices directly in the app, for example by opening Settings and then Account. Sortd provides dedicated account deletion and data-deletion request pages for these actions. You can also contact us at privacy@thesortd.com and we will help.

Website analytics and cookies

This website uses consent-first analytics. Analytics are off until you accept them, and you can decline.

When you accept, we collect only limited, non-sensitive marketing context, such as your language, the section of the site you view, or a click on a store button. Website analytics never receive your message contents, amounts, account identifiers, or any financial information.

Children

The Sortd services are intended for adults. They are for people who are 18 or older, or the age of majority in their country, and are not directed to children. If you believe a child has provided us with personal data, please contact us at privacy@thesortd.com so we can take appropriate action.

Changes to this policy

Sortd may update this Privacy Policy from time to time as the services and the law evolve. When we make changes, we will update the date at the top of this page, and for material changes we will provide a more prominent notice where appropriate.

We encourage you to review this page from time to time to stay informed.

Contact

If you have questions about this policy or how Sortd handles your information, please reach out.

• Privacy: privacy@thesortd.com
• Support: support@thesortd.com
• General: hello@thesortd.com

Sortd is a product of MENTECH, a company established in the Arab Republic of Egypt, with a registered address at [registered address]. This policy is governed by the laws of the Arab Republic of Egypt, and is designed to align with applicable data protection laws in the region, leading with Egypt's Personal Data Protection Law (Law No. 151 of 2020), and also with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the Saudi Personal Data Protection Law, while broadly following the principles of the GDPR.