Savify Privacy Policy

Information We Access

Savify is a notification-capture utility for WhatsApp, Instagram, and Telegram. It reads the content of notifications posted by these apps on your device through Android's Notification Listener feature, which you explicitly grant during setup and can revoke at any time in your device's system settings.

For WhatsApp, this includes message text and, where available, photos, videos, GIFs, stickers, and voice notes. Where a device manufacturer strips media data out of the notification itself, Savify also reads directly from WhatsApp's own media folder on your device, using a separate, one-time permission you grant and can revoke independently.

For Instagram, only message text is recovered — Instagram's notifications don't carry photo, video, GIF, sticker, or voice-note data, and Instagram has no equivalent media folder Savify can read from.

For Telegram, message text and photos are recovered; videos, GIFs, stickers, and voice messages are not, since Telegram stores that content in a folder Android itself blocks every other app, including Savify, from being granted access to.

Savify does not read any other app's notifications, and does not access your contacts, call log, precise location, camera, or microphone.

How We Use the Information

Everything Savify accesses is used for one purpose: showing you messages and media that WhatsApp's own notifications already delivered to your device, in case they're no longer visible inside WhatsApp itself. It is never used for advertising targeting, profiling, or any purpose beyond the recovery feature visible in the app.

Local Storage & Your Recovered Content

All recovered messages and media are stored only in a local database and local file storage on your device. Savify has no backend server — none of your recovered content is ever transmitted off your device, uploaded to the cloud, or made accessible to us in any form.

If you use the in-app Export Recovered History feature, the exported file (a text or PDF transcript) is likewise saved only to local storage on your device — Savify does not upload it anywhere.

Permissions Required

Savify requests only the permissions its features actually need:

• Notification Access — the core permission the app is built around; lets Savify read WhatsApp notification content.
• Post Notifications — lets Savify show its own status notification while its background capture service is active.
• Foreground Service — required by Android so the capture service keeps running reliably in the background.
• WhatsApp media folder access (Storage Access Framework) — a one-time, user-approved grant limited specifically to WhatsApp's own media folder; Savify cannot browse any other folder on your device with this permission.
• Legacy storage write access (Android 9 and earlier only) — unused on modern Android, which handles saved files through the system's MediaStore instead.
• Device biometric/lock check (only if you enable App Lock in Settings) — Savify asks Android's own secure biometric system to verify it's you. Savify never sees, stores, or has access to your fingerprint, face data, or device PIN; that verification happens entirely inside Android's own secure component.

Savify does not request access to your contacts, call log, camera, microphone, or any other app's notifications.

Advertising & Third-Party Services

Savify's Free tier is supported by ads shown through Google AdMob, and Pro subscriptions are processed through Google Play Billing. These are the only third-party services Savify integrates with:

• Google AdMob shows native ads on the Home, Filter, and Status screens, interleaved between your recovered messages and threads, plus an optional rewarded video you can choose to watch to extend your history window. AdMob may collect device identifiers (such as your advertising ID) and general device information to select and measure ads, under Google's own privacy practices. Ads never contain or expose the content of your recovered messages themselves — they are served independently by AdMob.
• Google Play Billing handles Pro subscription purchases. Savify never sees or stores your payment card details — that is handled entirely by Google Play.
• Google Play's in-app review prompt, used to optionally ask if you'd like to rate Savify, is provided directly by the Play Store and does not share any of your Savify data with us.

You can review Google's own privacy practices at policies.google.com/privacy.

Data Sharing

Savify does not sell your personal information, and does not share your recovered messages, media, or any WhatsApp-related content with any third party, ever. The only data that leaves your device is the minimal advertising/billing data described above, exchanged directly between your device and Google's own services — Savify's own code has no server and never transmits or has access to that data itself.

Data Retention & Deletion

On the Free plan, recovered messages and media older than 5 days are automatically deleted from your device on a rolling basis for each app — WhatsApp, Instagram, and Telegram are tracked separately — unless you've watched a rewarded video to temporarily extend that window or upgraded to Pro (unlimited history). An extension applies only to the app you extend it for; extending WhatsApp's history does not affect Instagram or Telegram's retention window.

You can delete everything Savify has stored at any time by uninstalling the app — since all data lives only in Savify's local app storage and nowhere else, uninstalling erases it immediately and completely. If you'd like to keep a copy first, use the in-app Export Recovered History feature before uninstalling.

Data Security

Because your data remains on your device, you stay in control of it. Savify has no server to breach and no central database of user data. Standard Android app sandboxing keeps Savify's local storage isolated from other apps on your device.

Children's Privacy

Savify is not directed at children under 13, and we do not knowingly collect personal information from children. Ads shown through AdMob are not configured for child-directed treatment. If you believe a child has provided us with personal information, contact us at the email below and we will address it promptly.

Changes to This Policy

We may update this Privacy Policy as Savify's features change. Material changes will update the "Last updated" date above. Continued use of Savify after a change means you accept the updated policy.