Your life is yours.
And it stays yours.
SAVIA holds the most intimate information about your household — your finances, your calendar, your documents, your conversations. Before you trust us with it, you deserve to know exactly how we take care of it.
Your data is yours
We don't sell it, rent it, or share it with advertisers.
Encrypted every step
In transit (TLS) and at rest (AES-256, at the provider level).
The AI doesn't learn from you
Anthropic and OpenAI do not use your conversations to train their models.
Private by default
Nothing is shared with your partner unless you mark it as household.
Erasable with a message
"Forget everything you know about me." No forms, no friction.
We follow Colombian Law 1581
Habeas data: full rights over your personal information.
1. You own the data.
SAVIA is an assistant that holds your information — it doesn't own it. Everything you say, log, save, or ask SAVIA to remember remains yours, legally and practically.
At any moment you can:
- Request a copy of everything SAVIA knows about you — in a structured format (JSON), free of charge, once a year.
- Correct anything SAVIA misunderstood.
- Delete specific pieces ("forget my gym," "delete that expense") or everything at once.
- Revoke your authorization and cancel the service with no penalty.
These rights are not a courtesy. They are yours by law — Colombia's Law 1581 of 2012 (habeas data) guarantees them, and SAVIA treats them as a baseline, not an extra.
2. How we protect your information.
Where it lives
Your data lives in an encrypted PostgreSQL database hosted on enterprise-grade cloud infrastructure (Supabase, Railway, Cloudflare). Traffic between your WhatsApp and SAVIA travels encrypted over TLS — the same standard banks use. At rest, AES-256 encryption is applied by the database provider.
How it's separated
Each user has their own memory space. SAVIA never mixes data between people. The processes that handle your conversation operate under least-privilege: they only see what's necessary to respond to you.
What we keep, and for how long
- While you're a customer: we keep everything so SAVIA can remember and personalize. That memory is the value of the service.
- If you cancel: 6 months by default, or immediate deletion if you explicitly request it.
- Accounting records (invoices, payments): kept for 5 years as required by Colombian tax law — without conversation content.
- Encrypted backups: rotated every 30 days.
What SAVIA never does with your data
- Sell, rent, or transfer your information to third parties for commercial purposes.
- Show it to advertisers or use it for ad profiling.
- Train AI models — neither ours nor our providers'.
- Share your conversations with anyone outside your household.
- Store your credit card data (Bold handles payments, regulated in Colombia).
- Ask you to trust us "just because" — everything above is written into our Privacy Policy.
3. Private and Household: one architecture, two spaces.
If you have the Household plan, you and your partner share a dashboard — but each of you keeps your own private space. The rule is simple and consistent:
Private by default. Household by choice. Nothing is shared with your partner unless you explicitly mark it as household.
My SAVIA
- Your WhatsApp conversations with SAVIA
- Your personal memory (preferences, habits, relationships)
- Your personal expenses and income
- Your private calendar and reminders
- Your personal documents in the vault
- Your wellbeing and training
Household
- Shared expenses (groceries, utilities, home)
- Household calendar (events, flagged reminders)
- Lists: groceries, errands, tasks
- Household documents (those you upload to the shared space)
- Live dashboard: what's happening today
How the decision works
Every item — an expense, an event, a reminder, a document — is born private. To move it to the Household, you flag it: with a toggle in your portal, or by asking SAVIA on WhatsApp ("this one goes to the household"). The change appears instantly on the shared dashboard.
Your partner will never see:
- Your one-on-one conversations with SAVIA.
- Your private memory (what SAVIA learned specifically from you).
- Your personal expenses not flagged as household.
- Your private appointments (medical, therapy, anything).
- Documents you upload to your personal vault.
And the reverse is true too: what your partner doesn't share, you don't see. Each of you remains the owner of your side, and the Household is what the two of you build together.
4. How we use artificial intelligence.
SAVIA understands natural language — text, audio, photos — thanks to AI models from Anthropic (Claude) and OpenAI (voice transcription). That's what lets you write the way you'd talk to a person and have SAVIA respond meaningfully.
What matters
- It's not trained on your data. Both Anthropic and OpenAI have commercial policies that exclude API customer content from model training. What you write to SAVIA does not end up improving Claude or GPT.
- We don't have a "SAVIA model" trained on your conversations. We don't build that, we don't plan to, and technically we wouldn't need to for what we do.
- Only what's needed gets sent. When you ask SAVIA something, only the conversational context required to answer is sent to the AI — not your full database.
- SAVIA remembers in its own layer. The "semantic memory" (what SAVIA knows about you) lives in our database in Colombia/US/EU — not inside the models.
You control the memory
What SAVIA remembers about you is editable. You can see it, correct it, or delete it from your personal portal, or ask via WhatsApp:
This isn't marketing — it's how SAVIA normally operates. Its memory is your delegated memory, and you are the one who curates it.
5. Who can see your information.
You
Always. Through WhatsApp ("show me what you know about me") or via your personal portal at saviaia.com.
Your partner
Only what you flag as Household. Nothing more. And if later you want to stop sharing something, just unflag it.
The SAVIA team
SAVIA is currently operated by a small team based in Armenia, Colombia. Technical access to the database is restricted to the people who keep the service running, under a least-privilege principle. We don't read conversations out of curiosity or to "improve the product." If we need to look at a specific case — because you ask us to in a support request, or because there's an incident affecting your account — we do it with your knowledge.
Our technology providers
SAVIA relies on third-party infrastructure to operate. They only process what's needed for their function, they don't own your data, and they're bound by their own security standards and the commercial terms we have with them:
The full list, with location and function detail, is in the Privacy Policy.
Authorities
Only if a competent Colombian authority requires it through a formal order — and only what's strictly requested. We do not hand over information to private parties, ex-partners, family members, employers, or anyone else, under any circumstance.
6. How to delete your information.
We'll say it without asterisks: you can ask us to forget everything whenever you want, and we will.
Three ways to do it
- On WhatsApp, right there. Write to SAVIA: "Delete everything you know about me." The process starts instantly.
- By email. Write to [email protected] with your name, WhatsApp number, and what you want deleted (everything or specific pieces).
- From your portal. In the account section you can export your data as JSON or initiate full deletion.
Real timelines
- Inquiry or export: up to 10 business days (usually much sooner).
- Full deletion: up to 15 business days.
- What we keep afterward: the minimum record of the commercial transaction (invoice) required by tax law — without conversation content.
No friction, no retention games. No hidden forms, no "let us talk you out of it." You ask to delete, we delete.
7. Security, without theater.
SAVIA is a young product run by a small, focused team. We don't sell certifications or security theater. Here's what we actually do today:
- Encryption in transit (TLS) on all communications, including from your WhatsApp to our servers.
- Encryption at rest (AES-256) applied by our database provider.
- Least-privilege access: no one on the team has more access than strictly necessary.
- Credentials rotated periodically; secrets kept out of code.
- Separation between production and development environments.
- Active monitoring of errors and anomalous events (Sentry, internal alerts).
- Secure deletion of data when requested.
No digital system is 100% impenetrable. If an incident ever affected your personal data, we would tell you directly and notify Colombia's Superintendencia de Industria y Comercio (SIC) within the legally required timeframes.
Privacy FAQ
No. SAVIA only sees the conversations you have with SAVIA — it's just another contact in your address book. Your chats with your partner, your mom, or your boss are completely invisible to us, because WhatsApp doesn't hand them over.
No. Each of you has your own private conversation with SAVIA. The only thing that appears on the shared Household dashboard is what you choose to mark as household: shared expenses, coordinated events, lists, household documents. Your individual chat is never shared.
We'll export everything SAVIA learned about you as JSON if you ask, and we'll keep your data for up to 6 months in case you come back. If you prefer immediate deletion, just say so and we'll do it. The only record that remains is the accounting documents Colombian law requires us to keep for 5 years (invoice), without conversation content.
No. Processing is handled by Bold — a regulated payment gateway in Colombia. SAVIA never sees, stores, or transmits your full card data. It only receives confirmation that your payment went through.
Yes. Tell SAVIA things like "forget my therapist," "delete that expense from yesterday," "I don't want you to know about that topic anymore" and it applies instantly. Memory is granular and editable — not all-or-nothing.
To respond to you, SAVIA sends the necessary conversational context to the models (Claude to understand and respond; OpenAI to transcribe audio). These processors have commercial policies that exclude that content from model training. It's not data that stays inside the model or is used to improve it.
The main database is hosted on Supabase infrastructure (US/EU) and the application runs on Railway (US). By the nature of the internet, some traffic travels through servers in different countries. Colombian law (article 26 of Law 1581) allows that transfer as long as providers offer equivalent standards — which they do.
We would give you at least 15 days' notice, a window to export everything yours as JSON, and then proceed to wipe the databases. We do not sell the user base — not today, not in that scenario.
No. SAVIA is a paid service, not a product funded by advertising. There are no advertisers, no ad targeting, no third-party trackers inside the service. What you pay covers operating cost and development — that's it.
Everything on this page is reflected in the formal Privacy Policy, with the corresponding Colombian legal references. If you find a contradiction, please point it out — we'll correct it publicly. This stands on practice, not on rhetoric.
Still have a question we didn't answer?
Write to us. Privacy and data questions are answered by a person on the team — not a bot.
Talk to the team Looking for the legal document? It's in the Privacy Policy.