Saga – Privacy Policy

Effective Date: 13 June 2025

1. Who We Are

Saga is a mobile journaling application operated by Norse Ventures LLC (“we”, “our”, “us”), based in Charleston, SC USA. This notice explains how we collect, use, store, and share your information when you use the Saga app (the “App”).

2. What We Collect & Why

Category What Why we need it
Account
  • Email address (via Supabase Auth)
 Create and secure your account; send essential notices
Content you provide
  • Videos you import or record
  • Titles, notes, other journal metadata
 Core journaling functionality
Photos Library Access
  • Read: only the items you explicitly select
  • Write: save exports/back-ups you request
 Import/export without scanning your entire library
Video Metadata
  • Date/time, embedded location, time-zone
 Organise entries accurately across time zones
Optional Cloud Back-ups
  • Selected videos + metadata in encrypted Supabase Storage
 Off-device backup & multi-device sync (opt-out)
Subscription
  • Receipt / transaction IDs (handled by RevenueCat)
 Verify subscriptions and unlock premium features
Support Respond to requests, including data-deletion

We never collect payment-card numbers; Apple and RevenueCat handle those.

3. Legal Grounds for Processing

Depending on your region, we rely on one or more of the following bases:

  • Contractual necessity – to provide the App and its features.
  • Your consent – e.g., photo-library access or cloud back-ups (you can withdraw in Settings).
  • Legitimate interests – service reliability, security, fraud prevention, product improvement.
  • Legal obligations – tax, accounting, or regulatory requirements.

4. How We Share Information

We do not sell or rent your personal information. We share it only:

  1. With service providers – Supabase (backend/auth/storage), Resend (for transactional emails), and RevenueCat (subscription management) under strict data-protection terms.
  2. For legal reasons – if required by law or to protect rights.
  3. With your direction – when you export, share, or back up content.

5. Storage, Security & Transfers

  • TLS encryption in transit; AES-256 at rest.
  • Least-privilege access controls for staff.
  • Data may be processed in the United States or other regions where our providers operate. When information is moved across borders, we rely on recognised safeguards such as Standard Contractual Clauses.

6. Your Choices & Rights

Region Your rights & how to exercise them
European Economic Area, UK, Switzerland Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email [email protected].
California (CCPA/CPRA)
  • Right to know/confirm what we collect and how we use it.
  • Right to delete personal information (subject to legal exceptions).
  • Right to correct inaccurate data.
  • Right to opt out of “sale” or “sharing” of personal information (we do not sell or share for cross-context advertising).
  • Right to limit use/disclosure of sensitive personal information (we only use it to provide the App).

To exercise, email [email protected] or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

7. Data Retention

We keep personal data only as long as needed for the purposes above. If you request deletion, we erase all personal data (including cloud backups) within 30 days, unless longer retention is legally required.

8. Children

Saga is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to This Policy

We may update this notice from time to time. Material changes will be announced in-app or by email. Continued use of Saga after the effective date means you accept the revised policy.

10. Contact Us

Norse Ventures LLC
Charleston, South Carolina, USA
Email: [email protected]