Privacy Policy
Who we are
Saves is run by Yiftach Freeman, Israel. Email freemansseo@gmail.com about anything on this page.
What Saves collects
- Account: your name, email address and avatar from Sign in with Apple or Google, handled by Clerk. Apple may give us a private relay address instead of your real one. Your name and avatar are shown to the other members of any shared folder you are in.
- Saves: the links you share into Saves and any text shared with them, the title, description and preview image we fetch for each link, the folder it lands in, any note or reminder you add, and your folder names, colors and emoji.
- Device: for notifications and the share extension, your device's push token, its name (on an iPhone usually just "iPhone"), a random install id, and your time zone offset so the weekly digest arrives on Sunday evening your time.
- Usage: actions you take (for example "save created", "save opened"), sent to Mixpanel under a random account id with the device model, OS and app version. Events never include your links, titles, notes or folder names, and Mixpanel's location lookup is switched off. No advertising identifiers, no cross-app tracking.
- Crashes: error reports through Sentry, with the device model, OS version and the steps that led to the error. They are not linked to your account.
- Reports: when you report a save or a folder, the reason you chose and your account id.
How sorting works
Sorting with Claude is off until you allow it. To pick a folder, Saves sends each link's address, title, description and any text you shared with it, plus your folder names, a few recent titles from each, and links you moved between folders, to Anthropic's Claude. Anthropic does not use it to train its models.
Sorting only files links into folders you keep to yourself, and never sends links or titles other people saved. Anthropic deletes the data within 30 days, unless its safety systems flag it for breaking its usage policy. If you choose Not now, or turn off Sorting with Claude in Settings, nothing more is sent and new links wait in your Inbox.
Link previews
To build a preview, our server looks up the link's site with Google Public DNS and fetches the page from that site, so the site sees a request from our server, not from your phone. YouTube, TikTok and X links are also sent to their oEmbed services for the title and picture. Preview images are downloaded once and stored in Convex so cards keep working when the original expires. Previews are cached per link, not per person, and hold only what the public page shows.
Notifications
Notifications are delivered through Expo's push service, then Apple or Google. They include a folder name and the name of the member who added links, or the title of a link you asked to be reminded about. Turn each kind off in Settings, Notifications.
Services that receive data
- Clerk: sign-in and your account (name, email, avatar).
- Apple and Google: Sign in with Apple, Google sign-in, and notification delivery.
- Convex: the database, file storage and server code, hosted in the European Union (Ireland).
- Anthropic: sorting, only if you allow it (see above).
- Expo: notification delivery and app updates.
- Google Public DNS: the site name of each link you save, to check it is a public site before fetching it.
- YouTube, TikTok and X: the address of links to their own sites (oEmbed).
- Mixpanel: usage events.
- Sentry: crash reports.
- Vercel: hosts this website, and sees your IP address when you visit it.
Several of these providers are in the United States, so your data may be processed there.
Sharing
Folders you share are visible to everyone who joins with an invite link. Members see the saves in that folder, their notes, who added them and when. Any member can report a save or a folder, or block another member. We never sell or rent your data.
Retention and deletion
Deleted saves stay in your Trash for 30 days, where you can restore them; then they are erased with their stored preview image. Delete your account from Settings at any time: it removes every save, folder, note, invite link, device token and stored image, and deletes your Clerk account. Folders you own are deleted for everyone, and their members find their own saves in Trash. If you signed in with Apple: To finish, remove Saves in Settings, Apple Account, Sign in with Apple. There is also a deletion page for people who no longer have the app.
Reports you file are kept for moderation. Usage events and crash reports already sent keep the random id they were sent with, which no longer leads to an account. Database backups are deleted within 30 days.
Your rights
In Settings, Export your saves gives you the links you saved as a CSV or JSON file, with their folders, notes and dates. For a copy of anything else we hold about you, email us; we send it within 30 days. Change your name in Settings, and delete your account at any time. Contact us for any other request about your data. In the EEA and the UK you can also complain to your data protection authority.
Legal basis (EEA and UK)
We process your account, saves and folders to provide the service you signed up for (contract), crash reports and usage events to keep Saves working and improve it (legitimate interest), and send links to Anthropic only with your permission (consent), which you can withdraw in Settings at any time.
Age
You must be at least 13 to use Saves (16 in the EEA). If you believe someone younger uses it, email us and we delete the account.
Changes
We update this page when the app changes what it collects, with the date at the top.