Privacy Policy

1Who publishes Sive

Sive is published by Svitlana Doinikova, an individual developer in France, who is the data controller for the processing described here.

• Email: sive.app282@gmail.com

That address is the only way to reach us, and the only one you need.

Apple distributes the app through the App Store, and Apple handles every purchase (see §8).

2What Sive does

Sive turns everyday notes — typed or dictated — into calendar events, reminders and to-dos. The interpretation is done by an artificial-intelligence model. You review and approve every result before anything is saved.

That model runs in the cloud, at Google, and the message you send is passed to it. This is described in §3 and §4.

When your iPhone has no usable connection, Sive can fall back to Apple's model running on the device instead. That fallback is available only on iPhones that support Apple Intelligence, it can be switched off in Settings → Sive Assistant, and a reply produced that way is labelled in the conversation. Nothing leaves your iPhone when it answers.

This is a change from earlier versions of Sive, which interpreted everything on the device and made no network requests at all. If you are reading an older description of the app that says so, this page supersedes it.

3What leaves your iPhone

Only the chat assistant uses the network, and only when you send it a message. Here is exactly what travels with that message.

Sent:

• the text of your message — typed, or dictated and transcribed on your device;
• the current date and time on your iPhone, so that “tomorrow at 8” can be worked out;
• up to the last four messages of the conversation, yours and the assistant's, shortened;
• a list of your saved items — but not with every message. When your message might be about something already saved, the assistant is given your saved events, reminders and to-dos: their titles, dates and times, the place or description attached to them, the entries of a to-do list, and whether each one is done. It cannot answer “when am I seeing the dentist?” or find the thing you asked it to move otherwise. That covers questions, changes and cancellations, and also short messages the app cannot confidently place. A message it can see is simply a new note — a long brain dump, or one that opens “remind me to…” — goes on its own, with no list.

Never sent:

• your name, your email address, your Apple Account, or anything else that identifies you;
• device identifiers, advertising identifiers, your location, your contacts or your photos;
• usage statistics or analytics of any kind — the app contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no tracking technology and no third-party library at all;
• your conversation as a whole, or your planner as a whole — only what the list above describes, for the one message you just sent.

Some messages never leave the iPhone at all. A message the app can tell is not about planning — arithmetic, a translation, the weather, a recipe — and input it cannot make sense of are both recognised and answered on the device, without a request being made.

And the rest of the app never uses the network. The calendar, the to-do list, the home screen, and adding or editing any item by hand are entirely local. If you would rather send nothing at all, use those and leave the chat alone — the app is fully usable that way.

The only other network activity the app can cause is Apple's own: opening a link in your browser (this policy, or the App Store), the iCloud synchronisation described in §6, and iOS asking the App Store whether your purchase is valid (§8). Those go to Apple, under your agreement with Apple.

If you have turned on Share iPhone Analytics with App Developers in iOS Settings, Apple may give us aggregated, anonymous crash and performance reports about the app. These come from Apple, contain no personal information, and cannot be traced back to you. You can turn that off in iOS Settings → Privacy & Security → Analytics & Improvements.

4Who handles it

Two companies are involved in that round trip. Neither is given your name, your email address or your Apple Account, and neither keeps your message beyond what is described below.

Google — the model is Gemini, operated by Google, and it is what actually reads your message and produces the proposal or the answer. We use the paid Gemini API, which matters: under its terms your content is not used to train or improve Google's models, and it is not read by people in the ordinary course of business. Google retains it only for a short period, to detect abuse and to meet its legal obligations, and then deletes it. Google's terms are at ai.google.dev/gemini-api/terms.

Cloudflare — the request does not go to Google directly. It passes through a small relay we operate on Cloudflare's network, and it exists for one reason: the credential that authorises the call to Google cannot safely be placed inside an app on your phone, so it lives on the relay instead. The relay checks that the request comes from a valid Sive purchase — or, during setup, that it stays within a small free allowance (see below) — counts it, and forwards it.

The relay never stores or logs your message or the reply. No message text, no answer text, ever — not in a database, not in a log line. What it does store is a call counter, so that a single purchase cannot run up an unbounded bill. That counter is kept against a one-way salted hash of the purchase identifier Apple gives your app, which means we can see that some purchase made a number of calls this month and cannot work back from it to a purchase, an Apple Account or a person.

To prove you are entitled to use the assistant, your app sends that Apple-signed purchase record with each request. It contains no name, no email address and no payment information — Apple does not put them in it — and we keep only the hash just described.

Before you have bought anything — the messages you type during setup, which happens before the purchase screen — there is no purchase record yet, and the app sends no credential at all. To keep those free messages bounded, the relay counts them against your network address: the internet address every connection comes from, or, for the newer IPv6 kind, only the part that identifies your network. It never stores the address itself — only a salted hash of it, next to a count of calls. Be aware of one difference from the purchase hash above: there are few enough possible addresses that we, holding the salt, could in principle check whether a given address produced a given hash. We never do, we keep no list of addresses to check against, and the hash is used for nothing but counting.

Both companies act as processors on our behalf, under their standard data-processing terms. We use no other processor, and we sell or share your data with nobody.

5What stays on your iPhone

Everything you create is kept in the app's own storage on the device:

• your events, reminders, to-dos and the categories you create;
• your conversation with the assistant, including the proposals it produced;
• your app preferences — appearance, notification times, time format, time-of-day defaults. These contain no personal information.

Sive does not read your system Calendar, Reminders, Contacts, Photos, or your location. It keeps its own data and only its own.

How long we keep it: we don't keep it at all — you do. It stays on your device until you remove it. Completed to-dos are deleted automatically about 24 hours after you tick them off. You can delete everything at any time in Settings → Data → Erase all data, or by deleting the app.

6iCloud backup

So that your plan survives a lost or replaced phone, Sive stores your events, reminders, to-dos and categories in your own private iCloud database, using Apple's CloudKit.

Three things matter here:

• It is your iCloud account, in its private database. We have no access to it, we cannot read it, and no copy is sent to us.
• Your conversation with the assistant is not synced. It stays on the device only.
• Apple processes this data as part of your iCloud service, under Apple's own privacy policy and iCloud terms.

You can turn this off in iOS Settings, under your Apple Account → iCloud, by disabling iCloud for Sive. Erasing your data in the app removes it from iCloud too, as long as sync is on.

7Permissions

Sive asks for three permissions. All are optional, and each is requested only when you first use the feature that needs it.

Microphone — to record you when you dictate instead of typing.

Speech recognition — to turn that recording into text. Sive requires on-device recognition, so your audio is not sent to Apple's speech-recognition servers, and it never reaches ours or Google's either. The recording is not saved; only the resulting text appears in the message box, where you can edit it before sending. Once you send it, that text is treated exactly like text you typed (§3).

Notifications — to alert you at your reminder times and, if you enable it, to send a daily morning recap. Notifications are scheduled locally by your iPhone. We do not send push notifications and could not — the relay described in §4 has no way to reach your device.

You can withdraw any of these at any time in iOS Settings → Sive. The app keeps working; the matching feature simply stops.

8Purchases

Sive is a paid app, bought through the App Store.

• Apple handles the purchase, the payment, any trial and any refund. We never see your payment details, card number, name or billing address; Apple gives us only aggregated, anonymous sales reports.
• Your purchase status is checked by the app directly with Apple through StoreKit and remembered on your device, so the app opens without a connection.
• The same Apple-signed purchase record is what the relay uses to confirm you may use the assistant. Before you have bought anything, the app sends no record and the relay counts your messages by network address instead — see §4 for exactly what is sent and what we keep.
• Manage or cancel: iOS Settings → your Apple Account → Subscriptions. Refunds: reportaproblem.apple.com.

9Legal bases

Under the GDPR, the processing described above rests on two bases and no others:

• Performance of our contract with you (Article 6(1)(b)) — sending your message for interpretation when you use the assistant, and confirming that you hold a valid purchase. Without these the app cannot do the thing you bought it for.
• Our legitimate interests (Article 6(1)(f)) — the call counters in §4, which exist to stop abuse and keep the cost of running the service bounded. They are kept against a salted hash, never the identifier or address itself, so that this interest is served with as little data as possible — §4 explains what each hash is made from, and how far it can be traced.

We do no marketing, no profiling, no advertising and no tracking, so there is no consent to give and none to withdraw. If you would rather nothing were sent at all, the whole app apart from the chat works offline (§3).

10International transfers

Google and Cloudflare are United States companies, and a message you send to the assistant may be processed on infrastructure outside the European Union. Those transfers are covered by the Standard Contractual Clauses in each company's data-processing terms, which we have accepted.

What is transferred is only what §3 lists, and only when you send the assistant a message. Your planner, your conversation and your settings are not transferred — they stay on your device and in your own iCloud, which is governed by your own agreement with Apple.

11Security

Every request leaves your iPhone over an encrypted HTTPS connection and stays encrypted through the relay and on to Google. The relay holds no message content to protect, and the only thing it stores is the counter table described in §4.

On the device, your data sits in the app's own storage, protected by your iPhone's passcode and encryption in the same way as any other app's data.

12Children

Sive is a general-audience productivity app and is not directed at children. We do not knowingly collect personal data from children — we operate no accounts and ask no one for personal details.

13Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection over your personal data, and the right to complain to a supervisory authority.

We hold no copy of your data and no account in your name, so in practice these rights are exercised in the app itself:

• Access and portability — your data is visible to you in the app, on your device. We have no copy to send you.
• Rectification — edit or delete any item directly in the app.
• Erasure — Settings → Data → Erase all data, or delete the app. With sync on, this clears the iCloud copy too. There is nothing to erase on our side; the short-lived copy Google keeps for abuse detection (§4) expires on its own and carries nothing linking it to you.
• Objection and restriction — stop using the chat and no message will be sent; every other part of the app keeps working. You can also turn off iCloud sync, dictation or notifications individually at any time.

You are welcome to write to us at any time about any of this, at sive.app282@gmail.com.

For the data Apple holds — your iCloud content, and anything attached to your App Store account — Apple is the point of contact: apple.com/legal/privacy.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL (cnil.fr) or with the supervisory authority of the EU country where you live.

14Automated decision-making

The assistant reads what you write and proposes events, reminders and to-dos. It never acts on its own: every proposal is shown to you and saved only if you approve it. AI can make mistakes, and this one does — reviewing the card before approving it is the design, not a formality. No decision producing legal or similarly significant effects is made about you.

15This website

Everything above is about the app. This section is about the website you are reading.

The site is a set of static pages hosted by Cloudflare. To deliver a page to you and to protect the site from abuse, Cloudflare necessarily processes your IP address and the ordinary technical details every browser sends with a request, such as the page asked for and the browser type. It does so as a processor on our behalf, on the basis of our legitimate interest in running a working, secure website (Article 6(1)(f)), and the transfers involved are covered as described in §10.

Beyond that, the site collects nothing. It sets no cookies, runs no analytics and no advertising or tracking scripts, and loads nothing from third parties — its fonts and images are served from the site itself. It has no forms and no accounts, so there is nothing for you to submit.

The links to the App Store lead to Apple, and from there Apple's own privacy policy applies. If you email us, we receive your address and whatever you write, and use them only to reply.

16Changes to this policy

If this policy changes, we will update this page and the date at the top. If a change is significant, we will also tell you in the app.

17Contact

sive.app282@gmail.com — Svitlana Doinikova, France.