Privacy Policy
Effective date: September 25, 2026
archivd ("archivd", "we", "us") is operated by Archivd LLC. This policy explains what information archivd collects, how we use it, and the choices you have. We tried to write it the way we'd want to read it: plainly.
What archivd is. archivd is a private library for the things you save. You send posts, links, screenshots, photos and notes to it from other apps or your camera roll; it keeps them, sorts them into collections and a moodboard, lets you search them, and reminds you about the ones you meant to come back to.
archivd is private by default. There is no algorithm and there are no ads. Nothing you save is visible to anyone but you unless you choose to share it: by inviting people to a shared board, by sending a board's web link, or by turning on your public page and publishing boards to it. Boards you publish can be followed by other people in the app, and they can save things from them to their own archivd, which shows that it came from your board. The notes you write on a save and your reminders are never shown to anyone. You can block anyone, and report any board, person or save; a person reviews every report.
The short version: we store what you capture so the app can work. We don't run ads, we don't sell or share your data, we don't track you across other apps or websites, and no AI service ever reads your notes. You can start permanent account deletion from inside the app at any time.
What we collect
Account information. Your email address, name, username, and optional profile photo and age. If you sign in with Apple, we receive the email address Apple shares with us (which may be a private relay address).
Things you capture. The content you put into archivd: notes and captures, photos and videos you attach, links you save, and the spaces (collections) you organize them into.
Reminders and schedules. Reminder times, deadlines, and notification preferences you set, plus a history of the notifications archivd has sent you (so we don't repeat ourselves).
Device information. A push notification token (so reminders can reach your device), your timezone (so reminders arrive at sensible local times), and a device identifier used for signing in.
Usage signals. When you open the app and when you tap or dismiss a notification. archivd uses roughly the last three weeks of these signals to learn when reminders are actually helpful to you, and prunes older ones.
Location data. archivd does not request location permission or collect precise location data. Before launch, we permanently deleted the historical saved-place labels, addresses, coordinates, and arrival/departure reminder fields created by older test versions. That data is no longer stored in active accounts, cannot be recovered through archivd, and is not included in account exports.
Subscription status. Whether you have an active archivd Plus subscription and its billing interval. Payment itself is handled entirely by Apple and our subscription partner RevenueCat. We never see or store your payment card details.
People you mention. If you type someone's name into a note, archivd stores that name as a label so it can group what you have written about them. This is read from your own text. It is not read from your address book, because archivd has no access to it.
What we don't collect: precise location data, your browsing history, health or financial data, biometric data, or advertising identifiers. archivd does not ask for access to your contacts, calendar, reminders, mail, messages or microphone, and cannot read them. The only permissions it requests are the camera and your photo library, and only when you are adding a picture to a save.
The archivd.app website
The website is deliberately plain, and it is worth being specific about that:
- No cookies. archivd.app sets none at all, so there is no cookie banner to dismiss and nothing to consent to.
- No analytics and no trackers. There is no Google Analytics, no advertising pixel, no session recording, no social media tracking widget, and no third-party script that watches what you do on the page.
- No profiles. Nothing stored in your browser identifies you between visits.
- Do Not Track. Because nothing on the site tracks you, there is no behaviour for a Do Not Track or Global Privacy Control signal to change. We honour them by default.
Waitlist signups. If you join the waitlist, we store the email address you type in, which of the page's two forms you used, the date, and the two-letter country code our web host works out from your connection. We do not store your IP address, and there is no account, password or profile attached to it. This is the only personal information the website collects.
How we use it
- To run archivd: store and sync your captures, show your spaces, deliver your reminders. Legal basis: contract. This is what you signed up for, and archivd can't work without it.
- To make features work: compute your personal capture insights, pick gentle nudge messages, and extract colors from your photos for the app's design. These are computed from your own activity within archivd. Legal basis: legitimate interest, making archivd genuinely useful to you.
- To time notifications well: your app-open and notification-tap history tunes when, and how often, archivd reaches out. Legal basis: legitimate interest.
- To manage your subscription and enforce plan limits (like upload sizes). Legal basis: contract.
- To keep archivd secure and working: investigating abuse, debugging failures, preventing fraud. Legal basis: legitimate interest, and legal obligation where one applies.
- To send you account emails, like sign-in codes. Legal basis: contract.
- To run the waitlist: one email confirming you are on it, and one more when your place opens. Nothing else is sent to that address. Legal basis: consent, given when you submit the form and withdrawn whenever you ask.
Where we rely on legitimate interest, you can object at any time by emailing us. We'll stop that processing for you unless we have a compelling reason we're legally allowed to keep it.
No AI, and no reading of your notes. archivd sorts your captures with a fixed set of rules that run on our own server. There is no machine-learning model and no outside AI service involved, and the text of your notes is never sent to any third party to be analysed, scored or trained on.
No automated decisions about you. Nothing in archivd makes a decision that has a legal or similarly significant effect on you, and there is no profiling of that kind to opt out of.
We do not use your data for advertising, and we do not sell, rent, or share it for cross-context behavioural advertising.
Who we share data with
We name our providers rather than hiding them behind "service providers", because you should be able to check what we say. Each one gets only what it needs to do its job:
- Supabase hosts the database and the sign-in system, and the file storage that holds media uploaded before we moved storage to Cloudflare R2. It holds your account and your content.
- Apple handles App Store payments and Sign in with Apple. It sees your payment details, which we never do, and your Apple sign-in identity.
- RevenueCat tracks subscription status. It sees whether you are on archivd Plus and the billing interval, nothing else.
- Resend sends account email, like sign-in codes and the waitlist confirmation. It sees your email address.
- SendGrid stands by to send the same emails if Resend is unavailable. Same email address, same purpose.
- Cloudflare serves archivd.app and stores the waitlist, and Cloudflare R2 stores the photographs and videos you upload. It sees the ordinary request information any web host sees.
- Railway runs the archivd server, which every request passes through. It holds no copy of your content of its own.
- Apple's push notification service delivers reminders to your device. It sees your push token and the notification itself.
People you choose to share with. When you invite someone to a shared board, they can see that board and add to it, and you can see what they add. You can remove a person, or revoke an invitation link, at any time. When you turn on your public page, anyone can see the boards you publish to it, follow them in the app, and save things from them to their own archivd. Who follows a board is not shown to anyone. You can unpublish a board or turn your page off at any time. Nothing else in your library is shown.
This is the current list, and it is short on purpose. If it changes we will update this page; if a change is significant we will tell you in the app.
The site a link points to. When you save a link, our server asks that platform for the title, description and thumbnail using its public preview endpoint, the same way any app that shows a link preview does. That request tells the platform the address you saved. It does not tell them who you are: the request comes from our server, carries no account information, and is not signed in to anything.
Legal requests. We would disclose information if legally required to, for example under a valid court order or subpoena. Where we are allowed to tell you first, we will.
A change of ownership. If archivd were ever acquired or merged, your information could transfer as part of that. It would stay subject to this policy, and we would tell you before anything changed.
There are no other categories of sharing.
Where your data is stored
Your account and content are hosted on Supabase's servers in Canada (the AWS Montreal region). If you're in the EU, UK, or EEA, that means your data leaves your region: Canada's data protection regime is recognized as adequate by the European Commission for data held by commercial organizations, and our agreement with Supabase additionally includes the EU Standard Contractual Clauses (and the UK addendum) to protect any transfers those rules don't cover.
Photographs and videos are stored in Cloudflare R2. Media uploaded before that move remains in Supabase storage until it is migrated or you delete it.
The waitlist is not held with accounts. It lives in Cloudflare's key-value storage, separate from the app's database.
How long we keep it
- Your captures, spaces and account: until you delete them, or delete your account.
- Usage signals (app opens, notification taps): about three weeks, then pruned automatically.
- Notification history: kept while your account exists, deleted with it.
- Deleted content sitting in backups: purged within 30 days of deletion.
- Uploaded media after account deletion: queued immediately, removed from storage within 30 days.
- Waitlist email addresses: until everyone on the list has been let in, then the whole list is deleted.
- Server logs: a short operational window, then discarded.
Under the current product behavior, marking a capture done permanently removes that capture rather than keeping a completion-history copy.
Where we are required to keep something longer — a tax record of a subscription payment, for example — we keep only that record, for as long as the law requires.
Deleting your account
Settings → Account → Delete account permanently removes your account, all your captures and spaces, your reminder and notification history, your usage signals, and your sign-in identity, and queues your uploaded media for deletion from storage. Access through archivd is revoked as part of the account deletion; storage and sign-in cleanup are durably retried if a provider is temporarily unavailable. Historical location data is not part of this process because it was already deleted for every account before launch. Deletion cannot be undone.
You can first export a structured copy of your account data, including media references, from Settings → Content & privacy.
The waitlist is separate from all of this. Reply to the confirmation email or write to Team@archivd.app and we will take you off it.
Security
Your data is transmitted over encrypted connections (HTTPS). Passwords are stored only as salted hashes. Your notes and account data are accessible only from your signed-in account. Media files are private and are delivered through short-lived access links issued only after your signed-in account is authorized to view them. Your device or browser may temporarily cache media you have viewed.
If a breach ever affected your personal data, we would notify you and the relevant regulators within the time limits the law sets, and we would tell you what happened rather than the minimum we could get away with.
No system is perfectly secure, but protecting your content is central to how archivd is built.
Children
archivd is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.
Your rights
Depending on where you live, you may have rights to access, correct, export, delete, or restrict the use of your personal data, and to object to processing. archivd provides a structured account-data export in Settings → Content & privacy, editing throughout the app, and account deletion in Settings → Account. For a different export format or anything else, email us.
We answer requests within 30 days, or tell you why we need longer. We don't charge for this, and we will never give you a worse product, a worse price, or a worse level of service for exercising a privacy right.
If we turn a request down, you can ask us to look again by replying to our answer. We will have someone else review it.
If you're in the EU or UK and believe we've mishandled your data, you also have the right to lodge a complaint with your local data protection authority (your country's DPA, or the ICO in the UK). We'd appreciate the chance to sort it out directly first, but you don't have to give us one.
California privacy rights
This section is for California residents and is required by the CCPA, as amended by the CPRA.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months, including for anyone we know to be under 16. There is therefore nothing for a "Do Not Sell or Share My Personal Information" link to switch off.
In the twelve months before the effective date above, we collected these statutory categories, all of them from you directly or from your use of the app:
What we do collect:
- Identifiers (email, name, username, device identifier, push token), to run your account, sign you in, and deliver reminders.
- Customer records, meaning the account details you give us.
- Commercial information, meaning your subscription status and billing interval, to manage archivd Plus.
- Internet or network activity, meaning app opens and notification taps, to time reminders sensibly.
- Your own content: notes, photos, videos, links and collections. This is the product.
- Protected classifications: your age, only if you choose to give it.
What we do not collect, at all:
- Geolocation data of any kind.
- Biometric information.
- Audio or electronic recordings. archivd has no microphone access.
- Professional, education, or financial information.
- Inferences drawn to build a profile about you.
- Sensitive personal information. Because we don't collect it, we don't use or disclose it for any purpose that would give you a right to limit that use.
We disclose personal information to the providers listed above for the business purposes described there, and we do not permit any of them to use it for their own purposes.
Your California rights are to know, to access and receive a portable copy, to correct, to delete, and not to be discriminated against for exercising them. Use the in-app tools above, or email Team@archivd.app. You may use an authorized agent; we will ask for proof that you authorized them, and we may ask you to verify your identity directly.
Other US state privacy rights
If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have broadly the same rights: access, correction, deletion, a portable copy, and the right to opt out of targeted advertising, sale, and profiling. We do not do any of those three things at all, so there is nothing to opt out of. The same contact and appeal process above applies to you.
Nevada. Nevada residents may direct a business not to sell their covered information. We do not sell personal information, but if you would like to submit a request anyway, email Team@archivd.app.
Links to other places
When you save a link, archivd shows you a preview and can send you to that site. Those sites have their own privacy policies and we don't control them. This policy covers archivd only.
Changes to this policy
If we change this policy in a meaningful way, we'll update the effective date above and let you know in the app before the change takes effect. Older versions are available on request.
Contact
Questions or requests: Team@archivd.app
Website: https://archivd.app
Archivd LLC is the data controller for the purposes of GDPR and the business responsible under the CCPA.