The short version
- Your photos, recordings and documents are yours. Who can see each one is up to you.
- We never sell your information or use it for advertising.
- We use a handful of companies to host the site, store files and send email, and they only use your information to do that for us.
- Site admins can look at any item when needed for safety, a report, or the law. They must give a reason for private items, and each time is recorded.
- You can download everything you have uploaded, and ask us to delete your account.
What we collect
What you give us
- Your account: your name, email address and password. We store only a scrambled form of your password (a hash), never the password itself.
- What you upload: files, and what you add to them: titles, descriptions, tags, dates, transcripts, and who can see them.
- Family trees and organizations: the people, relationships, dates, bios and details you enter (with who wrote or changed each bio, and earlier versions), members, who manages each tree, and invitations (including the email addresses you invite).
- Recipes: the recipes you add, the story behind them, whose recipe each is, and their photos.
- Reports and messages: what you tell us when you report an item, send a message from Help & support (with your name, email, the page it is about, and the internet address and browser it came from), or email us.
What is inside your files
We keep your original files exactly as you upload them. Many photos and videos carry hidden details written by the camera or phone, such as when they were taken, the device, and sometimes the location. These stay in the file, and anyone you share the original with (or anyone at all, for the public archive) can read them when they download it. We read the date a photo was taken to sort it; we do not read or use location.
What we record automatically
- Sign-ins: when you sign in, the internet (IP) address and the browser and device it came from. Failed sign-in attempts on an account are recorded the same way.
- Uploads: when each file was uploaded, from what internet address and browser, its size and type, and a fingerprint of the file (a code calculated from its contents that identifies that exact file).
- Activity: a record of actions on the site, such as uploading, changing who can see something, deleting, downloading, inviting, reporting, and every action taken by site admins.
- Technical logs: our hosting provider keeps short-lived logs of requests to the site (such as the page asked for and the time) to run and protect it.
We do not use advertising, analytics or social media trackers.
Information about other people
Family history is about other people: relatives in a tree, faces in photos, voices in recordings. Please only share information about living people in ways they would be comfortable with, and keep sensitive details private. If you are in something on Saveverything and want it changed or removed, use “Report this item” on its page if you can see it, or email info@greenhatdevelopers.com.
How we use it
- To run Saveverything: store your files, make thumbnails and phone-friendly copies, show items to the people allowed to see them, and search them for you.
- To send the emails the site needs: confirming your address, resetting your password, invitations, and notices about your account or your items.
- To keep the site safe and fair: preventing abuse and spam, checking reported items, finding copies of files removed for breaking the rules, investigating misuse of accounts, and enforcing our Terms.
- To understand how much storage the site uses and what it costs.
- To follow the law and respond to lawful requests.
Who can see your information
- The people you share with. Private items are visible only to you. Items shared with a family tree or organization are visible to its members. Public archive items are visible to anyone.
- Other members see your name on things you share with them, and members of trees and organizations can see who else belongs.
- Site admins can see account details, the records described above, and any item, when needed to keep the site safe, handle a report, help you, or follow the law. Before opening a private item they must record a reason, and each opening is logged.
- Companies that help run the site, described next.
We do not sell or rent your personal information, and we do not share it for advertising.
Companies that help run Saveverything
These companies process information on our behalf, only as needed to provide their service:
- Vercel hosts the website and its short-lived request logs.
- Neon hosts the database: accounts, family trees, item details and activity records.
- Cloudflare (R2) stores the files you upload.
- Resend sends our emails.
- Fly.io, if we are using it, makes phone-friendly copies of videos and recordings.
Writing stories down as you talk
If you turn on writing while you talk when recording a story, your browser’s own speech recognition does the listening. In Chrome and Edge that sends the audio to Google or Microsoft; in Safari, to Apple, under their privacy policies. The option that writes a recording down afterwards works entirely on your device: it downloads a speech model from Hugging Face the first time, and your recording never leaves your device for that.
Safety, the law and law enforcement
We may preserve and share information, including content and the records described above, when we believe in good faith that it is needed to:
- report child sexual exploitation to the National Center for Missing & Exploited Children, as U.S. law requires;
- comply with a law, court order, subpoena or other valid legal process;
- protect someone from death or serious harm;
- investigate and prevent fraud, abuse or security problems, or enforce our Terms;
- protect our rights, or those of our users or the public.
Unless the law or safety prevents it, we try to tell you before sharing your information with law enforcement. If Saveverything is ever transferred to a new operator, your information would go with it, under this policy, and we would tell you first.
How long we keep things
- Your files and their details: until you delete them. Deleted items stay in Recently Deleted for 30 days, then are removed.
- Your account: until you ask us to close it, or we close it under our Terms.
- Sign-in sessions: until you sign out or they expire after 30 days.
- Activity records, including sign-in and upload addresses and admin actions: kept while the site runs, because they are how we trace misuse. When an account is deleted, its name and email stay attached to its past activity records.
- Fingerprints of files removed for breaking the rules are kept to stop them coming back.
- Material under legal hold (for example, preserved for a report to authorities) is kept as long as the law or the investigation requires, even if deleted.
- Backups of the database are overwritten within a short period.
Your choices and rights
- See and change: your items, who can see them, and your family tree details are all on the site.
- Download: “Download everything” gives you a copy of your whole library.
- Correct: change your name, email address and password in Account settings.
- Delete: delete items yourself, or delete your whole account from Account settings. If you can’t sign in, email info@greenhatdevelopers.com from your account’s address.
- Ask: email us for a copy of the personal information we hold about you, to correct it, or with any privacy question.
Depending on where you live (for example California, other U.S. states, or the European Union and United Kingdom), you may have further rights, such as to know what we collect, to have it deleted or corrected, to object to some uses, or to complain to a data protection authority. We honor these requests wherever the law gives them, and will not treat you differently for making one. We may need to confirm it is really you first. We do not sell or share personal information for cross-context advertising.
Security
We use encryption for connections to the site and to our providers, store passwords only as hashes, give files short-lived private links, limit and log admin access, and limit repeated sign-in attempts. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires. Use a strong password you do not use anywhere else.
Children
Accounts are for people 13 and older. We do not knowingly collect personal information from children under 13through accounts of their own. Parents and guardians may add photos and stories of their children to their own accounts, and decide who sees them. If you believe a child under 13 has an account, email info@greenhatdevelopers.com and we will delete it.
Where your information is kept
Saveverything is run from the United States, and your information is stored and processed in the United States and wherever our providers operate. If you use it from elsewhere, your information is transferred to the United States.
Changes to this policy
If we change this policy in a way that matters, we will tell you by email or on the site before it takes effect. The date at the top shows when it last changed.
Contact
Privacy questions and requests: send us a message, or email info@greenhatdevelopers.com.