Savor Privacy Policy

Savor builds a small memory from the intentions you work through, so it can stop asking what you have already told it. This memory has three parts, and all of it lives in the database on your device:

• Facts you established. Things you confirmed or typed while working on an intention — for example who a person is to you, a standing preference, or a birth year when you mention an age. Savor keeps the fact, not the sentence.
• Things that happened. When you finish an intention, Savor keeps a short record of what it was, when, who was involved, where, and how it ended.
• Patterns Savor noticed. Rhymes across finished intentions (“winter trips”) that Savor may offer as a suggestion. It never treats them as facts, and they are recomputed from the records above, so they go when those records do.

This memory is not uploaded to our servers. When you have turned on cloud AI for an intention, the relevant parts of it travel with that request as context (see “Cloud Services”), and the request is processed by our AI providers under the same terms as the rest of your intention. Health-related intentions are kept separate and are only ever used inside another health intention, never as a preference or a pattern.

Deleting your account, or the app, erases this memory from that device.

If enabled, Savor schedules local notifications on your device (e.g., daily summaries, time-based reminders, gentle nudges). You can turn these off anytime in Settings or your system settings.

Savor also includes Firebase Cloud Messaging. Its messaging software initializes in current app builds and Firebase may receive the app-instance or device token needed to prepare push delivery. Savor's production server does not currently send push notifications or register production-user tokens. In testing distributions where push is enabled, a notification may contain a participant's name and an event type, but never card content, Chat text, photos, or reminder details.

We use the following services. This table lists what each one does and what data they may receive. Links point to their own privacy policies. We require providers acting for Savor to protect personal data consistently with our instructions, this policy, and applicable law.

This section applies when a law such as the Washington My Health My Data Act covers health-related information you choose to put in Savor. Savor is not a healthcare provider and is not designed to diagnose or treat a condition.

What health data we may process and why

• Categories: health conditions, symptoms, medications, appointments, care plans, health-related locations, or similar information you place in a card, note, photo, voice capture, or AI request.
• Sources: you provide the information directly, or another person provides it in a card they choose to share with you. Savor does not infer health status from unrelated activity.
• Purposes: capture, organize, store, sync, recover, remind, share at your direction, process a voice, photo, or AI feature you request, and review an AI-answer safety report you choose to submit. Health-related on-device memory stays separate from non-health preferences and patterns.

Who may receive it

Google Cloud and Firebase process card content for account storage and sync and store a safety report you choose to submit. Savor Support may read the reported answer for human review. Anthropic receives only the health-related content needed for parts of a Take action request. OpenAI receives only the health-related content needed when you request voice, photo, parsing, Take action input moderation or research, or, for a known teen account, output moderation. People you choose can receive a health-related card you share. We do not send consumer health data to Meta, Mixpanel, or Sentry, and we do not sell it. We do not use geofencing around healthcare facilities to identify or target anyone.

Your choices and rights

You choose whether to enter health information or use a feature that processes it. Where consent is required, Savor asks before collection or sharing beyond what is necessary to provide the feature you requested. You may ask to confirm, access, correct, delete, or receive a copy of consumer health data; withdraw consent for future processing; or appeal a denied request. Email support@savorapp.ai with “Consumer health data request” or “Privacy appeal” in the subject. We will not collect or use an additional category of consumer health data for a new purpose without first updating this disclosure and obtaining consent when the law requires it.

If you are in the European Economic Area, European Union, or United Kingdom, this section explains our legal bases and your rights. The controller is Cognitive Infrastructure, Inc. at 396 Vineyard Point Road, Guilford, CT 06437, USA; contact support@savorapp.ai.

Legal bases

• Contract: sign-in, card storage and sync, sharing you initiate, notifications, support, and AI processing you request.
• Legitimate interests: security, abuse prevention, reliability, human review of safety reports, content-free product analytics, and improving Savor, balanced against your rights. You may object to this processing.
• Consent: optional website and mobile Meta measurement and permissions where consent is required. You may withdraw consent at any time; this does not affect earlier lawful processing.
• Legal obligation: records and disclosures the law requires.

Teen eligibility and consent

The age at which a teenager can provide their own consent for an online service or optional data processing varies by European country. A 13+ age check does not, by itself, establish valid consent in every location. Savor may limit teen availability or a consent-based optional feature where local law requires additional authorization.

International transfers

We and several providers are in the United States. Where European transfer rules apply, we use an adequacy decision or safeguards such as the European Commission's Standard Contractual Clauses with appropriate technical and organizational measures. Contact us for details about a particular transfer.

Your European rights

Subject to legal limits, you may access, correct, erase, restrict, or receive a portable copy of personal data; object to legitimate-interest processing; and withdraw consent. Savor does not make solely automated decisions that produce legal or similarly significant effects. You may complain to the data-protection authority where you live, work, or believe a violation occurred.

EU and UK representative

We appointed Prighter Group with its local partners as our privacy representative and point of contact for:

• European Union (EU)
• United Kingdom (UK)

To contact Prighter or exercise your data-subject rights through it, visit https://app.prighter.com/portal/savorapp.

This section applies to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Our plain-English position: we do not sell your information for money, and we do not sell or share your private Savor Content (reminders, voice, or photos) for advertising.

Personal information we collect and disclose

Over the past 12 months we have collected the following categories of personal information. We disclose the categories marked below to Meta for our own advertising measurement — this can be classified as a “sale” or “share” under the CCPA/CPRA even though we receive no money for it. We collect information directly from you, automatically from your device and use of Savor, and from Apple or Google when you sign in.

• Identifiers — email address, hashed email (signup events), advertising cookie identifiers, device advertising identifier. Disclosed to Meta for advertising measurement.
• Internet or network activity — page views, signup conversions, in-app feature events (content-free). Website conversion events disclosed to Meta.
• Device / technical data — IP address, user agent, OS and app version. Disclosed to Meta as part of measurement.
• Age range — a store-supplied 13–17 or 18+ band and assurance metadata, when available. Exact age, birth date, and store verification details are not collected by Savor. Not sold or shared for advertising.
• Private Savor Content — reminders, voice-derived text, photos, notes, and an AI answer you report. Never sold or shared for advertising.
• Inferences — inferences drawn from your intentions (preferences, patterns). Collected on your device only; not sold or shared; erased from that device when you delete your account or the app.

For an account with a current 13–17 band, optional mobile advertising measurement is unavailable and any earlier consent is cleared. If no age band is available, Savor does not infer that the person is an adult; measurement still requires affirmative in-app consent and, on iPhone, ATT. People under 13 are not eligible to use Savor.

Your rights

• Know / access: request the categories and specific pieces of personal information we have collected about you
• Delete: request deletion of personal information we hold
• Correct: request correction of inaccurate personal information
• Opt out of sale/sharing: opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Non-discrimination: we will not deny service, charge a different price, or provide a different quality of service for exercising these rights

How to exercise your rights

To make a request — including Do Not Sell or Share My Personal Information — email support@savorapp.ai with the subject line California Privacy Request. Include the email address connected to your Savor account or website signup, if any, so we can verify the request. You may also use an authorized agent, and we will verify their authority before acting. We honor verified requests within the timeframes required by law.

If your browser or device sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sale/sharing where we can technically honor it on savorapp.ai. You can also limit cookies through your browser settings, decline App Tracking Transparency on iOS, and reset or limit your advertising ID in your device settings.

Depending on where you live and the law that applies, you may have rights to access, correct, delete, or obtain a portable copy of personal data; opt out of sale, targeted advertising, or certain profiling; and appeal a request we deny. Savor does not use personal data to make decisions that produce legal or similarly significant effects.

Email support@savorapp.ai with “Privacy Request” or “Privacy Appeal” in the subject. You may also use the controls on this page to opt out of sale or sharing for advertising.

Savor is for people age 13 and older. On a fresh install, the app consults Apple or Google Play for a privacy-preserving age range where the store says an age check is required. Savor never asks for a birth date or its own age question. A required store verification or parental step cannot be bypassed inside Savor.

A store-reported under-13 range is stopped before sign-in or access to Savor's online features. Savor does not offer parent-managed accounts for children under 13. When the store supplies an eligible range, the app and private account record keep only the 13–17 or 18+ band, when the check happened, and the policy version—not exact age, store install ID, declaration method, or parental-control details. People in the 13–17 band are asked to complete the store check again after one year.

If the store reports that no age check is required and shares no range, Savor opens without saving or inferring an age band. In that situation, universal privacy, sharing, blocking, reporting, advertising-choice, and deletion protections still apply, but Savor cannot activate controls that depend on knowing a person is in the 13–17 band.

We use store age signals, verification and parental controls first for regional requirements. Country availability or the smallest necessary feature restriction may be used for a mandatory local exception the stores cannot enforce. These store controls support—but do not transfer—Savor's legal responsibilities.

Accounts with a current 13–17 band receive additional output-safety handling for model-written Take action answers. The privacy, sharing, blocking, advertising, and deletion protections described in this policy also apply. Our Teen Safety page explains each technical guardrail and its failure behavior.

If you believe someone under 13 has provided personal information to Savor, contact us so we can investigate and delete it.

We use industry-standard safeguards to protect data in transit and at rest. No system is 100% secure; we continuously work to protect your information.