Privacy Policy

The SavedIt browser extension reads a page only when you open the extension or choose Save. It can send the current page URL, title, description, preview image, and the collection, note, or tags you choose to SavedIt so the item can be saved and enriched. The extension stores its SavedIt sign-in session and any pending offline saves in that browser profile. It does not collect unrelated browsing history, sell this data, or use it for advertising.

When you create an account or interact with SavedIt, we collect: • Your name, email address, and profile photo (if signing in via Google). • Any additional details you choose to add to your profile (e.g., username, interests, collections, or reminders). 👉 We do not collect sensitive personal data (e.g., payment card or bank details, biometric, or government identification information).

If you buy SavedIt Plus, Apple or Google take the payment. We never see your card or bank details. We receive the store's purchase record (which plan, dates, renewal, cancellation and refund status, the price and currency you paid, and your store country) linked to your SavedIt account so we can turn Plus on, keep it accurate and manage our service costs. RevenueCat, the service that checks these purchases for us, receives that record and your SavedIt account ID. We do not send it your name or email address. Apple, Google and RevenueCat keep purchase records under their own rules after you delete your SavedIt account (for example for refunds and tax).

When you sign in with Google, SavedIt requests the following OAuth scopes with your consent: • openid (ID token) • email (email address) • profile (name and profile image) We also request offline access to obtain a refresh token for continued authentication when you reopen the app.

Through Google's userinfo service, we obtain: • Unique Google identifier (sub) • Name and display name • Email address • Profile image URL 👉 We do not access or store restricted Google data (such as Gmail, Drive, or Calendar) without explicit user consent.

• To authenticate you and create your SavedIt account. • To show your name and profile picture inside the app. • To send essential account-related notifications (e.g., sign-in confirmations or account deletion alerts). • To improve user experience and maintain security. 👉 We do not use Google data for ads, tracking, or resale.

• We store your name, email, and profile image URL in our Supabase database. • We do NOT store Google access or refresh tokens. Instead, these are exchanged server-side for a Supabase session. • Authentication sessions are persisted by the Supabase client using secure app storage. • On iOS, we use the system Keychain (with an App Group) for secure access between the main app and Share Extension. • In development mode (Expo Go), secure fallback storage is used. • All communication with Google and Supabase is encrypted in transit (TLS) and at rest.

Connecting SavedIt to an AI assistant such as ChatGPT (OpenAI) or Claude (Anthropic) is optional and requires your explicit authorization. When connected, the assistant may send your requests and tool inputs to SavedIt and receive the minimum SavedIt data needed to complete them, such as saved-item IDs, URLs, titles, notes, tags, creator or provider details, thumbnails, collections, and created or updated dates. SavedIt uses OAuth and stores only hashed, opaque connection tokens and related refresh metadata. You can revoke a connection from SavedIt. The SavedIt content the assistant reads, such as titles, notes, and summaries, goes to that AI provider under your own plan with them. The AI provider handles conversation and tool data under your account settings, plan, and its own privacy terms. SavedIt does not control how long that provider keeps this data. SavedIt does not sell this data or use it for advertising.

Keeper is SavedIt's AI. It reads each save's own content, such as the title, caption, and page text, to label what kind of thing it is (for example a recipe, a place, or a product) and to give it a short topic, like "Toronto ramen spots". To understand a save better, Keeper also reads its preview image and, for a video, a transcript of what is said in it. It reads the names of your own collections so it can suggest where a save fits. It never reads your notes. Keeper describes the content, not you. Names of people and text that looks like personal details are not stored as topics. The one place Keeper writes about you is About you, which you control (see below).

Keeper memory builds on those labels: • It groups related saves into threads, only once there are three or more. • It notes your saving rhythm, such as weekday evenings. We use this to show threads on Home, send timely nudges, suggest collections, and improve search.

Keeper may guess what you would do with a save: go, cook, buy, learn, watch, and so on. You can change the guess, or type your own reason (up to 30 characters). Keeper never overwrites a reason you chose. This stays private to your account. It never appears in notifications and is never shared with other people.

To put a place on a map, SavedIt sends only the place name and a location, such as the city, to a maps provider. We never send your account, your titles, or your captions. If a place name has no location, SavedIt may use a rough area (about 55 km) around your other saved places to find it. That rough area is also sent to Google. Google's place details, such as the address and coordinates, are kept in a shared cache for up to 30 days. The cache holds no account data.

Every topic is labelled as one of three kinds: • Everyday: most things, like recipes, travel, or products. • Life events: parenting, weddings, moving, a job search, and similar moments. • Sensitive: health, religion, politics, sexuality, ethnicity, immigration, money trouble, and legal trouble. The label decides where a topic can appear. Notification, lock screen, and email text stays generic, so it never names the topic of a life event.

About you is a short, private page in Settings, under What Keeper knows. Keeper writes up to 12 short lines about what you save: your life stage, work, goals, and interests. It is on by default once released, and only you can see it. • Edit any line. Keeper never overwrites your edit. • Delete a line. Keeper will not infer that idea again, even after Start fresh. To remember this, we keep a private marker of the idea, not the words. • Tap Why? to see which of your threads a line came from. • Turn About you off, which deletes the lines, or Start fresh. About you is never about health, religion or beliefs, politics, sexuality or gender identity, ethnicity, immigration, money trouble, or legal trouble. It is never shared, never used by any other feature, and never used for ads, sale, or training. To write it, Keeper is sent only your thread names with counts, kind labels, and topics. It is not sent your titles, links, notes, collection names, or IDs.

In Settings, What Keeper knows shows what Keeper has learned. You can: • See your threads. • Rename, hide, or mute a thread. Hiding a thread never moves or deletes your saves. • Turn individual Keeper features on or off. • Pause learning. • Edit, delete, or turn off About you. • Start fresh, which clears what Keeper has learned. It never deletes your saves or collections.

SavedIt uses trusted AI providers to understand your saves and to answer Keeper. To do this work, SavedIt sends the content of your saves, including preview images and video transcripts, to their models. We never send them your name, email address, phone number, username, or account ID, and they do not train their models on what we send. Each request is set to use only providers that do not train on it. If no such provider is available, the request fails instead of going elsewhere. Most requests go only to providers that keep nothing once they answer. Where a provider does keep data, it deletes requests and answers within 30 days, unless it must keep them longer to enforce its usage policy or to comply with the law. Other providers we use for specific jobs are listed under Third-Party Service Providers.

• Keeper's topics, memory, About you, and reasons are private to your account. They are never shared with other people, never used for ads, never sold, and never used to train models. • Deleting a save removes its topic. Start fresh clears Keeper memory. • Your account export includes what Keeper knows, including About you. • Deleting your account deletes all of it along with the rest of your data.

When you use the app, we may collect non-identifiable data such as: • Device type and OS version • App performance metrics and crash reports 👉 This information helps us debug and improve SavedIt. We do not use cookies or analytics tracking for advertising.

If you make a collection or save public, you see totals only: views, opens, saves, copies, and follows. If you turn on your profile, you see its views. We never show the owner who visited. Views, opens, and visitor counts below 10 show as "Fewer than 10"; saves, copies, and follows show the exact number. To count one visitor once a day, we turn the visitor's network address and browser into a pseudonym: a one-way hash made with a secret that changes every day. We do not store the address itself. We may also store a broad label for where a visit came from, such as Instagram, never the full web address. Raw visit records are kept for 30 days. After that, daily totals are kept for up to 13 months; daily totals of where views came from are kept while the page exists. Only the owner of a public collection can see the names of its followers. The Follow button says so.

A profile at saveditapp.com/@handle is off until you turn it on. When you send a save, a "Sent by" line with your first name is off unless you turn it on. You can add a note of up to 280 characters, which travels with that shared save. Your private notes are never shown on public pages or in link previews. Anyone can report a public collection or shared save. To limit abuse, a report from a signed-in account is stored under a pseudonym of that account, and a report from a signed-out visitor under a daily pseudonym of the network address. A page is paused for review only after reports from several established SavedIt accounts. The owner is told the page is under review, never who reported it.

We work with trusted providers to operate SavedIt: • Supabase (database, authentication, storage) • Vercel (web hosting and serverless infrastructure) • AI model providers (to label and organize your saves; see AI & Keeper Memory) • A maps provider (place lookups; see Places and Maps) • Services that read public web pages and video transcripts for the saves you make • OpenAI (only when you choose to connect SavedIt to ChatGPT) • Anthropic (only when you choose to connect SavedIt to Claude) • RevenueCat (purchase records, only if you buy SavedIt Plus; see Purchases) 👉 These partners process data only to provide the functionality you request and under their applicable privacy terms.

• We do not sell or rent your personal data. • During sign-in, our server calls Google's userinfo endpoint solely to verify your identity and fetch basic profile information. • We only share limited data with verified subprocessors under data-processing agreements.

• We retain your Google-derived account data while your SavedIt account is active. • When you delete a save, it stays in Recently deleted for 30 days so you can restore it. After 30 days it is permanently deleted. • You can delete your account at any time via the app's Settings. • Once deleted, all associated data (including Google-linked identifiers) is permanently removed within 30 days. • Currently, SavedIt does not support unlinking a Google account without deleting the SavedIt account. 👉 Exceptions: Data may be retained where required by law or for security/anti-abuse reasons. Purchase records kept by Apple, Google and RevenueCat follow their own rules (see Purchases).

You have the right to: • Access and correct your personal data • Request deletion of your account and all data • Withdraw your consent for Google Sign-In at any time via https://myaccount.google.com/permissions

• We implement industry-standard encryption for all data in transit and at rest. • Access to your data is restricted to authorized systems and staff. • We audit our systems regularly to detect unauthorized access or disclosure. 👉 No online service is 100% secure, but we use strong measures to protect your information.

If you have any questions about this Privacy Policy or how we handle Google user data, please contact us at: 📧 contact.savedit@gmail.com