Privacy Policy

Sova is a local-first life planner for iPhone. This policy explains what we collect, what stays on your device, and how optional cloud features work.

Plans stay on your device

Your groups, items, notes, attachments, and calendar preferences are stored on your iPhone by default. We do not require an account to use core planning, and private groups you never share never leave your device.

Live groups and sync

A group becomes a live group the moment you share it — by creating or copying an invite link — or when you join someone else's. From then on, that group's items (titles, notes, dates, locations, links, attachments) are stored on our servers (Supabase, encrypted in transit and at rest) so every member and every signed-in device sees the same truth. Your iPhone keeps a local copy and everything still works offline; changes sync when you're back.

To keep sync reliable, our servers keep short technical logs of changes to live groups (who changed which item, and when). These are deleted automatically on a schedule: change logs after 30 days, delivery records after 7–45 days depending on type. They are never used for advertising and never sold.

Optional Sign in with Apple

If you sign in, we store an account identifier and the profile details you choose (such as display name, username, and photo). Sign in unlocks sharing, live groups, and Pro structural features that need a server (screenshot scanning, unlimited shared lists, availability sharing, attachments).

People and availability

If you use people features, we store the connections you make: who you follow, who follows you, and the profile fields you publish. Your profile's public or followers-only groups are shown to others exactly according to the visibility you set — private groups are never listed to anyone.

If you share your availability, approved people see only busy or free blocks: start and end times, or an "away / busy all day" marker. Event titles, notes, locations, and which calendar or group a block comes from are never stored or shown. You choose exactly who can see your availability, per person, and you can turn it off for anyone at any time — which immediately removes their access.

Connected calendars

When you paste a calendar link (for example from Airbnb or TripIt), Sova fetches it on your device. The link is stored in the iOS Keychain. If you are signed in, an encrypted copy of the link may be saved to your account so another signed-in device can restore it. Calendar event titles and details from those feeds are not sent to our AI service.

Screenshot scanning (Pro)

When you scan a booking or event screenshot, your screenshot is sent securely to read it and is never stored. The extracted details open as a draft you review before anything is saved.

Notifications and widgets

Local reminders and widgets use on-device data. Collaboration alerts for live groups use short, privacy-limited bodies without plan titles when configured that way.

Analytics (optional)

If you opt in, we may collect closed-category product events (booleans and count buckets) — never titles, notes, locations, or free-text search.

This website uses Cloudflare Web Analytics: cookieless and privacy-friendly by design — no cookies, no personal data, no cross-site tracking, no consent banner needed.

Purchases

Subscriptions are processed by Apple. We receive entitlement status needed to unlock Pro features.

Retention and deletion

You can export or delete local data in Settings. Signing out clears account-bound local connection secrets. Deleting a live group deletes its items from our servers; leaving one removes your access. Deleting your account removes your server-side profile, groups you own, items, and connected-app metadata. Short-lived sync and delivery logs are deleted automatically (7–45 days, as described above).

Contact

Questions: [email protected] · Support: sova.1neurone.com/support