Privacy policy

Last updated: 13 November 2026

Said With Love lets you make a private page for someone, with your words, photos, voice, an AI song and an AI video. This page explains what we collect, why, who helps us, how long we keep it and what you can do about it.

Who we are. Said With Love is run by Phasoniq Technologies Pvt Ltd, H 202, RMS Colony, Road 3, Kankarbagh, Patna, India. Contact: support@saidwithlove.app. Grievance officer: Raj Kumar, grievance@saidwithlove.app.

1. What we collect

WhatWhenWhy
Your page: names, letter, timeline, things you love, captions, open-when letters, question, plan and coupons, opening time and countersWhile you buildTo make and show your page
Photos and your voice noteWhen you add themTo show them on your page
Chat Wrapped: numbers and the few words you choose to keep. Your chat file is read on your phone and is never uploadedIf you add a chatTo show the summary on your page
The AI song and video made for youWhen you ask for themTo show them on your page
Your Google name and emailWhen you log in with GoogleTo keep your pages in your account and to send you alerts
PasscodeWhen you publishStored only in scrambled (hashed) form, so we cannot read it
What the recipient does: opening the page, their answer to your question, coupons they claim, a reply in text or voiceOn the pageTo show you on My pages
Alert settings: your browser's notification address, if you turn alerts on; your email alert choiceWhen you set themTo tell you when something happens on your page
Technical data: a random browser ID for your drafts, IP address, time of logins and deletionsAlwaysSecurity, preventing abuse, keeping your draft on this phone

We don't sell your data. We don't show other companies' ads on Said With Love. No ad platform's tracking script runs on our pages.

2. Visits, analytics and advertising

What we record about a visit. We keep our own record of visits, on our own servers, so we can see which links and advertisements bring people here and how far they get.

  • A random visitor number, stored in a cookie for 180 days.
  • The page you arrived on, the website and campaign that brought you, the type of device and app.
  • The steps you take: opening the site, starting a page, first photo, preview, signing in, publishing, sharing.
  • If you arrive from an advertisement: the click reference that the ad platform put in the link.

These records never hold names, photos, letters, messages, your IP address or your full browser details.

The person who receives a page is counted with no visitor number, no source and no device. Nothing about them is ever sent to an ad platform.

What we send to ad platforms. We advertise Said With Love on other platforms. To measure whether an advertisement worked, our server tells that platform that a visit from its advertisement led to a step, such as starting or publishing a page.

What is sentWhen
The ad click reference from the link you arrived on, the step, its time, and our site address (never a private page link)If Ads is on in Privacy choices
A hashed form of your account emailOnly if you are signed in and you have saved Ads as on in Privacy choices

A hashed email is still personal data. The platform uses it to match the step to an account with the same email. We tell Google that the data is for measurement and not for personalising ads.

We never send names, photos, letters, messages, anything about the recipient, your IP address or your browser details.

The platforms. We send these reports only to a platform we are advertising on at the time. The full list we may use:

PlatformCompany
Facebook and InstagramMeta
Google AdsGoogle
TikTokTikTok
SnapchatSnap
PinterestPinterest
RedditReddit
Microsoft Advertising (Bing)Microsoft

Each platform handles this data under its own privacy policy, as its own decision-maker, and may process it outside your country, including in the USA.

Your choice. "Privacy choices" at the bottom of our home page has two switches: Analytics and Ads.

  • In India both are on until you switch them off.
  • In the EU, the UK and Switzerland both are off until you accept.
  • Switching off applies at once. It stops new records and new reports. It does not remove records already made, and it cannot recall a report already sent.
  • With Analytics off, a visit is counted with no visitor number, no source and no ad click reference.

3. Who helps us (and gets some data)

CompanyWhat they getWhyWhere
SupabaseEverything on your page, photos, voice, song, video, accountOur database and file storageMumbai (India) or Frankfurt (EU), by your country
VercelYour requests pass through itRuns the websiteIndia region for Indian users
GoogleYour login"Log in with Google"Google
OpenAIYour words, photos and voice note (as text)Safety check against explicit, violent or abusive content; writing song lyrics from your pageUSA
ElevenLabsNames, your story, pronunciations, style choicesMaking the AI songUSA
Higgsfield, and the video model it uses (MiniMax)The photos you pick for the video, and the songMaking the AI video; we delete your photos from Higgsfield right after each clip is madeOutside India
Zoho ZeptoMailYour email address and the alert messageSending you email alertsIndia
Your browser's notification service (Google, Apple or Mozilla)A short alert with no page contentPhone alerts, if you turn them onOutside India

The AI consent screen in the builder explains the AI part in more detail before anything is made. See also our AI policy at /ai.

4. How long we keep it

  • Visit and step records, and ad click references: 90 days. Deleted earlier if you delete your account.
  • The list of reports queued for ad platforms (which step, which platform, sent or not; no personal content): 30 days after each is sent.
  • Your privacy choices (what you chose, when, and under which wording): 3 years, as proof of your choice.
  • Cookies: your privacy choice and the visitor number last 180 days.
  • Drafts: 30 days after you last edit them; then deleted.
  • Published pages: 30 days from when the page opens (or from publishing if it opens at once); then deleted with their photos, voice, song, video, answers, replies and claimed coupons.
  • Your account: until you delete it.
  • Login sessions: 30 days, renewed while you use them.
  • Security log (event, time, account ID, IP; never page content): 180 days, as Indian law (CERT-In) requires.
  • Backups roll off on our provider's normal schedule.

5. Your choices and rights

  • See and download your data: My pages, then Download my data.
  • Delete a page: My pages, then Delete, or "Remove this page" on the page itself (the recipient can do this too).
  • Delete everything: My pages, then Delete my account. It happens at once.
  • Correct your data: edit your draft, or contact us.
  • Switch analytics and ad reports off: Privacy choices, at the bottom of our home page.
  • Stop email alerts: the switch on My pages, or the unsubscribe link in any alert email.
  • Questions or complaints: email grievance@saidwithlove.app. We acknowledge within 24 hours and resolve within 15 days. In India you can also go to the Data Protection Board; in the EU or the UK, to your data protection authority.

6. The person who receives a page

  • A page is private: a secret link plus a passcode, hidden from search engines.
  • The recipient can remove the page at any time with "Remove this page".
  • If you are in a photo and want it removed, email grievance@saidwithlove.app. We act on these within 24 hours.

7. Adults only

Said With Love is for people aged 18 and over. Photos of children are rejected automatically and are never stored.

8. Security

Data is encrypted in transit and at rest. Passcodes and login tokens are stored only in hashed form. Access to your pages is checked on our server for every request.

9. Changes

If we change this policy, we update the date at the top and say what changed.