Privacy Policy
Effective date: September 2, 2026
Saka is operated by Sufyan Dawoodjee in California. This policy applies to Saka and its websites, applications, and services.
Information we collect
We collect information needed to operate, secure, and support Saka.
Account and authentication information
When you sign in with Google, Microsoft, or GitHub, our authentication system may process your name, email address, profile image where provided, provider identity, and whether your email is verified. We may also store provider account identifiers, encrypted OAuth tokens, scopes, and token-expiration data when supplied by the provider. Authentication records may include session tokens and expiry times, IP address, user agent, timestamps, and other security metadata. Temporary OAuth state and rate-limit records may be created while you sign in or connect an account.
Your databases and files
Databases, files, records, and edits are processed in the app. Some features may store or back up your content to cloud infrastructure when enabled. Cloud copies may support service operation and disaster recovery, but Saka does not guarantee that any content can be recovered. Copies may also remain in your browser until you clear them or remove the relevant file. Saka does not currently use your content for advertising or AI training.
Technical information
Requests may include IP address, browser and device details, timestamps, errors, and security events needed to operate and protect the service. Saka does not currently use AI processing in the app. Saka may use Cloudflare Web Analytics to understand the performance and use of its public sites. Analytics information may include page views, referrers, browser details, and country or region-level location data.
How we use and disclose information
We use information to provide authentication, maintain account security, operate and protect Saka, prevent abuse, respond to legal or privacy requests, and comply with law. Saka does not currently sell personal information, share it for targeted advertising, or use it to train AI systems. Service providers may process information to perform services for Saka. We may also disclose information when required by law, to protect users or the service, or as part of a merger, acquisition, financing, reorganization, or transfer of all or part of the service or business.
Service providers
Cloudflare provides hosting, compute, network, analytics, and related security infrastructure. Saka uses PlanetScale for database storage. Google, Microsoft, and GitHub provide authentication. GitHub also hosts the public issue tracker used for support. These providers may process information under their own terms and privacy policies.
Tracking preferences
Saka does not use third-party services to track your activity across unrelated websites for advertising. Because Saka does not engage in this tracking, it does not respond differently to browser “Do Not Track” signals. Third-party providers may collect information when you interact with their services, as described in their own privacy policies.
Support requests
Saka uses GitHub's public issue tracker for support. Do not post passwords, OAuth tokens, private information, or sensitive data there. Privacy, security, and deletion requests should be sent to support@saka.io.
Retention and deletion
We do not use a fixed automatic deletion schedule. Account and authentication records may be retained while your account is active or as needed to operate and protect Saka. Sessions may expire before related records are deleted. Temporary OAuth state and rate-limit records are retained as needed for normal operation. Content stored in cloud features may be retained while needed to provide the service. After a deletion request, information may remain where retention is required or permitted for legal, security, fraud-prevention, or backup purposes. Backup copies may persist until backup systems are rotated.
To request access, correction, or deletion, email support@saka.io. We may ask for information needed to verify your request.
Security
We take reasonable measures intended to protect information, including encrypted OAuth token storage. No security measure is perfect, and we cannot guarantee that information will remain secure or that loss, misuse, or unauthorized access will never occur. Do not upload sensitive or production-critical data, and keep your own exports and, where appropriate, additional backups.
California privacy rights
Where legally applicable, California residents may request access to, correction of, or deletion of personal information and may have other rights under California law. Saka does not currently sell personal information or use it for cross-context behavioral advertising. Send requests to support@saka.io.
Children
Saka is not intended for, and does not knowingly permit, users under 13.
Changes to this policy
We may update this policy as Saka changes. We will post the updated policy here and revise its effective date. We will provide any additional notice required by applicable law. This policy describes our privacy practices and does not create contractual rights beyond those provided by applicable law.
Contact
Privacy and legal questions can be sent to support@saka.io.