Privacy Policy

Sova is a local-first life planner for iPhone. This policy explains what we collect, what stays on your device, and how optional cloud features work.

Plans stay on your device

Your groups, items, notes, attachments, and calendar preferences are stored on your iPhone by default. We do not require an account to use core planning, and private groups you never share never leave your device.

Live groups and sync

A group becomes a live group the moment you share it — by creating or copying an invite link — or when you join someone else's. From then on, that group's items (titles, notes, dates, locations, links, attachments) are stored on our servers (Supabase, encrypted in transit and at rest) so every member and every signed-in device sees the same truth. Your iPhone keeps a local copy and everything still works offline; changes sync when you're back.

When an invite link is pasted into a chat or opened in a browser, its preview shows your display name and the group's name (or “a private list”) to whoever has the link, until you revoke it or it expires. A shared copy link carries the items you chose inside the link itself; its preview shows only the group name and how many items it holds. We do not store or log these previews.

To keep sync reliable, our servers keep short technical logs of changes to live groups (who changed which item, and when). These are deleted automatically on a schedule: change logs after 30 days, delivery records after 7–45 days depending on type. They are never used for advertising and never sold.

Optional sign-in

If you sign in, we store an account identifier and the profile details you choose (such as display name, username, and photo). Sign in unlocks sharing, live groups, and Pro structural features that need a server (screenshot scanning, unlimited shared lists, availability sharing, attachments).

You can sign in with Apple or with an email address. If you use email, we store the address to identify your account, and account emails (such as a confirmation or sign-in message) are delivered by our email provider, Resend. It receives only your address and that message — never your plans.

Joining from a browser

If you're invited to a shared list and aren't on an iPhone, you can join it from a web browser at sovaplanner.com/w/, signing in with a code sent to your email or with Sign in with Apple (Apple tells us your Apple ID’s email or its private relay address; Sova never sees your Apple password). Only the lists you were invited to are shown there. So it opens quickly and keeps working on a patchy connection, that browser stores your sign-in, a copy of those lists, and any changes not yet sent. Signing out on that browser removes them. The browser version uses no cookies and no analytics, and you can delete your account from it.

People and availability

If you use people features, we store the connections you make: who you follow, who follows you, and the profile fields you publish. Your profile's public or followers-only groups are shown to others exactly according to the visibility you set — private groups are never listed to anyone.

If you share your availability, approved people see only busy or free blocks: start and end times, or an "away / busy all day" marker. Event titles, notes, locations, and which calendar or group a block comes from are never stored or shown. You choose exactly who can see your availability, per person, and you can turn it off for anyone at any time — which immediately removes their access.

Connected calendars

When you paste a calendar link (for example from Airbnb or TripIt), Sova fetches it on your device. The link is stored in the iOS Keychain. If you are signed in, an encrypted copy of the link may be saved to your account so another signed-in device can restore it. Calendar event titles and details from those feeds are not sent to our AI service.

Screenshot and text scanning (Pro)

When you scan a screenshot, or ask Sova to find dates and to-dos in text you pasted, that screenshot or text is sent securely to read it and is never stored. The names of your groups and the people in them are not sent; Sova matches plans to your groups on your device. What Sova finds opens as drafts you review before anything is saved.

Notifications and widgets

Local reminders and widgets use on-device data. Collaboration alerts for live groups use short, privacy-limited bodies without plan titles when configured that way.

Analytics (optional)

If you opt in, we may collect closed-category product events (booleans and count buckets) — never titles, notes, locations, or free-text search.

This website uses Cloudflare Web Analytics: cookieless and privacy-friendly by design — no cookies, no personal data, no cross-site tracking, no consent banner needed.

Understanding how Sova is used

If you sign in, we look at account and service records we already keep to run the service — when you joined and last opened Sova signed in, your app version, language and time zone, your plan, and counts such as how many shared lists, invites, and edits you have — to see where people get stuck and whom we could help. Only we can see this, in a private internal dashboard. It never includes the content of your plans, your email address, or your location, and it is not used for advertising or for any automated decision about you. You can object at any time by emailing us.

Purchases

Subscriptions are processed by Apple. We receive entitlement status needed to unlock Pro features.

Retention and deletion

You can export or delete local data in Settings. Signing out clears account-bound local connection secrets. Deleting a live group deletes its items from our servers; leaving one removes your access. Deleting your account removes your server-side profile, groups you own, items, and connected-app metadata. Short-lived sync and delivery logs are deleted automatically (7–45 days, as described above).

Your rights and our legal duties (GDPR)

Controller: Victor Nivelleau, trading as 1neurone (contact below). As a small operation we are not required to appoint a Data Protection Officer; the same contact handles privacy requests.

Legal basis: core planning runs on your device with no personal data sent to us. When you sign in, share a group, or use Pro cloud features, we process the data described above to provide the service you asked for (performance of a contract). Reviewing account and service records to understand and improve Sova (described above) relies on our legitimate interest in running a reliable service. Optional analytics runs on your consent. We never sell your data, use it for advertising, or make automated decisions about you.

Your rights: you can access, correct, export, and delete your data at any time — most of it directly in Settings (export, delete local data, delete your account). You can object to processing or withdraw analytics consent in Settings. For anything else, email us and we will answer.

International transfers: live-group data is processed by Supabase, and account emails are delivered by Resend. Where that involves transfers outside the EU/EEA, they are covered by the processor's data protection terms, with encryption in transit and at rest.

Complaints: you have the right to lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).

Contact

Questions: hello@sovaplanner.com · Support: sovaplanner.com/support