Last updated: October 9, 2026
About this policy
SaySo is operated by Trent Olberding. This policy describes the iPhone app and its companion features. Contact 13olberdingtm@gmail.com with privacy requests.
Guest and registered accounts
Guest access creates an anonymous account in Supabase. Guest lists, tasks, source links, progress, personalized steps, and saved completion photos use cloud storage; they are not stored only on your device. An internet connection is required for account access, saving and loading lists, cloud AI, imports, and purchases. Signing in lets you recover account data on another device.
If you register, we process your email, account identifier, authentication information, and any name supplied by Apple or Google. Authentication is provided through Supabase and your selected sign-in provider.
Cloud AI: data and purpose
With your explicit AI-sharing permission, SaySo sends selected content to Google LLC's Gemini API. Requests may pass through SaySo's Supabase servers; live voice audio is streamed to Google. Depending on the feature you choose, this includes:
- Microphone audio during a voice session and task-list context, to understand commands and respond.
- Text submitted to Tidy, questions, step details, and relevant checklist context, to organize tasks or answer questions.
- Photos chosen for step help, to answer a question about the current step.
- Videos you choose to import, or audio you choose to transcribe, to extract instructions.
- Imported URLs, webpage text, captions, transcripts, and other source content, to produce a checklist.
Your AI choices
Cloud AI is optional. Declining AI sharing leaves manual task entry and deterministic local controls available; saving tasks still uses Supabase. A system camera, microphone, or photo permission does not itself authorize Google sharing.
You can withdraw AI-sharing permission in Account. This stops future AI requests and voice sessions; it cannot recall requests already sent or erase provider records retroactively. Material changes to the sharing disclosure require a new acceptance. Sign-out or account changes clear this device's AI acceptance.
Photos, media, and source links
Completion photos you save are uploaded to private Supabase Storage and associated with your list. These are distinct from photos submitted to Google for step help. Imported source URLs, timestamps, generated steps, and text you save may remain in your lists.
Shared or chosen videos and temporary transcription files may be copied into the app or shared app container while processing. Video imports can upload a file to Google's Files API. Do not submit another person's personal information or media unless you have permission. Opening embedded third-party video or web content also contacts that service, which applies its own privacy policy.
Local controls and optional feedback
Snap recognition and headphone/Watch motion controls process their control signals on-device. Live voice is a separate cloud feature. Camera hand-gesture recognition, when available, runs on-device without saving or uploading the camera feed; camera gestures are not enabled in this release.
Optional Watch motion studies store a report locally and may transfer it to the paired iPhone. A report includes motion samples, event intervals, and device/app context. It leaves the app only if you choose to share it. Local preferences, consent status, practice completion, and gesture tuning are stored on-device.
If you submit gesture feedback, its rating, optional note, account identifier, app version, build, and environment are stored in Supabase for product improvement. This feedback does not include camera images, microphone audio, or hand landmarks.
Analytics, diagnostics, and purchases
Optional analytics and diagnostics are off by default. Sharing with PostHog requires a new choice in Account, even if you previously enabled Supabase analytics or counts-only PostHog diagnostics. When enabled, SaySo sends allowlisted app interactions, import and purchase/restore outcomes, bounded error categories, counts of native crash/hang diagnostics, sanitized native crash stacks for SaySo code (binary UUID, architecture, code addresses, and crash time), app version/build, environment, timing, and random installation/session identifiers to PostHog in the United States. Account IDs, names, email, task content, source links, audio, transcripts, photos, raw error messages, exception reasons, memory contents, source context, full file paths, session recordings, and advertising identifiers are not included. Your network address is necessarily visible during delivery; SaySo requests that it not be used for event geolocation. Reports use random identifiers and can be linked across opted-in sessions; they are not person profiles. Unsent events expire after seven days and are bounded to 250 events, including at most 20 sanitized crash reports. Native crash reporting uses an on-device SDK report pending the next launch; this can contain technical process details and exception text locally. Only the allowlisted sanitized fields described above leave the device. Pending SDK reports and unsent sanitized reports are removed on withdrawal. After turning diagnostics off and back on, native crash recording resumes on the next app launch. Native crash delivery is best-effort and does not cover every termination or the Watch app. Turning sharing off cancels pending delivery, clears unsent reports, and resets identifiers. Requests already received by the service cannot be recalled. Signing out, changing account, or successfully deleting an account also withdraws local consent. Already sent reports are not automatically erased; save the analytics reference shown in Account and contact us for a privacy request. Native diagnostic counts may arrive later and do not identify the session in which a crash occurred. When optional diagnostics are enabled, requests to SaySo’s cloud AI endpoints also carry random request/session identifiers. SaySo’s Supabase server logs use these identifiers with endpoint name, response status and duration to troubleshoot failures; this diagnostic record excludes request content and credentials. Previously delivered server logs are not removed by turning sharing off.
Apple processes subscription payments through StoreKit. SaySo reads verified subscription status to provide paid features. We do not receive your payment-card details.
We do not use the advertising identifier (IDFA), sell personal information, or track you across other companies' apps and websites for advertising. Sharing with service providers to operate SaySo is described in this policy.
Retention and providers
Account records and saved task content are retained until deleted. Account > Delete Account initiates deletion of the account and associated lists, tasks, completion photos, and account-linked feedback. It does not cancel an Apple subscription; cancel that separately through Apple's subscription settings.
Previously sent analytics and diagnostics are not automatically erased by account deletion. They remain subject to this retention policy and privacy requests; contact us for assistance. Local preferences and cached or temporary files may remain until removed by the app or its device storage is cleared.
SaySo does not save live voice recordings as an audio archive. Google may retain submitted content and responses under its Gemini API terms, including abuse-monitoring and legal requirements. Retention and permitted uses depend on Google's service configuration; we do not promise zero retention. Google's Files API documents automatic deletion of uploaded files after 48 hours; that does not describe all processing logs or other records.
Supabase hosts authentication, task data, photos, and feedback. PostHog hosts optional analytics and sanitized diagnostics in the United States. Google provides AI processing. Apple provides payments and optional sign-in; Google also provides optional sign-in. These providers may process information in other countries. Data is transmitted using HTTPS/TLS, with access controls on stored account data. No service can guarantee absolute security.
Access, deletion, and contact
You can view and edit your tasks in the app and initiate account deletion in Account, including for a guest account. For access, correction, export, deletion assistance, or other privacy rights available in your region, email 13olberdingtm@gmail.com. You may also contact your local data protection authority where applicable.
SaySo is not directed to children under 13. Cloud AI features are intended for adults, subject to Google's eligibility terms. Contact us if you believe a child has provided personal information.
We post material policy updates with a revised date. Updated AI-sharing purposes or recipients require renewed permission before that sharing.
Provider policies
Google privacy: https://policies.google.com/privacy
Gemini API terms: https://ai.google.dev/gemini-api/terms
Google Files API: https://ai.google.dev/gemini-api/docs/files
Supabase privacy: https://supabase.com/privacy
Apple privacy: https://www.apple.com/legal/privacy/