save-me.ai privacy notice

The data controller is DreamersWare S.r.l.s. — Via Carlo Porta 2, 21052 Busto Arsizio (VA), Italy — Tax code and VAT no. IT04151010123.

For any matter relating to personal data you can write to policy@dreamersware.com or by certified email (PEC) to posta.certificata@pec.dreamersware.com. The controller has not appointed a Data Protection Officer (DPO), as the legal conditions requiring one are not currently met; this assessment is documented internally and reviewed periodically.

We process the data you provide directly and the data generated by your use of the service, for the following purposes:

To generate the AlterEgo's responses and related functions we use language models from third-party providers, through their business APIs:

Before sending any text to the AI providers, save-me.ai applies automatic pseudonymisation: the names and contact details of your contacts, your email, phone number and tax codes are replaced with placeholders, and the responses are reassembled only on our server. This protection has technical limits which we state openly: your profile's display name, places, dates and the names of people not in your contact list are not masked, and the audio from voice mode travels without pseudonymisation. The text fragments sent for semantic search (embeddings) are instead pseudonymised with the same mechanism — both when they are created and when you run a search — and come only from memories at the “Normal” level.

Under the API contracts we use, these providers do not use your data to train their own models.

The use of AI on your memories is always subject to the "AI personalisation" consent, which you can withdraw at any time: from that moment the AlterEgo stops working but your archive remains intact.

save-me.ai applies the transparency obligations of Regulation (EU) 2024/1689 on artificial intelligence (the "AI Act"): every interaction with AI systems is explicitly labelled as such, both to you and to the recipients of your content. We also maintain an internal risk-classification assessment of the system under that regulation, reviewed at every relevant evolution of the service.

Your data resides on servers in the European Union: the application and database on Hetzner servers in Germany, encrypted backups in Germany and Finland, transactional emails via Aruba in Italy.

The only transfers outside the EU are to the US providers listed in chapter 3. Anti-bot protection on the login pages (ALTCHA) runs entirely on our own servers and involves no transfer to third parties.

Transfers to Anthropic and OpenAI are based on the Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into their respective data processing agreements and accompanied by our transfer impact assessments (TIAs). You can request a copy of the safeguards applied by writing to policy@dreamersware.com.

The up-to-date list of providers, with their respective roles and transfer mechanisms, is set out at the end of chapter 9.

In voice conversation mode (AlterEgo Live), your voice is recorded by the browser and sent to the transcription provider (OpenAI) for the sole purpose of converting it into text; the responses are read out by a generic synthetic voice which does not imitate yours. In this flow your voice is processed as a means of entering text, not to identify you nor to create a biometric profile of you. The audio is not stored by save-me.ai. In this use, the voice recording constitutes personal data, but not biometric data within the meaning of Art. 9 GDPR, since it is not processed to uniquely identify you.

Cloning your voice — that is, creating a synthetic voice model that reproduces your tone, for example to let the AlterEgo speak with your voice — is a planned feature that is not yet active. When we activate it: (a) we will ask you for an explicit, separate and revocable consent, specific to voice biometric data (art. 9.2.a GDPR); (b) we will tell you beforehand which provider will process the samples, where, for how long and with what safeguards; (c) every audio generated with the cloned voice will be labelled as artificial content, as required by EU Regulation 2024/1689 (AI Act), art. 50. Without that consent, no sample of your voice will ever be used to create a clone.

Italian law (art. 2-terdecies of Italian Legislative Decree 196/2003) allows anyone to decide during their lifetime who may exercise the rights over their data after death. save-me.ai makes this choice explicit and structured: in the "Digital legacy" section of your account you can choose between three regimes.

In any case, the prohibition does not affect the rights that other people exercise over data concerning themselves (for example, a family member mentioned in your content remains the holder of the rights over the data concerning them).

Verification of death requires confirmation by the trustees with a formal declaration made under their own responsibility — taken in charge by our administration and reviewed according to the relevant national rules — periodic presence checks and, in doubtful cases, verification by the operator. If, after the declared death, no recipient interacts with the platform for 5 years, the account and its content are permanently deleted (protected dormancy).

Heirs and trustees exercise their rights by writing to policy@dreamersware.com or through the dedicated pages; exercising them is free of charge. The full procedure, including the identity checks required, is described in chapter 8.

The memories, messages and capsules you create may concern other people: family members, friends, colleagues. This chapter is addressed both to you and to them.

For you: you are responsible for what you write about other people. save-me.ai is a private archive — your content is not public and is not shown to anyone until you decide otherwise (capsule recipients, post-mortem access) — but this does not entitle you to include unlawful content or content that seriously harms the dignity of others.

For the people mentioned: if you become aware that content held on save-me.ai concerns you, you have the rights under arts. 15-22 GDPR, limited to the data concerning you. You can write to policy@dreamersware.com: we will assess the request by balancing your rights against the strictly private nature of the archive and the freedom of expression and remembrance of the person who created it. In the case of manifestly unlawful content we intervene directly.

The details of capsule recipients (name, email address) are provided to us by the user who creates the capsule and are used exclusively for delivery under the conditions they have set and for strictly necessary communications. Source of the data: the user (art. 14 GDPR). The information required by Art. 14 GDPR is provided to the recipient, by way of a link to this notice, in the first communication sent to them.

Long-term preservation is the very purpose of save-me.ai: your content remains until you delete it (or until someone entitled to do so after you deletes it). Around this principle we apply precise time limits:

You have the rights under arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consents. The most important ones you can exercise yourself, immediately, from the app: in "Account → Security & privacy" you can download a complete export of your data in a readable format (JSON) and permanently delete your account; memories, contacts and capsules can be edited directly; the AI personalisation consent can be withdrawn from the same “Account → Security & privacy” page, under “Your consents”.

For everything else, write to policy@dreamersware.com: we reply within one month. We do not take decisions based solely on automated processing that produce legal effects concerning you (art. 22): the AI personalises the responses you have requested, it decides nothing about you.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or bring the matter before the courts.

List of the providers that process data on our behalf or as independent controllers: Hetzner Online GmbH (hosting and backups, Germany/Finland — EU); Aruba Business S.r.l. (transactional emails, Italy — EU); Aruba PEC S.p.A. (certified email, Italy — EU); Openapi S.p.A. (service SMS for the periodic presence checks, Italy — EU); Anthropic Ireland Ltd — contracting entity for customers in the European Economic Area — and its US parent company Anthropic PBC (conversational AI, USA); OpenAI Ireland Ltd — contracting entity for EEA customers — and its US parent company OpenAI OpCo, LLC (embeddings and voice, USA); DreamersWare Payments (payment gateway, same controller, Italy). The list is updated whenever it changes; substantial changes are communicated to you.

This notice is versioned. Substantial changes are communicated to you by email or with a notice in the app before they take effect; the current version and its date are always shown at the top of the document.