Savia Privacy Policy

Revision: 29 September 2026 · Effective date: [Effective date]

[Legal entity name], doing business as Stack64, operates Savia and this website. This policy explains the information we collect, why we use it, who receives it, and your choices. Contact support@stack64.com or write to [Business mailing address]. Read our separate Consumer Health Data Privacy Policy for health-data categories, disclosures, and state-law rights.

This draft describes the planned release. Features may differ by version and availability. A description does not enable a feature or authorize processing; the effective notice, consent, and feature permissions must accompany the release before the processing begins.

1. Main commitments

We use your information to provide the requested or enabled Savia features, maintain accounts and security, handle requests, and meet legal duties. We do not sell personal information, use health information for targeted advertising, or use ordinary production health content to train models or as benchmark inputs. A future optional improvement or research program requires a separate notice and affirmative authorization before participation; accepting this policy is not participation.

Savia provides wellness information and support, not clinical care or emergency monitoring. Health information you put in a consumer app is not necessarily protected by HIPAA merely because it is about health. Applicable consumer-health and other privacy laws may protect it. Our description of intended use is not a determination of medical-device status.

2. Information, sources, and purposes

• Account and settings: email, sign-in identity and session information from you and your identity provider; profile, age confirmation, language, time zone, permissions, consent and withdrawal records. Used for access, security, preferences, and accountability.
• Information you supply or connect: messages, documents, photos, dictation, health readings, symptoms, medications, allergies, goals, plans, check-ins, and tracker logs from you, authorized Apple Health or wearable connections, and features you use. Used to answer questions, organize evidence, personalize plans, and review progress. Reproductive-health features require the corresponding express selection and source permissions.
• Inferences and research: extracted observations, possible explanations and conditions, goal assessments, research questions and records, and findings derived from authorized information. These may be sensitive health information even when generated from ordinary activity. They may be inaccurate. Research can span days and reuse relevant historical photos only with the photo-research permission.
• About me and optional sensitive facts: life circumstances, diet, work hours, household details, and other facts you provide; for a chosen faith or meaning goal, your selected practice, reported connectedness, and optional tradition. These are used to personalize the selected features and may be sent with your messages to Gemini. Savia does not assign a religious tradition from your behavior.
• Memory and adaptation: optional conversation notes about preferences and routines; responses, dismissals, and completed steps used to adapt tone, timing, frequency, and eligibility for the limited automatic actions you enabled. These permissions do not expand allowed actions.
• Area and environment: when enabled, your selected place, rounded area of roughly 10 km across, time zone, and town-search words; used for weather, air quality, pollen, daylight, and contextual suggestions. This release description covers place selection, not collection of device GPS coordinates. Any later device-location feature needs its own accurate notice and permission.
• Sharing and communication: recipients you select, authorized content and connection scopes, delivery identifiers, notification text, and sharing receipts. Used for your authorized exports, email, notifications, and connected sharing.
• Technical and support information: service and security events, device/app version, request identifiers, support correspondence and attachments you choose to send, and optional diagnostics. Used to operate and protect Savia, resolve reports, and respond to rights requests. Website hosting may process IP addresses, requested URLs, timestamps, browser information, and security events even though these static pages contain no advertising trackers.

3. How features process information

Gemini receives the messages and relevant context used for a requested or enabled task, which can include records, photos, profile facts, saved findings, and app logs. Background research may choose a question about a goal only under its permission and topic controls. An analysis program may process task information in an isolated AWS environment with internet access disabled for that program. Saved research records are distinct from temporary execution state.

For research photos, Savia removes supported embedded metadata such as location before transmission. Visible names, faces, labels, or other details in the image may remain. Camera permission for a generated app does not itself authorize use of its photos in research. Possible-condition reports follow their separate switch.

Search services receive queries derived from the question and relevant context, potentially including what was learned from a photo. Savia instructs its AI to use general terms and omit identifying details and copied private text, and does not attach private photos, messages, or records to search requests. Generated queries can nevertheless contain unintended personal details, and their topics can reveal health interests. This risk disclosure is not permission to disclose information outside the applicable consent and safeguards. Research lookups can be disabled in Settings.

Push text may include your first name but excludes health details. Delivery services receive that text and a device delivery identifier. A lock-screen notification may reveal that you use Savia. Notification delivery is not guaranteed. Urgent notices have separate controls and may bypass Savia's ordinary quiet hours and daily limit.

4. Providers and other recipients

Providers receive the information needed for the relevant function. Processor use is subject to applicable instructions and contractual safeguards. A provider may also act independently for specified service-security, account, legal, or operational data under its own terms; we do not claim every provider activity occurs solely on our behalf.

We may disclose the minimum information required by a valid legal obligation, or permitted by an applicable legal exception to address a serious safety or security issue. This does not create a routine monitoring or emergency-response service. A lawful business transfer may involve relevant records subject to continuing privacy obligations. For consumer health data, consent and the specific statutory rules still apply; a broad business, safety, or legal-purpose label does not itself authorize disclosure. We do not provide health data to employers, insurers, or clinicians for their own use unless you direct it or a specific legal obligation requires it.

[Before publication: verify active vendors, processor contracts and independent roles, support vendor, hosting configuration, and any affiliate recipients. Identify actual affiliates in the consumer-health notice; do not treat this list as completed diligence.]

5. Your choices and corrections

You can manage source connections, optional diagnostics, research lookups, background work, photos, condition reports, automatic actions, adaptation, memory, area sharing, camera permissions, and notifications through the controls available for your version. Savia's panel is accessible from Settings. Turning off one feature does not silently turn off a separately controlled feature; review the setting's scope.

Conversation-memory notes exclude health conditions, medication, reproductive or mental health, religion, and another person's health. This exclusion applies to that memory feature, not information you separately provide in messages, uploads, About me, logs, or reports. You can inspect, correct, or remove notes, profile facts, and saved findings using their controls, and reset adaptation. Removing a finding or note does not automatically erase its source or earlier reports. Request deletion if you want those removed too.

Corrections may be recorded as revisions so their source and history remain understandable. Revoking evidence stops future reliance through the relevant controls; it is not the same as deleting every copy. Turning area sharing off removes the saved area and stops new area-based requests, but does not erase past conversation references or immediately purge provider logs.

6. Access, withdrawal, deletion, and appeals

Use the in-app export and deletion controls or contact support@stack64.com with "Privacy request" and the action you want. You may request access, correction, deletion of health data without closing your account, withdrawal of applicable collection or sharing consent, or information about recipients. Do not put health records, identity documents, or passwords in the initial email. We authenticate requests with information reasonably necessary, using an existing account where appropriate; you do not have to create a new account.

A self-service export may omit originals above its 40 MB limit. That limit does not restrict statutory access rights: contact us for omitted material or another required access format. Export links expire after seven days; protect the files and links you receive.

Withdraw through the app's consent control or contact us. Withdrawal stops new collection, analysis, and provider requests dependent on that consent, including queued work that has not started. It cannot recall requests already sent. History remains subject to deletion and retention rules. Features that require a withdrawn permission may stop functioning; we do not unlawfully discriminate against you for exercising rights.

For account deletion, use Settings › Delete account. The app provides a seven-day cancellation period during which account work is paused. After that period, deletion begins; seven days is not a promise that every copy has been erased. Applicable legal deadlines take priority over this grace period. Deletion covers applicable original and derived records and is propagated to providers as required. Independent recipients of copies you previously shared may have their own lawful obligations; we still send deletion notices where law requires.

Request decisions include reasons for any refusal and appeal instructions. Reply to support@stack64.com with "Privacy appeal" and the request reference. We review appeals without requiring a new account. The Consumer Health Data Privacy Policy gives Washington and Nevada procedures and deadlines. Other applicable laws may supply additional rights, including authorized-agent requests, portability, restrictions, or complaints. We apply the law that protects your request; this policy does not waive it.

7. Retention

We retain information only as reasonably necessary for its disclosed purpose and lawful obligations, taking account of sensitivity, feature use, deletion requests, security needs, and applicable deadlines. Keeping an account open is not a reason for indefinite retention. We restrict any legally retained exception to its specific purpose, retain the minimum necessary, and delete it when the basis ends.

Deletion requests include covered derived information and provider copies, not only the visible account row. Backups are access-restricted and used for recovery, with deletion reapplied if restored, subject to applicable law. Statutory backup exceptions are limits on delay, not our routine retention schedule. The consumer-health notice states the applicable Washington and Nevada limits; shorter applicable requirements prevail.

8. Security and incident handling

We use authentication, access controls, encrypted transport, restricted storage access, and logging controls designed to protect information. Authorized personnel receive access appropriate to their function, including necessary support and incident investigation. No system can guarantee absolute security. Keep download and sharing links private; possession of a valid link may permit access within its scope until expiry or revocation.

If an incident triggers a legal notification duty, we will provide the notices required by applicable law. Consumer-health breach notification rules may apply even where HIPAA does not. This is not a guarantee that every incident is immediately detected or that every report is a legally notifiable breach.

9. Processing locations and availability

Information may be processed in the United States and other countries where our providers and their authorized subcontractors operate. We do not promise exclusive U.S. residency. For example, paid Gemini terms permit certain processing or temporary storage across Google's operating locations. International processing must use safeguards required by applicable law.

[Confirm actual storage regions, provider processing locations and transfer safeguards before publication.]

The initial launch is intended for adults in the United States. Before offering Savia in a particular Latin American country, we will provide the local notices, language, permissions, rights mechanisms, and transfer safeguards it requires. No UK launch is announced here.

10. Adults only

Savia is intended for people 18 and older. We do not knowingly collect information from children through an account intended for them. If you believe a child has provided information contrary to this policy, contact support@stack64.com so we can investigate and take appropriate steps.

11. Changes to this policy

This policy and our services can change. We will publish the revised version and effective date and give clear notice of material changes through the app, account email, or another appropriate channel before the change applies, as required by law. Previous effective versions are available on request. New categories, purposes, recipients, or materially different uses of previously collected information require additional notice and affirmative consent where applicable before processing begins. Continued use of Savia or a general right to change the service does not substitute for required consent or retroactively remove your rights.

12. Contact

Privacy requests and questions: support@stack64.com. Operator: [Legal entity name], doing business as Stack64, [Business mailing address]. Health-data rights are explained in our separate Consumer Health Data Privacy Policy.