SaivoSaivo privacy policy
Last updated: 2026-11-05.
Operator: erased_dot. Contact: darius.kazlauskas@gmail.com.
The short version
Saivo is an end-to-end encrypted messenger. We do not ask for your phone number, email address or real name. We do not use advertising, analytics or tracking tools, and Saivo does not contain Google or other third-party tracking code. The people who run the message server (the relay) cannot read your messages, files or calls.
What stays on your device
Your contacts, messages, files, call history, settings and encryption keys are stored on your device in an encrypted database. The database key is protected by the Android Keystore, and optionally by an app-lock passphrase you choose. We cannot see any of it and cannot recover it for you. If you lose your recovery key and your device, the data is gone.
What the relay server handles
Saivo sends messages through a relay server. Which relay you use is shown in Settings → Connection; it can be ours or one you or a contact run yourself. The relay holds, for a short time:
- Encrypted messages and files waiting for the recipient: deleted when the recipient receives them, or after 14 days at the latest. The relay cannot decrypt them.
- A mailbox identifier: a hash derived from a public key. It is not linked to your name, number or email.
- Technical connection data: your IP address, connection times and message sizes, as any internet service sees. The relay does not write message contents to logs.
- An optional encrypted account copy, only if you turn it on (Settings → Backups). It is encrypted on your device with a key that never leaves it. You can delete it at any time from the same screen, and it is removed if you turn the feature off.
- A push address, only if you set up push notifications (UnifiedPush). It is used to send an empty "wake up" signal and contains no message content.
Calls are connected directly between devices when possible. If a direct connection is not possible, an encrypted media stream is passed through a relay (TURN) server that cannot decrypt it.
Permissions Saivo asks for
| Permission | Why |
|---|---|
| Camera | Video calls, and scanning a contact's QR code |
| Microphone | Voice and video calls, voice messages |
| Notifications | Showing new messages and calls |
| Foreground service | Optional "Stay connected" setting that keeps the relay connection alive while the app is closed; a notification is always shown while it runs |
| Full-screen notification | Showing an incoming call on a locked screen |
| Biometrics | Optional app unlock with your fingerprint or face |
| Vibration, wake lock | Feedback for actions and keeping a call running |
The camera and microphone are used only while you are in a call or recording. Saivo never uploads your contacts or address book.
Sharing
We do not sell or share personal data, because we do not have it. Messages and calls reach the person you send them to and pass through the relay in encrypted form. We may disclose what a relay holds (the technical data above) if required by law; encrypted contents cannot be provided.
Retention and deletion
Delete a chat, contact or message in the app to remove it from your device. Uninstalling Saivo removes all local data. Messages on a relay are deleted on delivery or after 14 days. To delete your account copy on a relay, use Settings → Backups. To ask us about data held on a relay we operate, write to the contact above and include the mailbox identifier shown in Settings → About.
Children
Saivo is not directed at children under 16.
Changes
If this policy changes, the date at the top changes and the new text is published at the same address.