Privacy Policy
Last updated: 3 September 2026
This policy covers the SaveBox Android app (package live.savebox)
and the website at savebox.live. It explains what we collect, why, how long we
keep it, and how to get rid of it.
The short version
- No ads, no analytics, no trackers. The app contains no advertising or analytics SDKs of any kind.
- We never sell or rent your data. To anyone, for any purpose.
- An account is optional. You can use SaveBox without giving us a name or an email address.
- Your videos are yours. Once a file is saved to your phone we cannot see it. Our server copy is deleted within 24 hours.
- Deletion is a hard delete. Delete your account and your history is removed, not anonymised.
What we collect
If you use SaveBox as a guest
A fresh install is a guest, and a guest has no name and no email. To keep your download history on your device and to apply the free plan's daily limit, we store:
| Data | Why |
|---|---|
| A random device identifier generated by the app | So your history and daily count follow your install. It is not your phone's IMEI, MAC address, advertising ID or serial number, and it is not linked to your identity. |
| Platform and app version | To keep the app working across Android versions and to diagnose problems tied to a specific build. |
If you create an account
Signing in is optional. If you choose to, we store:
| Data | Why |
|---|---|
| Email address | To identify your account and to send password resets. Stored lower-cased. |
| Name and profile picture URL | Only if your sign-in provides them. Shown to you in the app. |
| Password, stored as a scrypt hash | To sign you in. We never store your password itself and cannot recover it. |
| Google account ID, if you sign in with Google | To recognise you on return. We receive an identifier, your email, and your basic profile from Google. We never see or receive your Google password. |
What you download
For each download, we record the URL you submitted, the platform it came from, the quality you chose, the video's title and thumbnail address, the file name and size, whether it succeeded, and when. This is what your History screen shows you. It is kept until you delete it — see Deleting your data.
Sessions and security
When you are signed in we store a hash of your session token — never the token itself — alongside the device it belongs to, the app version, and when it was created, last used and expires. This is what lets you sign out everywhere and what makes a stolen token revocable.
IP address
Your IP address is used to rate-limit requests, so that one source cannot exhaust the service for everyone else. It is hashed into a short-lived rate-limiting key and is not written to our database or attached to your account or your download history.
What we do not collect
- No location data, of any precision.
- No contacts, calendar, camera, microphone or SMS access.
- No advertising identifier, and no advertising or analytics SDK is present in the app.
- No access to your photos or to other apps' videos. SaveBox reads and writes only the files it created itself.
- No "all files access" permission is requested.
The permissions SaveBox does request are the minimum a download needs: internet and network state, a foreground service so a transfer survives you switching apps, notifications so you can watch progress from outside the app (optional — declining it costs you nothing but the notification), and legacy storage access on Android 9 and below only.
How long we keep things
| What | How long |
|---|---|
| The downloaded video file and its thumbnail on our servers | 24 hours, then deleted automatically. Temporary working files are swept within 2 hours. |
| The copy saved to your phone | Yours. It stays until you delete it, and we have no access to it. |
| Your download history | Until you delete the entry, or your account. |
| Your account | Until you delete it. |
| Session records | Until they expire or you sign out. |
| Rate-limiting records | Minutes. They expire on their own. |
What stays on your phone
Your sign-in tokens are held in the Android Keystore, the
system's hardware-backed credential store, not in plain application storage.
Videos you save land in Movies/SaveBox and belong to you — SaveBox
does not upload them anywhere, and deleting the app's data or the app itself
does not touch files you have already saved.
Who we share data with
We do not sell, rent or trade your personal data. We share it only in these cases:
- Google Sign-In — only if you choose to sign in with Google, and only to verify who you are.
- Infrastructure providers that host our servers, database and storage. They process data on our behalf, under contract, and may not use it for their own purposes.
- Legal requirements — if we are required by law to disclose information, or need to in order to protect our rights, our users' safety, or investigate abuse of the service.
Deleting your data
- A single download: removing an item from the Downloads or History screen clears it from that device’s list. The record of it on our servers is removed when you delete your account — we do not currently offer per-item deletion on the server.
- Your whole account: open Profile → Delete account in the app and confirm. Full instructions, including what is removed and what is kept, are on the delete your account page.
- By email: write to ehsanrazzaq55@gmail.com from your account's address and we will delete it for you.
Deleting your account is a hard delete, not an anonymisation. Your account row, your entire download history and the jobs behind it, every session, and any pending password resets are removed from our database, and the files those downloads produced are unlinked from disk. We do not keep a blanked-out copy of your history, because a list of every video someone saved is not made impersonal by removing the name from the top of it.
One record is deliberately kept: an anonymous install record noting the platform and app version. It describes the installation, not you, and holds no email, name or history.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to your data protection authority. You can exercise most of these directly in the app; for anything else, email ehsanrazzaq55@gmail.com and we will respond within 30 days.
Security
Traffic between the app and our servers is encrypted in transit with HTTPS. Passwords are stored as scrypt hashes, session and reset tokens only ever as hashes. No system is perfectly secure, but we do not hold data we do not need, which is the most reliable protection available.
Children
SaveBox is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, email us and we will delete it.
A note on the content you download
SaveBox is a tool. You are responsible for making sure you have the right to download and keep any video you save with it, and for respecting the terms of the site it came from and the rights of whoever made it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for any material change we will give notice in the app before it takes effect.
Contact
Questions about this policy or about your data: ehsanrazzaq55@gmail.com.