Last updated: 3 August 2026
To do its job at all, SAVA has to know what you liked. This page says exactly
what is kept, why, who it reaches, and how you delete all of it.
SAVA does not sell your data. Not to advertisers, not to
data brokers, not to anyone. There are no ad networks and no third-party
tracking SDKs in the app.
1. What we collect
What you give us
- Email address, handle, and display name.
- Your password — never stored as typed; only a cryptographic derivation of it (scrypt) is kept.
- If you sign in with Apple or Google: the user identifier that service gives us, and your email address. Your password at that service never reaches us.
- A short bio and profile picture, if you add them.
- Your answers to the onboarding questions.
What your use produces
- Every like, pass, and rating you give a title, with its timestamp.
- Shows you track and episodes you mark watched.
- Your catalog searches.
- The description of your taste that SAVA writes from all of the above.
- Follows, shares, posts, and likes in the social section.
About your device
- A device identifier the app generates itself — not the IMEI, not a serial number, and not anything that means anything outside SAVA.
- Name, model, OS version, and app version, so you can tell your own phones apart in the device list.
- A push token, if you allow notifications.
- The language you read the app in.
About payments
- Amount, date, plan, and the transaction reference.
- For card payments, the card number masked only (e.g. 621986******1234), exactly as the gateway hands it to us.
Your full card number, PIN, and CVV2 never reach SAVA.
You enter those on the bank gateway's own page; we neither see nor store
them.
2. Why
- To build recommendations — which is what the app is for.
- To keep your account and know who is signed in.
- To enforce the two-device limit and the one-trial-per-device rule.
- To make your subscription work and to trace a payment that went wrong.
- To send the notifications you turned on.
- To see which parts of the app work and which are broken.
3. Who it is shared with
For SAVA to work, parts of this data necessarily reach a few outside
services. This list is complete:
- TMDB — where film and television information is read from. We send a title identifier and a language; your identity is not sent.
- Language-model services — the description of your taste and the reasons beside recommendations are written by a language model. What reaches the model is a list of titles you liked or passed on; your name, email, and account id do not go with it.
- Zibal — for card payments only, to carry out the transaction.
- SibApp — in the SibApp build only, to validate a purchase.
- Apple — for Sign in with Apple, in-app purchase, and delivering notifications to iPhones.
- Google (Firebase) — for Sign in with Google and delivering notifications to Android.
- Cloudflare — as a network intermediary and to compute semantic similarity between titles.
Beyond these, we share nothing with anyone unless the law requires it.
4. What other people can see
Your handle, display name, bio, and profile picture are visible to other
users, as are your posts and shares. If you make your account
private, your activity is visible only to your followers.
Your likes and passes in the catalog are never shown to anyone.
5. How long it is kept
As long as your account is open. When you delete your account, your profile,
taste, swipes, tracked shows, posts, follows, and devices are removed.
There are two exceptions and we state both plainly:
payment records are retained for financial and audit
obligations, and the identifier of a device that has used a free
trial is retained — otherwise deleting an account would be a way to
obtain unlimited free trials. Neither remains attached to your name or email.
6. Your rights
- See it: everything we hold about you is shown in the app itself.
- Correct it: change your name, bio, email, and picture in Settings.
- Delete it: Settings → Delete account. Immediate and irreversible.
- Sign a device out: remove any device from the device list.
- Notifications: turn off each category separately in Settings, or all of them in your OS settings.
7. Security
All traffic is encrypted (HTTPS). Passwords are stored with scrypt and a
random salt. Service keys are held on the server and outside the code
repository. That said, no system is perfectly secure and we cannot guarantee
absolute security.
8. Children
SAVA is not for anyone under 13 and we do not knowingly collect data from
them. If we learn such an account exists, we delete it.
9. Changes to this policy
If we change it, the date at the top of this page is updated and we announce
significant changes in the app.
10. Contact
Any questions about your data:
support@cheetateam.dpdns.org