Privacy Policy.

• Account information. Email address and password (hashed) when you create an account.
• Saved content. URLs you share to the app, along with metadata (titles, thumbnails, creator names) fetched from those URLs.
• AI-generated tags. Tags generated by AI based on your content metadata. We send metadata — not your personal data — to OpenAI for tag generation.
• App preferences. Notification settings, display preferences.
• Device tokens. Push notification tokens for delivering notifications.
• Usage analytics. When you use our app or website we collect basic, mostly aggregated analytics — pages and screens viewed, interactions, approximate location (derived from IP), and device/browser type — to understand usage and improve Savio. On our website this is collected using first-party cookies (see "Cookies & analytics" below).

• We do not access your social media accounts or passwords.
• We do not scrape or download content — we only store URLs and publicly available metadata.
• We do not sell your data to third parties.
• We do not track you across other websites or build advertising profiles, and we never share your data with ad networks.

We use your data only to run the features you asked for and to improve the product:

• To save and organize your bookmarked content.
• To generate AI tags for content organization.
• To send notifications you have opted into (daily digest, smart nudge).
• To enable collection sharing via share links.
• To measure and improve performance through aggregate usage analytics.

Our website uses PostHog, a product-analytics service, to understand how visitors use the site. PostHog sets first-party cookies to recognize sessions and records events such as page views and clicks. We use this only to improve Savio — never for advertising. We honor the "Do Not Track" browser signal, and you can block these cookies in your browser settings without affecting core functionality.

• Supabase. Cloud database and authentication. Data stored in Supabase's secure infrastructure with row-level security.
• OpenAI. AI tag generation. We send content metadata (titles, captions) — not your personal information — to generate tags.
• PostHog. Product analytics for our app and website. Collects usage events and sets first-party cookies; configured to honor Do Not Track.

Savio is operated from India. Our service providers — Supabase, OpenAI, and PostHog — may process and store data on servers in the United States and other countries. By using Savio, you understand that your data may be transferred to and processed outside your country of residence, under appropriate safeguards.

Your data is stored in Supabase (PostgreSQL) with row-level security enabled. Each user can only access their own data. Passwords are hashed. All connections use HTTPS/TLS encryption.

When you share a collection, its name, description, and item metadata (titles, thumbnails, URLs) become viewable by anyone with the share link. You can deactivate share links at any time.

You can at any time:

• Access the data we hold about you.
• Correct inaccurate account information.
• Export your saved content.
• Object to or restrict certain processing, including analytics.
• Delete individual items or your entire account — deleting your account removes all associated data from our servers.

To exercise any of these rights, email us at support@rovae.in and we will respond within a reasonable period.

We keep your data for as long as your account is active. When you delete your account, we remove your associated data from our servers; backups are purged on a rolling basis. Aggregated, anonymized analytics may be retained.

Savio is not intended for children under 13, and we do not knowingly collect their data. Where local law sets a higher age of digital consent — for example, 18 under India's DPDP Act — users below that age should use Savio only with verifiable parental consent.

We may update this policy from time to time. We will notify you of significant changes via the app or email.

Email us at support@rovae.in with any privacy question and our team will respond. You can request full deletion of your data at any time, and we never sell your data to third parties.