SaviSense Privacy Policy

Effective date: November 3, 2026

Your library is stored on your iPhone. Cloud Help is optional. You can turn it off and request deletion of its data in the app. Website analytics are explained separately below.

SaviSense helps you save useful things from your digital life and find them later. It is local-first: your saved library stays on your iPhone unless you deliberately export it or choose an optional feature that clearly says it uses cloud processing.

SaviSense is provided by Andreus Bello-Lif. For privacy purposes, Andreus Bello-Lif is the controller of information processed through website analytics, optional app Usage Analytics, optional Cloud Help, and support channels.

SaviSense does not sell personal information, show ads, or track you across apps or websites owned by other companies.

Website analytics

On savisense.app, SaviSense uses a privacy-minimized Amplitude configuration to measure two events: a landing-page view and a click that opens SaviSense's App Store listing. The website does not show an analytics consent popup.

Analytics run without cookies or persistent browser identity. Amplitude's default tracking and automatic capture are disabled, and SaviSense does not send raw referral URLs or campaign query parameters. Limited event details may include the page path, a SaviSense campaign code, the App Store button location, timestamps, and the destination App Store ID. The SDK is configured not to add IP address, language, or platform fields to events.

SaviSense honors Global Privacy Control, browser Do Not Track, and a stored website opt-out by not loading Amplitude. SaviSense does not send your saved app content, name, email address, or Private Vault content to website analytics.

Amplitude and SaviSense's hosting and security providers may process ordinary network information as needed to receive, deliver, and protect requests. SaviSense does not use analytics information for advertising or cross-site tracking. Learn more in Amplitude's privacy notice.

Optional app Usage Analytics

SaviSense asks separately whether you want to share Usage Analytics after the welcome and setup flow. It is off until you choose to turn it on. Using the app, accepting terms, enabling Cloud Help, or buying Pro does not grant analytics permission. Declining does not restrict local saving, searching, editing, or access to your library.

When you opt in, the app and Share extension send limited feature-use and performance events to Amplitude, our analytics processor. These can include app opens, completed saves and retrievals, page and section views, named control interactions, completed search outcomes, whether an AI-assisted title, tags, or folder was kept or edited, completed foreground durations, timestamps, app version and build, and basic device and operating-system details. They help us understand reliability, activation after consent, usage frequency, and return visits.

A randomly generated analytics identifier lets us recognize the same installation during its measurement period. It is not your name, email address, Apple advertising identifier, or an account login. This is pseudonymous installation measurement: removing a name does not make every event irreversibly anonymous. We do not use these records for advertising, cross-app tracking, session replay, or universal screen/button recording.

Usage Analytics never includes saved content, titles, notes, filenames, file bytes, web addresses, search text, or Private Vault items. The app does not request location access or add IP addresses or GPS coordinates to analytics event payloads. Amplitude necessarily receives ordinary network information when handling an upload. Its service is subject to appropriate processor and international-transfer safeguards.

You can change the choice at Settings → Privacy & Analytics → Share Usage Analytics. Turning it off stops new analytics events and clears unsent events on that installation, including the Share extension. This does not delete events already received by Amplitude. A new installation asks again rather than treating an old choice as a new grant.

App Usage Analytics has a separate retention lifecycle from the Cloud Help records described below. Previously received usage records remain in Amplitude until deleted; fixed automatic time-based expiry is not currently enabled. You may request deletion at [email protected]. Because records are not attached to a personal account, we may need reasonable information to locate the relevant installation records. Do not send saved files, passwords, or Private Vault content with a request. Content-free aggregate reports do not contain installation identifiers.

Apple's aggregate store and commerce reports are separate from this choice. Apple's device usage and diagnostics reports depend on Apple's own sharing settings and privacy thresholds. Existing operational and security records necessary to run an optional cloud feature are also separate; they are not used to reconstruct your app activity when Usage Analytics is off.

Why we process information

SaviSense processes information only for the purposes described in this policy. Depending on the feature and where you live, the legal basis is:

Declining or revoking Cloud Help consent does not prevent local organization from working. SaviSense suggestions do not make decisions that produce legal or similarly significant effects about you.

What SaviSense stores on your device

Depending on what you choose to save, SaviSense may store links, titles, summaries, source names, folders, tags, notes, thumbnails, screenshots, images, PDFs, files, audio, places, and related timestamps. SaviSense also stores app preferences and folder organization on your device.

Private Vault items are protected by the device-authentication controls available on your iPhone. They remain local and are not eligible for Cloud Help.

Apple may include SaviSense data in an iCloud device backup if you enable that Apple feature. SaviSense does not operate or access your iCloud device backups.

When you save or open a web link, SaviSense may contact the linked website or its normal web resources to obtain a page title, description, source name, icon, or thumbnail. As with ordinary browsing, the website may receive the requested URL, your IP address, and standard network information.

Optional Cloud Help

SaviSense can suggest a clearer title, summary, folder, or tags. Local organization can work without cloud processing.

Cloud Help is optional. Before SaviSense creates a cloud session or sends a request, the app explains the feature and asks for versioned permission. You can decline, stop current processing, or revoke permission in Settings.

When you enable Cloud Help, SaviSense may send a minimized, text-only request to its protected backend and an AI processing provider. The request may include text you chose to save, a web address, page or source text, and the folders or tags needed to return an organization suggestion. SaviSense does not send image pixels, screenshots, PDF pages, audio, file bytes, Private Vault items, locked-folder content, or content detected as credentials, financial, identity, medical, legal, or similarly protected information.

Cloud Help results may be inaccurate. Review important titles, summaries, and organization choices before relying on them. SaviSense does not use saved content for advertising, and its AI processing provider is not permitted to use Cloud Help requests to train public models.

Cloud session, security, and reliability data

After you grant Cloud Help permission, SaviSense may create a private anonymous backend session and process:

Cloudflare may process CAPTCHA and ordinary security/network data but does not receive the saved text sent to SaviSense. Apple may process device-integrity evidence. SaviSense's backend and AI processing provider process only the minimized request needed to deliver the optional feature.

SaviSense's production backend is hosted in the European Union. Some service providers may process information in other countries under their applicable privacy and transfer safeguards.

When information must be transferred from the EEA, UK, or Switzerland to a country without an applicable adequacy decision, SaviSense requires an available lawful transfer mechanism, such as approved standard contractual clauses or an equivalent safeguard, together with any supplementary measures required for the processing. You may ask [email protected] for information about the applicable transfer safeguard.

Security and incident response

SaviSense uses technical and organizational safeguards designed for the nature and limited amount of information processed, including data minimization, bounded retention, access controls, transport protection, integrity checks, and separation of local Private Vault content from eligible cloud processing. No app, device, network, or cloud service can be guaranteed completely secure.

SaviSense maintains a process to investigate suspected incidents, reduce harm, preserve necessary evidence, and provide notices to affected people or authorities when applicable law requires them. Report a suspected SaviSense security issue to [email protected] without including passwords, identity documents, financial records, Private Vault items, or other sensitive content.

Retention and deletion

Cloud Help request content and results expire 24 hours after creation. An hourly cleanup normally removes expired records during the next scheduled run; cleanup failures are monitored and escalated.

Content-free operational, security, quota, and completed deletion-proof records expire 30 days after creation and are normally removed during the next hourly cleanup. Unresolved deletion safety tombstones may be retained beyond 30 days only until the backend can verify that deletion is complete. These tombstones contain no saved content or raw deletion proof, and an unresolved record older than 24 hours triggers an operational alert.

Inactive anonymous cloud identities are scheduled for deletion after 30 days of inactivity once activity and session checks pass.

The contracted AI processing provider may retain request data for security and abuse monitoring for up to 30 days. SaviSense does not permit the provider to use SaviSense requests to train public models.

You can delete Cloud Help data in the app:

Settings → SaviSense → Delete SaviSense Cloud Data → Delete Cloud Data

The app provides a deletion request identifier and retries safely if a network interruption prevents immediate confirmation. Revoking cloud permission stops new cloud processing. See data deletion instructions for the full steps.

You can delete local saves inside SaviSense. Removing SaviSense from your iPhone deletes its local app container, subject to copies or backups you control.

Accounts, social features, sync, and notifications

The App Store 1.0 release does not include personal accounts, Friends or public social profiles, cloud library sync, remote push notifications, or cross-app advertising analytics. Core saving does not require you to provide a name, email address, phone number, or contacts.

Support

If you email support, SaviSense receives your email address and whatever information you choose to include. Support messages are used to answer you, investigate problems, and protect the service. Do not send passwords, identification documents, financial records, Private Vault items, or other sensitive saved content.

Children

SaviSense is not directed to children under the minimum age required by applicable law to consent to data processing. SaviSense does not knowingly collect personal information from children in a way that requires parental consent.

Your choices and rights

You can keep Cloud Help off, revoke its permission, delete its cloud data, delete local items, export your library, or remove the app. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of personal information.

If EEA or UK data-protection law applies, you may also have the right to data portability, to withdraw consent without affecting earlier lawful processing, and to lodge a complaint with the supervisory authority where you live, work, or believe an infringement occurred. Because SaviSense 1.0 uses an anonymous cloud session and does not require a personal account, SaviSense may need a deletion request identifier or other reasonable proof to locate a request without collecting unnecessary identity data.

For privacy questions or rights requests, email [email protected]. For general help, email [email protected].

Changes

If SaviSense's data practices materially change, this policy and the App Store privacy details will be updated before the new practice is used.

Contact

Privacy: [email protected]

Support: [email protected]