Privacy Policy

1. Introduction

Svala (“we”, “us”, “our”) provides a personal memory vault that lets you store photos, journals, and notes, and search them with AI. This Privacy Policy explains what we collect, why we collect it, and what rights you have over your data.

By using Svala you agree to the practices described below. If you don’t agree, please don’t use the service.

2. Information we collect

• Account information: your email address, display name, and (optionally) a profile photo and bio.
• Memories you create: photos, journal entries, notes, titles, captions, and tags you upload or write.
• AI conversations: messages you send to the assistant and the responses generated for you.
• Technical data: basic logs (IP address, browser type, timestamps) used to keep the service running and secure.

3. How we use your information

• To provide, maintain, and improve Svala.
• To let you store, search, and revisit your memories.
• To power AI features such as natural-language search and storyboards.
• To authenticate you and protect your account.
• To communicate important service updates.

We do not sell your personal data. We do not use your memories to train public AI models.

4. AI processing

When you ask the assistant a question or generate a storyboard, relevant memory content is sent to our AI provider to produce a response. Providers process this data on our behalf under contract and are not permitted to use it for their own training.

5. Data storage and security

Memories and account data are stored on encrypted infrastructure. Access is protected by row-level security so only you can read your own memories. We use industry-standard safeguards, but no system is ever 100% secure.

6. Sharing

We share data only with service providers strictly necessary to run Svala (hosting, database, AI inference, email delivery), or when required by law. We never share your memories with advertisers.

7. Your rights

You can at any time:

• Access and download your memories.
• Edit or delete individual memories.
• Delete your account, which removes your memories from active systems.
• Request a copy or correction of your personal data.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

8. Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your memories from production systems and purge them from backups within 30 days.

9. Children

Svala is not intended for children under 13 (or under 16 in the EU). We don’t knowingly collect data from them.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you in the app or by email before they take effect.

11. Contact

Questions about privacy? Reach us at privacy@svala.app.