Privacy Policy

Last updated: October 26, 2026

Saga is a private journal. This policy explains what we collect, why, who helps us run the app, and the choices you have. We wrote it to be read.

1. Who we are

Saga ("we", "us") is operated by Cesar Villescas. You can reach us at villescascesar@gmail.com.

2. What we collect

What you give us

• Your account: your name, email address and a password. Your password is stored in a protected form by Firebase Authentication; we cannot read it.
• Your journal: the text, photos, videos and voice notes you add to your entries, with their dates and order, plus your settings (such as light or dark mode and haptics) and your writing streak.
• Beneficiary details: for each person you name, their legal first and last name, your relationship to them, their phone number, and optionally their email and a short personal note. You are sharing another person's details, so only add people you are comfortable sharing.
• Companion conversations: the messages you send to the companion and its replies.
• Support messages you send us.

What we collect automatically

• Subscription status: if you subscribe to Saga Plus, Apple handles the payment. We receive your plan, whether it is active or in a free trial, and its renewal or expiry date through RevenueCat. We never see your card details.
• Notification token: if you allow notifications, a device token so we can send the daily reminder.
• Usage analytics: which actions you take (for example opening a screen, saving an entry, adding a photo or voice note, using the companion), with simple counts and durations, plus your device model, operating system, app version, language and an approximate location derived from your IP address. These events never include the words you write, your chat messages, your photos or your beneficiaries' details.
• Basic technical logs that help us keep the service running and secure.

What we do not do

We do not show ads, we do not sell your data, we do not track you across other companies' apps or websites, and we do not access your contacts, precise location or health data. The app asks for access to your photos, camera or microphone only when you choose to attach a photo or record, and for notifications only if you allow them.

3. How we use your information

• To run Saga: store and sync your journal, show your streak and calendar, and send your daily reminder.
• To provide the companion (see section 4).
• To manage your subscription and unlock Saga Plus.
• To keep the service secure, prevent abuse and fix problems.
• To understand, in aggregate, how the app is used so we can improve it.
• To answer your questions and to meet legal obligations.

4. AI features

Saga uses AI to write the daily note that can appear under your entry and to power the companion chat.

• Free accounts: when you write, the written text of that day is sent to an AI model to write a short note for you. Nothing is indexed for AI and only the note itself is stored.
• Saga Plus: your entries (text, transcripts of your voice notes and short AI-written descriptions of your photos) are processed to build a private, searchable memory that the companion uses to answer you. Your chats, short summaries of past chats and a profile of the people and topics you have mentioned are stored with your account. Videos are not read by the AI. None of this is shown to anyone else.
• Provider: we use Google's Vertex AI (Gemini models) on Google Cloud servers in the United States. Google's terms for Vertex AI state that customer data is not used to train Google's models without the customer's permission.
• Your control: deleting an entry or a chat removes what the AI derived from it. Deleting your account deletes all AI data. If you would like the AI features turned off for your account, email us and we will do it.
• Please note: the companion is a reflective tool, not a therapist or a doctor. AI can make mistakes. It is not medical, legal or financial advice.

5. Who we share information with

We share information only with service providers that help us run Saga, and only what they need:

• Google (Firebase and Google Cloud): sign-in, database, file storage, hosting of our servers and the AI processing described above.
• Apple: purchases and subscriptions, and delivery of push notifications.
• RevenueCat: manages subscriptions. It receives your account ID and purchase information.
• Amplitude: product analytics, as described above, tied to your account ID and never to your journal content.
• Expo: sends the daily reminder notification to your device.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of the business (we would tell you first). We do not sell or rent your personal information.

6. Beneficiaries

Saga lets you name people who matter to you. Today we only store the details you enter. We do not contact your beneficiaries and we do not give them access to your journal. If we add a way for a beneficiary to request access, it will include identity verification and notice to you, and we will update this policy and tell you in the app before it applies.

7. How long we keep it, and deleting it

We keep your information while your account exists. You can delete your account at any time in the app: Settings, then Account, then Delete account. This removes your entries, photos, videos and voice notes, your beneficiaries, your profile, your AI memory and chats, and your subscription record with RevenueCat. Copies in backups or logs can remain for a limited time before they are overwritten. Analytics events already sent may remain in a pseudonymous form; email us and we will delete them. We may keep limited records where the law requires it.

Deleting your account does not cancel an Apple subscription. Cancel it in your Apple ID settings (Settings, your name, Subscriptions).

8. Security

We use encryption in transit (HTTPS) and access rules so that your journal can only be read by your account. No system is perfectly secure. Your journal is not end-to-end encrypted: our service providers store it, and a small number of authorised people on our team can technically access stored data when needed to operate and secure the service or to help you with a request. We do not browse journals.

9. Your rights

Depending on where you live (for example California, the European Economic Area or the United Kingdom) you may have the right to access your information, correct it, delete it, receive a copy, object to or restrict some uses, and withdraw consent. Email villescascesar@gmail.com from the address on your account and we will respond within 30 days. We will not treat you differently for using these rights. You may also complain to your local data protection authority.

10. Children

Saga is not meant for children under 13, and you must be old enough to agree to these terms in your country. If we learn that a child under 13 has an account, we will delete it.

11. Where your data is processed

Saga's servers are run by Google Cloud, mainly in the United States. If you use Saga from another country, your information is transferred to and processed in the United States.

12. Changes to this policy

If we make important changes we will tell you in the app or by email before they take effect, and we will update the date at the top of this page.

13. Contact

Questions or requests: villescascesar@gmail.com.