SaviSense Privacy Policy

Effective date: November 12, 2026

Your library is stored on your iPhone. Cloud Help is optional. You can turn it off and request deletion of its data in the app. Website analytics are explained separately below.

SaviSense helps you save useful things from your digital life and find them later. It is local-first: your saved library stays on your iPhone unless you deliberately export it or choose an optional feature that clearly says it uses cloud processing.

SaviSense is provided by Andreus Bello-Lif. For privacy purposes, Andreus Bello-Lif is the controller of information processed through website analytics, optional app Usage Analytics, optional Cloud Help, and support channels.

SaviSense does not sell personal information, show ads, or track you across apps or websites owned by other companies.

Website analytics

On savisense.app, SaviSense uses a privacy-minimized Amplitude configuration to measure two events: a landing-page view and a click that opens SaviSense's App Store listing. The website does not show an analytics consent popup.

Analytics run without cookies or persistent browser identity. Amplitude's default tracking and automatic capture are disabled, and SaviSense does not send raw referral URLs or campaign query parameters. Limited event details may include the page path, a SaviSense campaign code, the App Store button location, timestamps, and the destination App Store ID. The SDK is configured not to add IP address, language, or platform fields to events.

SaviSense honors Global Privacy Control, browser Do Not Track, and a stored website opt-out by not loading Amplitude. SaviSense does not send your saved app content, name, email address, or Private Vault content to website analytics.

Amplitude and SaviSense's hosting and security providers may process ordinary network information as needed to receive, deliver, and protect requests. SaviSense does not use analytics information for advertising or cross-site tracking. Learn more in Amplitude's privacy notice.

Current app: optional Usage Analytics

Usage Analytics is off until you opt in. Amplitude measures app activity and reliability using a random installation code. Analytics exclude your saved content, search text, name and email, and are not used for advertising or tracking across other companies’ apps.

You can turn it off at Settings → Privacy & Analytics → Share Usage Analytics without losing app features. This stops new events and clears unsent events; it does not delete records already sent.

Analytics data and retention

Events cover app visits and time, onboarding, saves, retrievals, screen and selected control use, search outcomes, and whether AI-assisted saves were kept or edited, together with app/device technical details. The installation code is separate from your name or account. Amplitude receives ordinary network information when handling requests.

Amplitude records remain until deleted; automatic expiry is not enabled. For a deletion request, email privacy@savisense.app. We may need information to locate the installation. Do not send your library or sensitive content. Apple’s own reports and records needed to operate optional cloud features are separate. Amplitude’s privacy notice.

Upcoming app update: usage analytics

This describes the forthcoming update; it is not active in the current App Store app.

TelemetryDeck will measure app activity and reliability using a random installation code hashed before sending. Analytics exclude your saved content, search text, name, email and account identity. We do not use them for advertising or tracking across other companies’ apps.

Analytics start on unless you previously turned them off. Change the choice anytime at Settings → Privacy & Analytics → Share Usage Analytics without losing app features. Turning it off stops new collection; it does not delete records already sent. Privacy and deletion requests.

Analytics data, providers and retention

Events cover onboarding, real saves and retrievals, visits and time, public screens and selected controls, search outcomes, fixed error categories, and whether AI-assisted saves were kept or edited. They include technical event/session information and app/build/major OS version. Practice/demo, Private Vault and locked-folder item activity are excluded. Overall visit time still includes time the app is open. We send no saved URLs, advertising identifiers, location, clipboard contents or recordings.

The installation code does not join your devices or identify a named customer. TelemetryDeck describes a second server-side hash and says it does not retain source IP addresses. Earlier opted-in Amplitude analytics remain separate: switching TelemetryDeck on does not enable Amplitude, and switching analytics off stops both.

The free plan provides three months of report history with delayed updates. Archived TelemetryDeck events have no guaranteed deletion schedule. We may be unable to associate anonymized records with you. See TelemetryDeck’s privacy and retention FAQ and data processing agreement.

Upcoming app update: encryption, backup and purchases

The forthcoming version adds local-library encryption and optional encrypted iCloud Backup. Encryption depends on completing the app's security setup. Keep recovery keys private and available to you; do not send them to SaviSense support. Exported or shared copies are separate and may be readable outside the encrypted library.

When you enable encrypted iCloud Backup, encrypted library data is stored in your private iCloud storage through Apple CloudKit. This is backup and restore, not live cross-device library sync. Recovery requires the matching recovery setup. Turning automatic backup off does not delete existing backups; use Settings → Backup & Import → Delete iCloud Backups. Older Apple-managed backups may remain separately until deleted. Deleting local data, cloud-processing data and iCloud backups are separate actions.

If you purchase or restore Pro, Apple handles billing. SaviSense and its protected Supabase backend may process Apple-signed app and subscription proofs, transaction and product identifiers, a derived purchase identity linked to the anonymous cloud identity, entitlement/expiry/revocation state, usage allowance and operation records, and server notification identifiers. These records verify access, restore purchases, prevent abuse and account for the service; they are separate from optional product analytics. SaviSense does not receive your payment-card details.

Purchase and entitlement records are not covered by Cloud Help's 24-hour content expiry or the 30-day ordinary diagnostic schedule. They may remain for entitlement/restoration, abuse-prevention and applicable legal requirements. Contact privacy@savisense.app for a request concerning these records. Deleting data or turning analytics off does not cancel an Apple subscription; manage cancellation through your Apple Account's subscription settings.

Why we process information

SaviSense processes information only for the purposes described in this policy. Depending on the feature and where you live, the legal basis is:

Declining or revoking Cloud Help consent does not prevent local organization from working. SaviSense suggestions do not make decisions that produce legal or similarly significant effects about you.

What SaviSense stores on your device

Depending on what you choose to save, SaviSense may store links, titles, summaries, source names, folders, tags, notes, thumbnails, screenshots, images, PDFs, files, audio, places, and related timestamps. SaviSense also stores app preferences and folder organization on your device.

Private Vault items are protected by the device-authentication controls available on your iPhone. They remain local and are not eligible for Cloud Help.

Apple may include SaviSense data in an iCloud device backup if you enable that Apple feature. SaviSense does not operate or access your iCloud device backups.

When you save or open a web link, SaviSense may contact the linked website or its normal web resources to obtain a page title, description, source name, icon, or thumbnail. As with ordinary browsing, the website may receive the requested URL, your IP address, and standard network information.

Optional Cloud Help

SaviSense can suggest a clearer title, summary, folder, or tags. Local organization can work without cloud processing.

Cloud Help is optional. Before SaviSense creates a cloud session or sends a request, the app explains the feature and asks for versioned permission. You can decline, stop current processing, or revoke permission in Settings.

When you enable Cloud Help, SaviSense may send a minimized, text-only request to its protected backend and an AI processing provider. The request may include text you chose to save, a web address, page or source text, and the folders or tags needed to return an organization suggestion. SaviSense does not send image pixels, screenshots, PDF pages, audio, file bytes, Private Vault items, locked-folder content, or content detected as credentials, financial, identity, medical, legal, or similarly protected information.

Cloud Help results may be inaccurate. Review important titles, summaries, and organization choices before relying on them. SaviSense does not use saved content for advertising, and its AI processing provider is not permitted to use Cloud Help requests to train public models.

Cloud session, security, and reliability data

After you grant Cloud Help permission, SaviSense may create a private anonymous backend session and process:

Apple may process device-integrity evidence. Supabase hosts the protected Cloud Help backend, and OpenAI processes eligible text to return organization suggestions. The current app does not present a CAPTCHA. Cloudflare provides website hosting and delivery and may process ordinary security and network information.

SaviSense's production backend is hosted in the European Union. Some service providers may process information in other countries under their applicable privacy and transfer safeguards.

When information must be transferred from the EEA, UK, or Switzerland to a country without an applicable adequacy decision, SaviSense requires an available lawful transfer mechanism, such as approved standard contractual clauses or an equivalent safeguard, together with any supplementary measures required for the processing. You may ask privacy@savisense.app for information about the applicable transfer safeguard.

Security and incident response

SaviSense uses technical and organizational safeguards designed for the nature and limited amount of information processed, including data minimization, bounded retention, access controls, transport protection, integrity checks, and separation of local Private Vault content from eligible cloud processing. No app, device, network, or cloud service can be guaranteed completely secure.

SaviSense maintains a process to investigate suspected incidents, reduce harm, preserve necessary evidence, and provide notices to affected people or authorities when applicable law requires them. Report a suspected SaviSense security issue to support@savisense.app without including passwords, identity documents, financial records, Private Vault items, or other sensitive content.

Retention and deletion

Cloud Help request content and results expire 24 hours after creation. An hourly cleanup normally removes expired records during the next scheduled run; cleanup failures are monitored and escalated.

Ordinary Cloud Help operational, security, quota, and completed deletion-proof records expire 30 days after creation and are normally removed during the next hourly cleanup. Unresolved deletion safety tombstones may be retained beyond 30 days only until the backend can verify that deletion is complete. These tombstones contain no saved content or raw deletion proof, and an unresolved record older than 24 hours triggers an operational alert.

Inactive anonymous cloud identities are scheduled for deletion after 30 days of inactivity once activity and session checks pass.

Cloud Help’s AI processing provider, OpenAI, may retain request data for security and abuse monitoring for up to 30 days. SaviSense does not permit the provider to use SaviSense requests to train public models.

You can delete Cloud Help data in the app:

Settings → SaviSense → Delete SaviSense Cloud Data → Delete Cloud Data

The app provides a deletion request identifier and retries safely if a network interruption prevents immediate confirmation. Revoking cloud permission stops new cloud processing. See data deletion instructions for the full steps.

You can delete local saves inside SaviSense. Removing SaviSense from your iPhone deletes its local app container, subject to copies or backups you control.

Accounts, social features, sync, and notifications

Core saving does not require you to provide a name, email address, phone number, or contacts. Personal accounts, Friends and live library sync are not offered by the current public app. Where notification features are available, Apple asks for notification permission separately. Optional remote notifications may involve an APNs token, a hashed installation identifier and notification preferences for delivery; these are not advertising identifiers. Local saved-item reminders are controlled separately in the app. Analytics and cloud-processing choices do not grant notification permission.

Support

We use support messages to answer questions, investigate problems, and protect the service. Email support receives your address and message. Website chat runs through Foliosio and may receive your contact details, messages, a random session identifier, the page URL, and ordinary network information. Using chat does not give support access to your iPhone library or Private Vault.

Website chat may reply automatically using AI, without prior human review. Foliosio sends conversation history and relevant help content to Anthropic in the United States to generate replies. This support processing is separate from Cloud Help and app Usage Analytics; turning either app feature off does not turn website chat AI off. For human help, email support@savisense.app. An automated reply is not confirmation that a person has reviewed your issue or performed a deletion, refund, or account action.

Foliosio retains conversations and audit records for the workspace lifetime unless deleted; its infrastructure providers may retain snapshots separately. This is different from Cloud Help’s 24-hour content expiry. To request deletion of support correspondence, contact privacy@savisense.app. Limited records may need to remain for legal obligations or unresolved disputes. See Foliosio’s privacy policy for its processing details.

Do not send passwords, one-time codes, recovery keys, identification documents, financial records, Private Vault items, or sensitive saved content. Use a public example or a redacted screenshot when needed.

Children

SaviSense is not directed to children under the minimum age required by applicable law to consent to data processing. SaviSense does not knowingly collect personal information from children in a way that requires parental consent.

Your choices and rights

You can keep Cloud Help off, revoke its permission, delete its cloud data, delete local items, export your library, or remove the app. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of personal information.

If EEA or UK data-protection law applies, you may also have the right to data portability, to withdraw consent without affecting earlier lawful processing, and to lodge a complaint with the supervisory authority where you live, work, or believe an infringement occurred. Because SaviSense 1.0 uses an anonymous cloud session and does not require a personal account, SaviSense may need a deletion request identifier or other reasonable proof to locate a request without collecting unnecessary identity data.

For privacy questions or rights requests, email privacy@savisense.app. For general help, email support@savisense.app.

Changes

If SaviSense's data practices materially change, this policy and the App Store privacy details will be updated before the new practice is used.

Policy structure and selected wording adapted from 37signals’ open-source policies, used under CC BY 4.0 and changed for SaviSense.

Contact

Privacy: privacy@savisense.app

Support: support@savisense.app