Privacy Policy

Effective August 23, 2026

Seven is built to be private by default. Everything you save, from links and notes to photos, videos, and documents, lives on your device. Nothing you keep is visible to anyone else unless you explicitly choose to make it public. We run no analytics, show no ads, and never sell data.

This policy explains what information Seven handles, where it lives, and the choices you have. It applies to the Seven iOS app and to savetoseven.com (together, the “Service”), operated by Tally App LLC (“we,” “us”).

What stays on your device

Your saves, tags, notes, collections, and profile live in the app’s local storage on your iPhone. Seven’s intelligence, the automatic tagging, sorting, and search that make the app work, runs entirely on your device using on-device machine learning. We operate no servers of our own, and we cannot see, access, or recover anything you save privately.

That storage is private to the app. Your files are not published to the Files app or to a computer over USB, and no other app on your iPhone can read them. Getting something out is something you do deliberately, one item at a time, using the share button.

What is shared when you opt in

Seven has optional social features. If you claim a handle, follow people, or make a space public, the following is published to Apple’s iCloud (CloudKit) public database so that others can see it:

• Your display name, handle, bio, and avatar
• The spaces you chose to make public, and preview thumbnails of the saves in them
• Your follows and pins of public spaces

Nothing becomes public without an explicit action from you. You can make any space private again at any time, and deleting your account removes all of this from the public database.

Share links

If you share a space, Seven creates a link on savetoseven.com. Anyone with that link can view the space in a read-only web page served from Apple’s CloudKit infrastructure. Our website does not set tracking cookies and does not log who views a shared space.

Signing in

An account is optional. Seven works fully without one — every save, room, and search is made and kept on your device, and nothing about you is collected at all. An account is needed only for the public side of Seven: publishing a profile or a room, following someone, and seeing what other people have published.

Seven offers two ways to sign in: Sign in with Apple and Sign in with Google. Either way, we use it only to recognize you. The identifier your provider returns is stored in your device’s Keychain and is not transmitted to us, we do not request or receive your email address, and we do not maintain a server-side account database.

If you choose Google, the sign-in is handled by Google’s own SDK inside the app and your interaction with it is governed by Google’s Privacy Policy. Google may receive information about that sign-in, such as your Google account identity and device details. We receive only an account identifier. Nothing you save is shared with Google, and the SDK is used for sign-in only — never for analytics, advertising, or tracking.

Subscriptions and payments

Paid features are billed by Apple through your App Store account. Apple processes all payment information; we never see your payment details, billing address, or card number.

What we don’t do

• No analytics or tracking SDKs of any kind
• No advertising, ad identifiers, or ad networks
• No selling, renting, or sharing of personal information with third parties
• No access to your private saves; by design, we cannot read them

Device permissions

Seven asks for iOS permissions only when a feature needs them: the camera, if you take a photo or video into your archive, and the microphone, if you record a voice note. Each is requested in context, is optional, and can be changed at any time in iOS Settings.

Choosing photos from your library needs no permission at all. Seven uses Apple’s system picker, which hands the app only the items you pick and never gives it access to the rest of your library.

Data retention and deletion

Because your data lives on your device, you are in control of it. Deleting a save removes it immediately. Settings → Delete account erases every save from the app’s storage on your device and removes your profile, public spaces, pins, and follows from the CloudKit public database. This cannot be undone. Deleting the app from your iPhone also removes the app’s local data.

Your rights

Depending on where you live (including the EU/EEA under GDPR and California under the CCPA/CPRA), you may have rights to access, correct, export, or delete personal information. Seven’s architecture puts these controls directly in your hands. Your data is stored on your device where you can view, edit, export, or erase it at any time, and account deletion removes anything you have published. If you have a request you cannot complete in the app, contact us and we will respond within 30 days. We do not discriminate against you for exercising any privacy right.

Children

Seven is not directed at children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided personal information through the Service, contact us and we will delete it.

Security

Your saves are protected by iOS device encryption and your device passcode. Stored files carry iOS’s strongest file protection, which means they are unreadable while your iPhone is locked, and they are not reachable by other apps, by the Files app, or by a computer over USB. Anything you choose to publish travels through Apple’s CloudKit service over encrypted connections. No method of storage or transmission is perfectly secure, but keeping your data on your device rather than on our servers removes the most common points of failure.

International users

Published content is stored on Apple’s iCloud infrastructure, which may process data in the United States and other countries where Apple operates data centers, subject to Apple’s own safeguards.

Reporting and moderation

You can report any published save from the save itself, and report or block any person from their profile. Reports are reviewed within 24 hours, content that violates our terms (spam, abuse, impersonation, illegal content) is removed, and repeat offenders lose publishing access.

A report records whose content it concerns, which save it points at, the reason given, and a random identifier for the device that filed it — enough to stop the same report being filed twice and to group repeated reports, and not tied to your name, handle, or profile. Other users cannot tell who reported them.

We can. Reports are written to Apple’s CloudKit from your own iCloud account, and CloudKit records which account wrote each one; we do not have a way to receive a report without that. So a report is anonymous to other people, not to us. Blocking is separate, takes effect immediately on your device whether or not you also report, and also notifies us so the account can be reviewed — which means a block is visible to us in the same way a report is.

Published text is screened on your device before it is published, and again when it is received from someone else. The screening runs entirely on your device against a fixed list of terms; no text is sent anywhere for it.

Changes to this policy

If we make material changes, we will update this page, revise the effective date above, and note the change in the app where appropriate. Continued use of the Service after a change means you accept the updated policy.

Contact

Questions or concerns: hello@savetoseven.com, or visit support.