Privacy notice

Last updated: 16 July 2026

1. Controller

2. Data processed by Savilo

For sign-in and account management, Savilo processes in particular your email address, Firebase user ID, optional display name and authentication information in Firebase Authentication. When you use Google Sign-In, Savilo receives the profile data provided by Google for authentication. The operator cannot read your password.

Depending on your use, Cloud Firestore stores shopping lists, sharing and list memberships, pantry items, personal recipes, favourites, selected stores, dietary preferences, language, design, watched deals, consent choices and technical account settings. Files are stored only when you expressly use an upload feature available in Savilo.

3. Purposes and legal bases

Processing required for the account, synchronisation, lists, recipes and other used features is carried out to provide Savilo and perform the user agreement (Article 6(1)(b) GDPR). Security checks and technically necessary logs are used for stable operation and protection against abuse (Article 6(1)(f) GDPR). Optional usage analytics and crash reporting are processed only with consent (Article 6(1)(a) GDPR).

Dietary preferences are optional. Where information about allergies, intolerances or health qualifies as special-category data, it is processed only with your explicit consent (Article 9(2)(a) GDPR). You can remove this information and withdraw consent at any time with future effect.

4. Firebase, Google Sign-In and app protection

Savilo uses Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Firebase Hosting provided by Google, as well as Google Sign-In. Firebase App Check with reCAPTCHA Enterprise protects Firebase services against automated or abusive access. In particular, your IP address, browser and device information, requests, timestamps, referrer and assessment results may be transmitted to Google. This security check is required for protected operation and is independent of optional analytics consent.

A principal recipient and processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated companies or service providers outside the European Economic Area cannot be completely excluded. Such processing is subject to applicable safeguards, in particular adequacy decisions or EU Standard Contractual Clauses.

5. Email and contact

Email accounts are operated through IONOS SE. The contact form opens the user's email application and does not itself store a message on the website. Contact requests are processed to handle the enquiry (Article 6(1)(b) or (f) GDPR) and are generally deleted no later than six months after final completion unless statutory retention duties or legal claims require longer retention.

6. Optional analytics and crash reporting

Both features are off by default, can be enabled separately and can later be withdrawn in Settings. Savilo does not use analytics cookies. Usage analytics records page views, named buttons, device type, app version and active duration, but not list, recipe, note or input content. Individual sessions are converted into anonymous monthly totals after 90 days and then deleted. Anonymous monthly totals are retained for long-term product statistics. Crash reports contain technical error messages, stack traces, the affected view and app version and are deleted after 180 days. Currently, only the operator has access.

7. Retention, account deletion and backups

Account data is retained until the account is deleted or has been inactive for one year. Inactive accounts are deleted by an automated server routine. You can also delete your account at any time under “Settings → Account settings → User settings” or request deletion through privacy@savilo.app. Associated user data is deleted unless statutory duties require otherwise. After deletion, data may remain in backups that are not used for production until their retention period expires. Daily backups are retained for 14 days and then deleted.

8. Local storage and technical logs

The browser stores technically necessary entries for sign-in, App Check, offline use, synchronisation, language and privacy choices. These entries are required for functionality or security. Savilo currently uses no third-party advertising or analytics cookies. Hosting and server services may temporarily log technical connection data for delivery, security and troubleshooting, in particular IP address, time, requested resource, status code and browser or device information.

9. Shared lists

When you share a list or request to join one, the required account identifiers, displayed username, permissions and list content are processed. The owner can see pending join requests and may accept or reject them. Authorised members may view and edit the shared list. The owner may end sharing.

10. Automated decisions

Savilo does not make decisions based solely on automated processing that produce legal or similarly significant effects and does not create an advertising profile.

11. Your rights

Subject to applicable law, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn at any time with future effect. Contact privacy@savilo.app.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for the controller's establishment is the Saxon Data Protection and Transparency Commissioner, Maternistraße 17, 01067 Dresden, Germany.

12. Minors

Savilo is not specifically directed at children and does not collect a date of birth. Optional analytics and crash data are processed only after an explicit choice.

The German version is the authoritative legal text. This English version is provided as a translation.