Privacy Policy
Last updated 2 October 2026
SaveSearch lets you save links from any app and search everything you saved. This policy explains what we collect to do that, why, who helps us run the service, how long we keep things, and how you stay in control. SaveSearch is run by Bryan LYT (“we”). We do not sell or share your personal information, and we do not use it for advertising.
What we collect
- Your account: your email address, and when you signed in. If you sign in with Google, we receive your email address from Google, nothing else.
- What you save: the links you save, the notes you write (“Why you saved this”), the collections you put them in, and whether you marked them used or archived.
- What we capture from a link: to make a save searchable we fetch the page and keep a text snapshot — title, author or account name, description, the text of an article or caption, a transcript or on-screen text where available, and a small thumbnail. We never download or mirror videos, and we never log in to another service on your behalf.
- Text you add: captions you paste and screenshots you upload to make a save searchable. Screenshots are read on our servers to extract their text.
- Devices: when you connect the iPhone app, the Chrome extension or the iPhone Shortcut, we store a scrambled (hashed) copy of its access token, its name and when it was last used. On your iPhone, links you share wait in the app until they are sent.
- Subscription: if you subscribe, whether you are on Pro, until when, and where you subscribed (website or iPhone). Stripe or Apple takes the payment; we never see your card details. For a website subscription we keep Stripe’s customer reference.
- Service records: technical logs (for example request IDs and errors) to keep the service working and secure, and counts of product events such as “a search happened”. These never include what you searched for or wrote.
We do not collect your contacts, location, browsing history, or passwords for other services. Search queries are used to answer your search and are not stored with your identity.
Why we use it (lawful basis)
- To provide the service you asked for (contract): saving, capturing, searching, syncing between your devices, exporting and deleting.
- To keep it secure and working (legitimate interests): rate limits, abuse prevention, error logs and backups.
- To email you (contract): sign-in codes and links, and messages about your account such as a scheduled deletion. No marketing email without your consent.
AI
SaveSearch can suggest topics for a save using an AI provider (Anthropic). This is currently switched off. When it is on, only the text we captured from the link is sent — never your notes, your searches, your email address or any other save — and providers we use do not train on it.
How long we keep things
These periods are exact, and match what the product tells you when you delete something.
| Data | Restorable after delete | Permanently deleted | Removed from backups |
|---|---|---|---|
| A save (item) | 30 days | Day 30 | Within 35 days |
| Your account | 14 days | Day 14 | Within 35 days |
| Operational logs | — | 30 days | 30 days |
| Privileged-access audit log | — | 90 days | 90 days |
| Idempotency keys | — | 24 hours | — |
| Analytics events | — | 13 months | 13 months |
| Uploaded screenshots | 30 days | Day 30 | Within 35 days |
Everything else is kept while your account exists, and deleted with it.
Who helps us run SaveSearch (subprocessors)
| Provider | What for | Data | Where |
|---|---|---|---|
| Supabase | Database, sign-in, file storage | Everything in your account | South Korea (Seoul) |
| Vercel | Hosting the website and API | Requests passing through, technical logs | Global edge network |
| Inngest | Background jobs (capturing a link after you save it) | Save and job identifiers, the link being captured | United States |
| Resend | Sending sign-in and account emails | Your email address, the email content | United States |
| Anthropic | AI topic suggestions (currently off) | Captured text of a save only | United States |
| “Continue with Google”, only if you choose it | Your email address | Global | |
| Stripe | Taking payment for a subscription on the website, only if you subscribe | Your email address, your payment details (held by Stripe, not us) | United States |
| RevenueCat | Managing a subscription bought in the iPhone app, only if you subscribe | Your account ID and Apple’s purchase record | United States |
| Apple | Delivering the iPhone app (App Store, TestFlight), and taking payment for a subscription bought in it | Whatever Apple collects under its own policy | Global |
When we capture a link we also contact the website or platform it points to (for example YouTube’s or Instagram’s public embed services). They receive the link and our server’s address, not who you are. See how our fetcher works.
International transfers
Your data is stored in South Korea and may be processed in the United States and other countries by the providers above. Where data leaves Australia, the UK, the EU or Malaysia we rely on the providers’ standard contractual clauses or equivalent safeguards.
Your rights, and how to use them in the product
- See and correct: everything you saved is in your Library; edit notes and collections on each save.
- Take it with you (portability): Settings → Export everything gives you a complete copy in JSON, CSV and Markdown. It is free on every plan, always.
- Delete: delete any save (restorable for 30 days), or delete your whole account in Settings (you can change your mind for 14 days).
- Object, restrict, or ask anything else: email us at bryan@foundercreate.com. We answer within 30 days.
You can also complain to your data protection authority — for example the Office of the Australian Information Commissioner (OAIC), the UK ICO, your EU supervisory authority, or Malaysia’s Personal Data Protection Commissioner.
Cookies
We use only the cookies needed to keep you signed in. No advertising or tracking cookies, and no third-party analytics scripts when you view your library.
Children
SaveSearch is not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will tell you in the product or by email before it applies. The date at the top always shows the latest version.
Contact
Bryan LYT, Unit 3, 1 Wanneroo Road, Joondanna WA 6060, Australia. Email: bryan@foundercreate.com.