Privacy policy

Controller and contact

Javier García is the controller for personal data processed by volvi. For privacy questions and requests to exercise your rights: soporte@volvi.es.

Local use and optional account

You can save links without an account. Links, titles, notes, covers, folders, intentions, statuses, reflections, dates, reminders, topics and preferences are stored on your device. If you create an account, Firebase Authentication (Google) processes your identifier and email and manages password or Google sign-in. A verified account enables syncing and collaboration. Firebase manages your password; it is not included in emails or shared content.

From iOS 1.2.16, you can also sign in with an email link or Apple. Apple may provide your name and email, including a private relay address if you choose to hide it. We do not use these sign-in options for advertising tracking.

Sync and shared folders

Firestore (Google) stores synced personal content and data needed for folders, members and invitations. Sharing a folder publishes links, titles, visible text, intentions and covers with public URLs; visible text may be your note. Keep private information out of content you share. Personal reflections, reminders and statuses are not published with the folder. Photos that exist only on your device are not uploaded automatically. With link reading enabled, anyone holding the link can read the content; members can collaborate according to their permissions. Disabling link reading does not remove copies others have already made.

volvi Plus and purchases

Where volvi Plus is offered, Google Play or the App Store processes payment and RevenueCat manages purchase status. Account identifiers, products, transactions, expiry dates and subscription status are used to verify access; the server stores the necessary status in Firestore. We do not receive full payment card details. Availability and terms appear on the relevant platform before you subscribe.

Connections, covers and local features

Fetching titles, descriptions and covers or opening a link may contact the original site and image providers, which receive your IP and technical data. Your note is not sent to those sites. Topic classification, collections and suggestions are computed on your device. On compatible devices an on-demand suggestion may use a local model; we do not send notes to an external AI API. These features do not download or analyse the original video.

Notifications and email

Reminders and rediscovery alerts are local notifications. Optional alerts require activation and system permissions; you can disable them in Settings. Firebase and Hostinger email deliver address verification and password recovery messages. Anti-abuse sending counters use identifiers derived by hashing IP addresses and recipients; these are not anonymous data. Account emails do not subscribe you to marketing.

Purposes and legal bases

Processing necessary to provide requested features, accounts and purchases is based on performance of the contract. Consent applies to optional features that require it and can be withdrawn without affecting prior processing. Abuse prevention and security rely on the legitimate interest in protecting the service and its security obligations. Records required by law are processed on that basis. We do not sell data or use notes for advertising; there are no automated decisions with legal or similarly significant effects.

Providers and international transfers

Providers include Google/Firebase, Hostinger, RevenueCat for purchases, and the stores and external services you use. Hostinger hosts the website. Functions run in Europe (europe-west1), but the current Firestore database is in North America (nam5); we do not claim all data stays in the EU. Processing outside the European Economic Area may occur. Contact us for information about recipients and applicable transfer safeguards, including GDPR contractual safeguards where applicable.

Retention and deletion

On iOS 1.2.16 or later and Android 1.2.17 or later, initiate deletion in Settings → Delete account without contacting support. The reason is optional and only increments monthly category counters, without email, account identifier or free text. Deletion removes the account and synced data, owned shared folders and invitations, membership and profile in other folders, and requests deletion of the RevenueCat profile. Memories on this device, including the signed-out library, are cleared. Content already shared in folders owned by others has no recorded authorship and remains there; exports and offline-device copies are not removed remotely. A minimal technical marker containing the deleted identifier prevents old sessions from writing data. Store subscriptions must be managed separately.

Local data remains until you delete it; other libraries, devices and exports must be managed separately. Account and cloud data is retained as needed for the requested service. Sync may retain minimal deletion markers to prevent old memories reappearing. Clearing the library or uninstalling the app does not delete your account or shared folders or cancel a subscription. Request account and server-data deletion at soporte@volvi.es; manage subscriptions through the store. Security logs and counters are retained as needed to prevent and investigate abuse under provider settings; legally required records remain for the applicable period.

Website, rights and changes

Homepage demos process your input in memory without sending it or keeping it after reload. List pages query Firestore to show published content. The homepage loads Google Fonts and shared covers may contact third parties. We do not include advertising. With your consent, the homepage may use Google Analytics 4 to measure visits and interactions without sending what you type. You can refuse or withdraw consent. See Cookies and analytics (Spanish) for the provider, data, retention and preference controls. Hosting and technical services may log IP addresses and connection data. Request access, correction, erasure, portability, restriction or objection, and withdraw consent where applicable, at soporte@volvi.es. We will verify your identity proportionately. You may complain to the Spanish Data Protection Agency (www.aepd.es). Updates will carry a new date and additional notice where required. Dismissing the Android announcement is remembered only for this tab using session storage, without tracking. The web library lets you sign in to view synced memories and shared folders without editing their content. Authentication uses this tab’s session storage; memories are fetched from the server and kept in memory, without enabling a persistent Firestore browser cache.