Savify Privacy Policy

Information We Access

Savify is a notification-capture utility for WhatsApp, Instagram, and Telegram. It reads the content of notifications posted by those apps on your device through Android's Notification Listener feature, which you explicitly grant during setup and can revoke at any time in your device's system settings.

• WhatsApp — message text and, where available, photos, videos, GIFs, stickers, and voice notes. Where a device manufacturer strips media data out of the notification itself, Savify also reads directly from WhatsApp's own media folder on your device, using a separate, one-time permission you grant and can revoke independently. Using that same permission, Savify also copies the photo and video Statuses you've viewed from WhatsApp's own Status cache into Savify's local storage, so they aren't lost when WhatsApp clears them.
• Instagram — message text only. Instagram's notifications don't carry photo, video, GIF, sticker, or voice-note data, and Instagram has no equivalent media folder Savify can read from.
• Telegram — message text and photos. Videos, GIFs, stickers, and voice messages are not recovered, since Telegram stores that content in a folder Android itself blocks every other app from being granted access to.

Savify does not read any other app's notifications, and does not access your contacts, call log, precise location, camera, or microphone.

How We Use the Information

Everything Savify accesses is used for one purpose: showing you messages, media, and WhatsApp Statuses that WhatsApp, Instagram, or Telegram already delivered to your device, in case they're no longer visible inside those apps. It is never used for advertising targeting, profiling, or any purpose beyond the recovery feature visible in the app.

Local Storage & Your Recovered Content

All recovered messages and media are stored only in a local database and local file storage on your device. Savify has no backend server — none of your recovered content is ever transmitted off your device, uploaded to the cloud, or made accessible to us in any form.

If you use the in-app Export Recovered History feature, the exported file (a text or PDF transcript) is likewise saved only to local storage on your device — Savify does not upload it anywhere.

Permissions Required

Savify requests only the permissions its features actually need:

• Notification Access — the core permission the app is built around; lets Savify read WhatsApp, Instagram, and Telegram notification content.
• Post Notifications — lets Savify show its own status notification while its background capture service is active.
• Foreground Service — required by Android so the capture service keeps running reliably in the background.
• WhatsApp media folder access (Storage Access Framework) — a one-time, user-approved grant limited specifically to WhatsApp's own media folder; Savify cannot browse any other folder on your device with this permission.
• Legacy storage write access (Android 9 and earlier only) — unused on modern Android, which handles saved files through the system's MediaStore instead.
• Internet and network status access — used for ads, crash reports, and the setup videos, and to check for a connection before loading them. Never used to upload your recovered messages or media.
• Device biometric/lock check (only if you enable App Lock in Settings) — Savify asks Android's own secure biometric system to verify it's you. Savify never sees, stores, or has access to your fingerprint, face data, or device PIN; that verification happens entirely inside Android's own secure component.

Savify does not request access to your contacts, call log, camera, microphone, or any other app's notifications.

Advertising & Third-Party Services

Savify's Free tier is supported by ads shown through Google AdMob, and Pro subscriptions are processed through Google Play Billing. Savify also uses Firebase Crashlytics and YouTube. All of these are Google services:

• Google AdMob shows native ads on the Home, Filter, and Status screens, interleaved between your recovered messages and threads, and an optional rewarded video you can choose to watch to extend your history window. AdMob may collect device identifiers (such as your advertising ID) and general device information to select and measure ads, under Google's own privacy practices. Ads never contain or expose the content of your recovered messages themselves — they are served independently by AdMob.
• Google Play Billing handles Pro subscription purchases. Savify never sees or stores your payment card details — that is handled entirely by Google Play.
• Firebase Crashlytics sends crash and error reports (such as stack traces, device model, Android and app version, and an installation identifier) so we can find and fix bugs. Savify does not add your messages or media to these reports.
• YouTube provides the walkthrough videos on Savify's setup screens. When you're online, these videos load from YouTube, so YouTube receives your IP address and device information and may store data on your device, under Google's own privacy practices.
• Google Play's in-app review and update prompts, used to optionally ask if you'd like to rate Savify and to offer new versions, are provided directly by the Play Store and do not share any of your Savify data with us.

You can review Google's own privacy practices at policies.google.com/privacy.

Data Sharing

Savify does not sell your personal information, and does not share your recovered messages, media, or any other content from WhatsApp, Instagram, or Telegram with any third party, ever. The only data that leaves your device is the advertising, billing, crash report, and YouTube video data described above, exchanged directly between your device and Google's own services. Savify has no server of its own. The only parts of this data we can see are crash reports in Firebase and the summary ad and sales reports Google provides.

Data Retention & Deletion

On the Free plan, recovered messages and media older than 5 days are automatically deleted from your device on a rolling basis for each app (WhatsApp, Instagram, and Telegram are tracked separately), unless you've watched a rewarded video to temporarily extend that window or upgraded to Pro (unlimited history). An extension applies only to the app you extend it for — extending WhatsApp's history does not affect Instagram or Telegram's retention window.

You can delete everything Savify has stored at any time by uninstalling the app — since all data lives only in Savify's local app storage and nowhere else, uninstalling erases it immediately and completely. If you'd like to keep a copy first, use the in-app Export Recovered History feature before uninstalling.

Data Security

Because your data remains on your device, you stay in control of it. Savify has no server to breach and no central database of user data. Standard Android app sandboxing keeps Savify's local storage isolated from other apps on your device.

Children's Privacy

Savify is not directed at children under 13, and we do not knowingly collect personal information from children. Ads shown through AdMob are not configured for child-directed treatment. If you believe a child has provided us with personal information, contact us at the email below and we will address it promptly.

Changes to This Policy

We may update this Privacy Policy as Savify's features change. Material changes will update the "Last updated" date above. Continued use of Savify after a change means you accept the updated policy.