Privacy Policy

Last updated 2026-10-07.

Who we are

Saves is run by Yiftach Freeman, Israel. Email freemansseo@gmail.com about anything on this page.

What Saves collects

• Account: your name, email address and avatar from Sign in with Apple or Google, handled by Clerk. Apple may give us a private relay address instead of your real one. Your name and avatar are shown to the other members of any shared folder you are in.
• Saves: the links you share or import into Saves and any text shared with them, the title, description and preview image we fetch for each link, the folder it lands in, any note or reminder you add, and your folder names, colors and emoji.
• Imports: when you import a file in Settings, Import links, Saves reads it on your phone and sends only the links in it, with their titles, folder names and dates. The file itself is not uploaded.
• Purchases: if you buy Saves Pro, which plan you have and when it renews or ends, from Apple through RevenueCat (see Purchases below). We never see your card or your Apple Account details.
• Device: for notifications and the share extension, your device's push token, its name (on an iPhone usually just "iPhone"), a random install id, and your time zone offset so the weekly digest arrives on Sunday evening your time.
• Usage: actions you take (for example "save created", "save opened" or a purchase), sent to Mixpanel under a random account id with the device model, OS and app version. Events never include your links, titles, notes or folder names, and Mixpanel's location lookup is switched off. No advertising identifiers, no cross-app tracking.
• Crashes: error reports through Sentry, with the device model, OS version and the steps that led to the error. They are not linked to your account.
• Reports: when you report a save or a folder, the reason you chose and your account id.

How sorting works

Sorting with Claude is off until you allow it. To pick a folder, Saves sends each link's address, title, description and any text you shared with it, plus your folder names, a few recent titles from each, and links you moved between folders, to Anthropic's Claude. Anthropic does not use it to train its models.

Sorting only files links into folders you keep to yourself, and never sends links or titles other people saved. Anthropic deletes the data within 30 days, unless its safety systems flag it for breaking its usage policy. If you choose Not now, or turn off Sorting with Claude in Settings, nothing more is sent and new links wait in your Inbox.

Imported links are sorted the same way, only if you allowed it. Without Saves Pro, Claude files up to 30 links a month; once it has, nothing more is sent to Anthropic until the next month, and new links wait in your Inbox.

Link previews

To build a preview, our server looks up the link's site with Google Public DNS and fetches the page from that site, so the site sees a request from our server, not from your phone. YouTube, TikTok and X links are also sent to their oEmbed services for the title and picture. Our server downloads each preview image once and stores it in Convex, so cards keep working when the original expires, and the app shows only that stored copy: your phone never loads a picture from the site, and a picture our server cannot download is left out. Previews are cached per link, not per person, and hold only what the public page shows. Imported links get their previews the same way, a few at a time after the import.

Notifications

Notifications are delivered through Expo's push service, then Apple. They include a folder name and the names of members who added links or joined the folder, or the title of a link you asked to be reminded about. A notification can show the link's picture: it carries the address of the stored copy in Convex, and your phone downloads the picture from there when the notification arrives. Turn each kind off in Settings, Notifications.

The Home Screen widget

The widget shows how many links wait in your Inbox and your newest saves, with their titles, folders and pictures. Saves keeps that on your phone, in storage that only Saves and its own extensions can read, and the widget downloads the pictures from the stored copies in Convex. Signing out or deleting your account clears it.

Purchases

Saves Pro is sold through Apple's In-App Purchase. Apple processes the payment; we never see your card or your Apple Account details. RevenueCat (RevenueCat, Inc.) receives the purchase records from Apple and an anonymous app user id, not your name or email, so Saves can tell whether Pro is active; our server keeps only which plan you have and when it ends. Refunds go through Apple. Deleting your Saves account deletes your customer record at RevenueCat, but it does not cancel a subscription: cancel it in your Apple Account's subscriptions.

Services that receive data

• Clerk: sign-in and your account (name, email, avatar).
• Apple: Sign in with Apple, notification delivery and payments for Saves Pro.
• Google: Google sign-in.
• RevenueCat: the status of your Saves Pro purchases (see Purchases).
• Convex: the database, file storage and server code, hosted in the European Union (Ireland).
• Anthropic: sorting, only if you allow it (see above).
• Expo: notification delivery and app updates.
• Google Public DNS: the site name of each link you save, to check it is a public site before fetching it.
• YouTube, TikTok and X: the address of links to their own sites (oEmbed).
• Mixpanel: usage events.
• Sentry: crash reports.
• Cloudflare: hosts this website, and sees your IP address when you visit it.

Several of these providers are in the United States, so your data may be processed there. Each provider gets only what its part of Saves needs, uses it only to run that part for us, and must protect it at least as well as this policy does.

Sharing

Folders you share are visible to everyone who joins with an invite link. Members see the saves in that folder, their notes, who added them and when, and can get a notification when someone adds links or joins. Anyone holding a live invite link can see a preview page with the folder's name, the inviter's display name, how many links and people it has, and its newest picture; the page is not indexed by search engines, and links expire after 7 days or when revoked. Any member can report a save or a folder, or block another member. We never sell or rent your data.

Retention and deletion

Deleted saves stay in your Trash for 30 days, where you can restore them; then they are erased with their stored preview image. Delete your account from Settings at any time: it removes every save, folder, note, invite link, device token and stored image, deletes your Clerk account and deletes your customer record at RevenueCat. It does not cancel a Saves Pro subscription, which Apple keeps billing until you cancel it in your Apple Account's subscriptions. Folders you own are deleted for everyone, and their members find their own saves in Trash. Folders other people own keep their history, such as that a link was added or removed, under an id that no longer leads to an account. If you signed in with Apple, deleting in the app also disconnects Sign in with Apple. Only if the app then asks you to, or you delete by email, remove Saves in Settings, Apple Account, Sign in with Apple. There is also a deletion page for people who no longer have the app.

Reports you file are kept for moderation. Usage events and crash reports already sent keep the random id they were sent with, which no longer leads to an account. Database backups are deleted within 30 days.

Your rights

In Settings, Export your saves gives you the links you saved as a CSV or JSON file, with their folders, notes and dates. For a copy of anything else we hold about you, email us; we send it within 30 days. Change your name in Settings, and delete your account at any time. Contact us for any other request about your data. In the EEA and the UK you can also complain to your data protection authority.

Legal basis (EEA and UK)

We process your account, saves, folders and purchases to provide the service you signed up for (contract), crash reports and usage events to keep Saves working and improve it (legitimate interest), and send links to Anthropic only with your permission (consent), which you can withdraw in Settings at any time.

Age

You must be at least 13 to use Saves (16 in the EEA). If you believe someone younger uses it, email us and we delete the account.

Changes

We update this page when the app changes what it collects, with the date at the top.