Privacy notice

Last updated 15 September 2026.

RedlySave saves videos and links you send from your phone so you can organise them on a computer. This page says exactly what that means for your data. It describes what the product actually does today — not what it might do later.

Who is responsible

RedlySave is still in early testing. For anything on this page, including the rights described below, write to redlysave@gmail.com. The business responsible for RedlySave will be named here before it opens to the public.

What we collect

Your account. When you sign in with Google we receive and store your email address, your name and your profile picture URL, plus the date you joined. We store Google’s sign-in tokens so the session works. We never see your Google password.

What you save. For every card: the link you shared, which platform it came from, and the public information that platform publishes about it — the author, the caption and the publication date. Plus anything you add yourself: a name for the card, notes, tags, colours, which pile it’s in and where you placed it on the canvas.

Thumbnails. We copy the cover image the platform publishes into our own private storage, because platform image links expire within hours. We never copy, store or re-host anyone’s video. Playback always happens in the platform’s own official embedded player.

Your capture token. The secret your phone Shortcut uses to prove a capture is yours. It is encrypted before it is stored, under a key held outside the database, and you can replace it at any time from your settings page.

Feedback you send us. If you use the feedback box, we store what you wrote and which page you were on when you wrote it. Nothing else is attached to it, and it is deleted with your account like everything else.

Errors and app health. When something breaks we record the error, the page or route it happened on, and the software version. Separately, each time a page is opened the app sends a small health signal: a random session number that is not linked to your account, whether anything went wrong, the software version, and the description your browser gives of itself (which browser and operating system). That is how we can tell whether a new version made the app less reliable. We deliberately do not attach your identity, your cookies or the contents of any request, and we do not record your screen. Our error-monitoring provider sees your IP address when these records arrive, as any server does, and is set not to store it. Without this we would only learn about failures if you told us about them.

How you use the app. We count actions so we can tell which parts of the product are worth keeping — that a pile was made, a card was filed, a view was switched, a filter was applied. Each record is a fixed event name, which view it happened in, and sometimes a number like “three cards selected”. It is never able to contain what you saved, searched for, tagged or wrote: there is no field for it. These records are deleted after 180 days.

Search deserves saying separately, because what you look for is as revealing as what you save: we record that a filter was used, how many terms it had, and whether it found nothing — never the words themselves.

What gets saved, counted across everyone. We look at the cards on all boards together to see which platforms, sites, creators and tags come up most, and whether several people have saved the same thing. This is counting, not reading: it produces totals, never a picture of any individual, and we never compare people to each other by what they save. Anything that involves more than one person’s board is only ever reported once at least three separate people are involved, so a number can never quietly point at you. Your own board stays yours and is shown to nobody except people you have deliberately shared it with (see below).

What we do not collect

We run no advertising and no third-party trackers, and all of the counting described above stays on our own servers rather than being sent to an analytics company. The only cookie we set is the one that keeps you signed in. We do not sell or share your data, we do not build behavioural profiles, and we do not use what you save to draw conclusions about you as a person. Nothing you save is shown to other users, and there is no public or shared feed of any kind. If any of that changes, this page changes first.

When we fetch a link’s public information, our server makes that request — not your browser. The platform sees us asking about a public URL. It does not learn who you are from us.

Why we’re allowed to hold it

Your account and everything you save, we hold in order to provide the service you asked for — that is our contract with you. Error records, app-health signals, usage counts, the aggregate view of what gets saved, and the security measures around your capture token, we hold on the basis of our legitimate interest in keeping the service working and improving it. We have kept each of those as narrow as we could: no profiling, no sharing, and totals rather than individuals.

Who else touches it

We keep this list short on purpose, and everyone on it processes data on our instructions only.

• Google — sign-in.
• Vercel — runs the application and stores the thumbnails.
• Neon — the database.
• GitHub — holds the nightly database backup files for 30 days.
• Sentry — receives the error records and app-health signals described above.

Where your data is stored

In the United States: the database is in Ohio and the application runs in Washington, D.C. For anyone in Europe that means your data is transferred outside the EU. Every provider listed above covers that transfer with one of the safeguards EU law provides for it — certification under the EU–US Data Privacy Framework, or the European Commission’s standard contractual clauses in its data processing terms.

Boards you share with other people

Boards are private to you unless you deliberately share one. Sharing a board creates a link; anyone who opens that link and signs in joins that board and can add, edit and delete cards on it. You can turn the link off, and remove anyone on the board, at any time from the board’s share panel. The link also stops working on its own after 14 days.

On a shared board, everyone on it can see every card on it, and who added each one. The person who owns the board can see the name and email address of everyone who has joined it — that is how they decide who should still have access. Nothing else about you is shared, and your other boards stay private.

If you leave a shared board or are removed from it, you lose access immediately; cards you added stay on the board, because they belong to it. If you delete your account entirely, you are removed from every shared board and the cards you added to them are destroyed along with the rest of your data.

How long we keep it

Your account and your cards stay until you delete them. A deleted card is recoverable for 7 days and is then destroyed permanently. A deleted board disappears straight away, can be restored from Settings for 7 days, and is then destroyed along with every card on it. Usage records are destroyed after 180 days. An invite link that has expired or been turned off is deleted 30 days later. If you delete your account, everything goes at once — boards, cards, thumbnails and account record — with no grace period.

One honest caveat: our nightly backups will still contain a copy for up to 30 days after deletion, until those backup files age out and are destroyed on their own schedule. We don’t edit backups, because a backup that can be edited isn’t one. Nothing is restored from them except to recover from a failure.

Your rights

You can exercise the first two yourself, right now, without asking us — we think that is the only honest way to offer them:

• A copy of your data — the settings page exports everything we hold as a single machine-readable file.
• Deletion — the same page deletes your account and everything in it.
• Correction of anything inaccurate, and objection to our legitimate-interest uses above — write to us.
• You may also complain to your national data protection authority.

Changes

If this notice changes materially we will say so in the app rather than quietly editing the page. The date at the top always reflects the current version.