Saga – Privacy Policy

Effective Date: 13 October 2026

1. Who We Are

Saga is a mobile journaling application operated by Norse Ventures LLC (“we”, “our”, “us”), based in Charleston, SC USA. This notice explains how we collect, use, store, and share your information when you use the Saga app (the “App”).

2. What We Collect & Why

Category What Why we need it
Account
  • Email address (via Supabase Auth)
 Create and secure your account; send essential notices
Content you provide
  • Videos you import or record
  • Titles, notes, other journal metadata
 Core journaling functionality
Photos Library Access
  • Read: only the items you explicitly select
  • Write: save exports/back-ups you request
 Import/export without scanning your entire library
Video Metadata
  • Date/time, embedded location, time-zone
 Organise entries accurately across time zones
Optional Cloud Back-ups
  • Selected videos + metadata in encrypted Supabase Storage
 Off-device backup & multi-device sync (opt-out)
Subscription
  • Receipt / transaction IDs (handled by RevenueCat)
 Verify subscriptions and unlock premium features
Installs from our App Store ads (iOS)
  • If you installed Saga after tapping one of our App Store ads: the campaign, ad group, and keyword of that ad, which RevenueCat gets from Apple and keeps with your subscription record
 See which ads lead to a subscription
Support Respond to requests, including data-deletion
Anonymous usage statistics
  • A few events sent to PostHog: the app was opened, an onboarding step was shown, you signed in, the Saga Pro plans were shown, a purchase or restore ended and how, a clip was saved, a recap was exported, Share was tapped on a recap, the daily reminder was turned on, the app asked the App Store or Google Play to show its rating dialog
  • The app and system version, whether the app came from the App Store, Google Play or a test build, and a random identifier created on your device
 See whether people get through setup, come back, and reach Saga Pro

We never collect payment-card numbers; Apple and RevenueCat handle those.

The ad information comes from Apple’s own ad attribution service: when Saga for iOS first opens, it passes a short-lived token from Apple to RevenueCat, which asks Apple about the ad. Saga does not ask for permission to track you, does not read your advertising identifier, and shows no ads.

The usage statistics never include your email, account, videos, titles, notes, dates, prices, Apple or Google account, advertising identifier, or any text you enter, and the random identifier is not connected to your Saga account or your subscription. PostHog discards IP addresses for Saga and does not build a profile of you. The data is not used for advertising or shared with data brokers, and is kept for up to one year. Deleting Saga removes the random identifier. This is the same on iOS and Android.

3. Legal Grounds for Processing

Depending on your region, we rely on one or more of the following bases:

  • Contractual necessity – to provide the App and its features.
  • Your consent – e.g., photo-library access or cloud back-ups (you can withdraw in Settings).
  • Legitimate interests – service reliability, security, fraud prevention, product improvement.
  • Legal obligations – tax, accounting, or regulatory requirements.

4. How We Share Information

We do not sell or rent your personal information. We share it only:

  1. With service providers – Supabase (backend/auth/storage), Resend (for transactional emails), RevenueCat (subscription management), and PostHog (anonymous usage statistics) under strict data-protection terms.
  2. For legal reasons – if required by law or to protect rights.
  3. With your direction – when you export, share, or back up content.

5. Storage, Security & Transfers

  • TLS encryption in transit; AES-256 at rest.
  • Least-privilege access controls for staff.
  • Data may be processed in the United States or other regions where our providers operate. When information is moved across borders, we rely on recognised safeguards such as Standard Contractual Clauses.

6. Your Choices & Rights

Region Your rights & how to exercise them
European Economic Area, UK, Switzerland Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email support@norseventures.co.
California (CCPA/CPRA)
  • Right to know/confirm what we collect and how we use it.
  • Right to delete personal information (subject to legal exceptions).
  • Right to correct inaccurate data.
  • Right to opt out of “sale” or “sharing” of personal information (we do not sell or share for cross-context advertising).
  • Right to limit use/disclosure of sensitive personal information (we only use it to provide the App).

To exercise, email support@norseventures.co or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

7. Data Retention

We keep personal data only as long as needed for the purposes above. If you request deletion, we erase all personal data (including cloud backups) within 30 days, unless longer retention is legally required.

To delete your Saga account and associated data, follow our dedicated account deletion instructions.

8. Children

Saga is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to This Policy

We may update this notice from time to time. Material changes will be announced in-app or by email. Continued use of Saga after the effective date means you accept the revised policy.

10. Contact Us

Norse Ventures LLC
Charleston, South Carolina, USA
Email: support@norseventures.co