Privacy Policy

01

What we collect

favedo is operated by Johnnie Rosemarie Kenneybrew Whittaker, trading as Lazo Labs, at Paseo Echegaray y Caballero, 2, bajo, Casco Antiguo, 50002 Zaragoza, Spain, who is the data controller for the personal data described here. We collect only what the product needs:

• Your email address. It’s how you sign in (one-time codes — we never store a password) and where reminders go.
• Your saves. The URL you save, the public metadata we fetch for it (title, thumbnail, caption), transcripts and extracted text cached for processing, and the AI outputs built from them.
• Your library. Notes, reminders, folders, and ratings.
• Your plan. Whether you’re on Free or Pro, and your usage against the free quota.
• Operational basics. Server logs and aggregate usage numbers, the kind every web service produces by existing.
• Product analytics. On by default, with an opt-out: which favedo pages you visit, your internal account ID, and a privacy-masked session replay. Saved content and separate autocaptured interaction events are not collected. §5 explains this fully, including how to opt out.

That’s the list. There are no ads on favedo, we do not sell or share your data for advertising, and there is no tracking beyond what’s described above.

02

How we use it

We use your data to run favedo, and for nothing else:

• to sign you in and keep your session working;
• to build your library — fetching, extracting, and enriching the links you save (§3 and §4 describe who touches the data along the way);
• to send you the emails you’ve asked for: sign-in codes and reminders;
• to bill Pro subscriptions and enforce plan quotas;
• to keep the service running — debugging from logs;
• with your consent, to understand aggregate page usage and improve the product.

In GDPR terms, the legal bases are performance of our contract with you (running the service you signed up for), our legitimate interest in operating and securing it (logs), your consent (optional product analytics), and legal obligations (billing records).

03

Who processes it for us

favedo is one person, not a data center. A small set of services process data on favedo’s behalf. We do not sell your personal data and we do not share it with anyone for their own marketing. We share data only with the providers that help us run favedo, only to the extent needed to deliver the service, and they fall into these categories:

A few lookups also enrich saves with public reference data — book covers, film and TV posters, video links, map links. Those services receive the queried title or place name, never your identity.

Some of these providers process data outside the European Economic Area, including in the United States. Where personal data is transferred, we rely on appropriate safeguards such as the providers’ standard contractual clauses, and we limit what is shared to what the service needs. If you want the current named list of providers, ask us (§10) and we’ll send it. Each third party that receives user data must provide the same or equal protection described in this policy and required by applicable law and Apple’s guidelines.

04

AI processing, specifically

This is the part of the pipeline most services gloss over, so here it is step by step. When you save a link, favedo fetches public metadata for it — title, thumbnail, caption — from the platform or public oEmbed endpoints. When a save is enriched, favedo may fetch the post’s transcript, text, and images through a content-extraction provider, and runs that content through commercial AI models to produce the title, summary, category, tags, and actionable items in your library.

When you choose a screenshot or image, favedo stores that image in your private library and may send the image to an AI model to read its visible text. Audio may be sent for transcription. When you ask a question, the request can include your question, the relevant save and fetched content, the chat history needed to continue that conversation, and optional profile or “about you” text you previously chose to provide when it is relevant to the answer. We use it only to make that save useful to you; deleting your account also deletes those uploaded images.

The current AI and extraction processor chain is: Vercel AI Gatewayroutes model requests; DeepInfra / DeepSeek provides the default classification, generation, and saved-comment model; OpenAI models through Vercel AI Gateway process chat and audio transcription; Alibaba Qwen through Vercel AI Gateway is the default image text-recognition model; Google Gemini is a direct fallback for classification, generation, and image text recognition; and ScrapeCreators receives a public saved URL to retrieve its post, comments, transcript, or images. This is the complete processor disclosure for consent version 1. The AI outputs are stored in your saves, where you can edit or delete them.

In the iOS app, favedo asks before marking your account as eligible for this processing. Declining keeps the iOS app behind the consent screen because AI processing is necessary for favedo’s save-to-done service. You can return to the screen and agree later. If the consent purpose, data categories, or processor disclosure changes materially, favedo increments the disclosure version and asks again before further AI processing. Provider API terms and retention practices can differ; this policy does not promise that every provider offers an absolute zero-retention or no-training guarantee.

05

Cookies and analytics

favedo uses cookies for two things: keeping you signed in (always on — the service doesn’t work without it), and product analytics (on by default, with an opt-out below). The bot check on the public try-it box may also set its own cookie on that box to tell humans from scripts.

Analytics, and the control below that turns it off: to understand how favedo is used and where it confuses people, we use a product-analytics service (hosted in the EU) that records the favedo pages you visit and associates them with your internal account ID. It also records a video-like reconstruction of the app’s layout and navigation, with all text, element attributes, images, and video masked or blocked. We do not send your name, email, saved content, or page query strings. Automatic click-event collection is off; navigation appears only in the masked replay. This runs by default from your first visit; choosing Not allowed below stops it, and it sends no further data once you do. There are no advertising cookies or cross-site tracking.

You can change this setting at any time below, or in favedo Settings under Legal & support. Opting out stops future analytics immediately and does not limit Free or Pro features.

06

Retention and deletion

We keep your data for as long as you use favedo, because your data is the product — your library is the thing favedo stores for you. The retention periods:

• Your library (saves, notes, folders, reminders, ratings): kept for the life of your account. Delete any single save anytime; it’s removed from your library.
• Abandoned free accounts: a free account with no sign-in for 12 months is scheduled for deletion. We warn you by email first — twice, with time to act — and one sign-in resets the clock. Accounts with an active paid plan are never deleted for inactivity.
• Account data (email, plan status): kept while the account exists; deleted with it.
• Server logs and error reports: short-lived — they expire on their providers’ own rolling schedules, typically within weeks.
• Optional product analytics and masked replays: retained only while needed to compare product usage over time, then deleted from the analytics service. Withdrawing consent stops future collection; contact us to request deletion of analytics linked to your account.
• Billing records: kept as long as tax and accounting law requires, by Apple or our web payment processor.

Deleting your account: Settings → delete account permanently deletes your account and your server-side data — your profile, saves, notes, folders, ratings, and stored images. Thumbnails are shared between users who saved the same link; on deletion we remove the ones no other user’s save still references. Deleting your favedo account does not automatically cancel an App Store or web subscription. Cancel it separately through your Apple Account subscriptions or the web billing portal if you do not want another renewal. If you can’t sign in, you can also request deletion by email (§10) and we’ll do it for you within a month.

What survives deletion: billing records Apple or our web payment processor is legally required to keep, short-lived server logs that expire on their own schedule, and any error reports at our error-monitoring service, which contain no account details and age out on that service’s own retention schedule.

07

Your rights

Wherever you live, the spirit is the same: it’s your data. Depending on your jurisdiction (the GDPR in Europe, the CCPA in California, and similar laws elsewhere), you have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict certain processing, and to receive a copy of it. We don’t sell personal data, so there’s nothing to opt out of on that front.

How to exercise them:

• Deletion: self-serve in Settings, or on request by email — honored within a month (§6 covers exactly what is deleted and what the law makes us keep).
• Export: favedo doesn’t have a self-serve export button yet. Email us (§10) and we’ll send you a machine-readable copy of your data — your saves, notes, folders, and account details — within a month, free of charge.
• Access and correction: most of your data is directly visible and editable in the app; anything else, ask us.
• Withdraw analytics consent: choose Not allowed in §5 above, or in Settings under Legal & support. This takes effect immediately and does not limit the app.

If you believe we’ve mishandled your data, you can also complain to your local data-protection authority.

08

Children

favedo is not for children under 14, and we don’t knowingly collect their data. If you believe a child under 14 has an account, contact us (§10) and we’ll delete it.

09

Changes to this policy

If our practices change — a new subprocessor, a new kind of data — this page changes first, and the “Last updated” date with it. For material changes we’ll give you notice by email or in the service before they take effect.

10

Contact

Privacy questions and requests: favedo@lazolabs.app, or the feedback page. favedo is solo-operated, so your message goes to the person who can actually act on it.

Service address: Paseo Echegaray y Caballero, 2, bajo, Casco Antiguo, 50002 Zaragoza, Spain.