Privacy Policy

Effective September 22, 2026. Applies to the saywhere.app website and the Saywhere app for Apple Vision Pro, iPhone and iPhone Duo.

The short version

  • We collect as little as we can: an email address if you join the waitlist or write to us, and, in the app, what is needed to run your account, your credits and your generated places.
  • Your prompts and the images made from them are processed by third-party AI services (World Labs, Replicate, and OpenAI or Anthropic for safety checks). This only happens after you say yes on a consent screen, and you can withdraw that consent at any time.
  • We do not track you across apps or websites, we show no ads, and we never sell your information.
  • Voice prompts are turned into text on your device. Audio never leaves it.
  • Your data lives in Cloudflare R2 and PostgreSQL databases run by Railway and Supabase, mostly in the United States.
  • You can delete your account and data from inside the app or by emailing us. We answer within 30 days.

1. Who we are

Saywhere is made by EZ Life Solutions Corp., an Ontario corporation (“we”, “us”). We are the organization responsible for your personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, provincial privacy law.

EZ Life Solutions Corp.
307 Erin Trail
Newmarket, Ontario L3Y 6K2
Canada
Privacy Officer: support@saywhere.app

2. The website (saywhere.app)

Waitlist

If you join the waitlist we store your email address, your answers to three questions (whether you own an Apple Vision Pro, which iPhone you use, and what you would do in your world for an hour), the time you signed up and, if your browser shares it, the site or campaign link that brought you here. We use this to tell you when Saywhere is available, to send at most one update before that, and to decide what to build first. Every email we send includes an unsubscribe link.

Waitlist entries are stored in a PostgreSQL database hosted by Supabase. We keep them until twelve months after Saywhere launches, or until you ask us to remove yours, whichever comes first.

Support form

If you write to us through the support page, we store your email address, the topic you chose and your message so we can reply. We keep support messages for up to two years.

No cookies, no analytics

This website sets no cookies and loads no analytics, advertising or social-media scripts. Fonts are served from our own domain. If you join the waitlist, your browser may remember locally that you did, so the form does not ask again; that note never leaves your device. Our hosting provider, Vercel, processes the IP address and browser details of each request in short-lived server logs to keep the site running and secure.

3. The app

The Saywhere app collects the following. Everything is linked to your account; nothing is used for tracking.

WhatWhyWhere it is kept
Email address (from Sign in with Apple, usually Apple’s private relay address)Your account, receipts and supportOur database (Railway PostgreSQL)
A random account identifierTies your purchases to your credit balanceOur database and Apple’s App Store systems
Purchase history (transaction identifiers, products bought, refunds)Your credit ledger and restoring purchasesOur database; Apple handles payment and never shares your card details with us
Prompts, the scene descriptions written from them, and the panoramas and worlds generated for youMaking, storing and showing your placesOur database and Cloudflare R2 storage; third-party AI services during generation (section 4)
Which screens and features you useProduct analytics, so we know what worksPostHog, using only your random account identifier, never an advertising identifier
Crash and error reportsFixing bugsSentry

We do not collect your photos, contacts, location, health information, advertising identifiers or payment card numbers.

Device permissions

4. Third-party AI services and your consent

Saywhere makes places by sending your prompt to AI services run by other companies. Before your first prompt leaves your device, the app shows a consent screen that explains this. You can withdraw consent at any time in Settings → Privacy; generation stops until you turn it back on.

These services receive the text of your prompt, the scene description written from it, and the generated images. They never receive your name, email address, photos, contacts or location. They process data under their own terms and privacy policies, mainly in the United States, and we only use them under agreements that prohibit using your content to train their models where such an option is offered.

5. Where your data is stored

Generated panoramas and worlds are stored in Cloudflare R2. Account, ledger and catalogue data are stored in PostgreSQL databases hosted by Railway; website waitlist and support messages are hosted by Supabase. These providers keep data mainly in the United States, which means your information may be accessed by authorities under the laws of that country. We use encryption in transit and at rest, access controls and audit logs, and we choose providers with recognized security certifications.

6. No tracking, no ads, no selling

We do not track you across other companies’ apps or websites, and we never ask for App Tracking Transparency permission because we never need it. We show no advertising and do not sell or rent personal information. Our product analytics use a random identifier that is not shared with advertisers.

7. Who we share information with

8. Shared and community content

Places you generate are private unless you publish them. Published worlds carry a “Generated with AI” label and can be reported by anyone. If you report or block another user, we keep the report and the block so we can act on them. We review reports promptly and remove content that breaks our Terms.

9. How long we keep things, and how to delete them

We keep account data while your account is active. You can delete your account in Settings → Account → Delete account, or by emailing support@saywhere.app from the address on the account. Deletion removes your account, prompts, generated places, published worlds and analytics identifier within 30 days; backups are purged within a further 30 days. We keep the minimum transaction records that Canadian tax and accounting law require, separated from your identity where possible.

10. Children

Saywhere is rated for people aged 16 and over and we do not knowingly collect information from anyone younger. If you believe a child has given us personal information, write to us and we will delete it.

11. Your rights

Under PIPEDA you can ask what personal information we hold about you, ask us to correct it, withdraw your consent (which may mean we can no longer provide parts of the service), and complain to us and to the Office of the Privacy Commissioner of Canada (priv.gc.ca). Residents of Quebec, the European Economic Area, the United Kingdom and California have further rights under their local laws, including data portability and the right to object; contact us and we will honour them. We respond to all requests within 30 days and never charge for them.

12. Changes

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect, and we will update the date at the top of this page.

13. Contact

Email support@saywhere.app, use the support page, or write to the Privacy Officer, EZ Life Solutions Corp., 307 Erin Trail, Newmarket, Ontario L3Y 6K2, Canada.