Privacy Policy
Effective August 5, 2026
Sevi connects exactly two people. Everything below follows from that: there is no feed, no audience, and no advertising business behind the product — just you, your partner, and the moments you send each other.
What Sevi collects
- Account identity. When you sign in with Apple or Google, Sevi receives a user identifier and — only if you choose to share it — your first name, which your partner sees as your display name.
- Heartbeat Clips and Touches. The short series of heart-rate values you explicitly record, and the tap rhythms you compose. These exist to be delivered to one person: your paired partner.
- Device push tokens. So your partner's devices can be notified when you send something.
- Subscription state. Payment runs entirely through Apple. Sevi never sees your card details; our servers keep entitlement records keyed by Apple's transaction identifiers.
Health data
Sevi reads your heart rate from Apple Health only during a recording you start, lasting roughly twelve seconds. Nothing is written back to Health. A recorded clip is shared with exactly one person — your paired partner — and with no one else. Health data is never used for advertising or marketing, and is never sold.
Where your data lives
Sevi runs on Firebase (Google Cloud). Data is stored in the europe-west1 region (Belgium).
How long it stays
- A played moment's recording is deleted 24 hours after your partner plays it.
- An unplayed moment's recording is deleted after 30 days.
- Your shared timeline keeps only metadata after that — when a moment was sent, its kind, and its average BPM — never the recording itself.
- Unpairing destroys the couple's shared history for both partners.
Deleting your account
In the app: Settings → Delete Account. This immediately and permanently removes your account, your personal data, and the shared history — for both partners — and revokes your Sign in with Apple tokens. Financial records that Apple requires us to keep for refund handling are retained with the link to your identity removed.
Third parties
Two, both infrastructure: Google (Firebase — hosting, database, authentication) and Apple (push delivery, payments). There are no ads, no analytics SDKs, and no data brokers. Sevi does not sell data — anyone's, ever.
Contact
Questions about this policy: ahmetenesdur@gmail.com.