Sivrelio Privacy Policy
How Sivrelio handles information and the choices available to you.
Last updated: 2026-10-29
[Scope] This policy covers Sivrelio, an Android notification inbox by OrbickK (Google Play developer: Orbickk_Lab), package com.orbickk.sivrelio. Effective and updated October 29, 2026. The app is in development; this page does not announce public availability. Purchase availability depends on the distributed version and Google Play configuration.
[Your choices] Sivrelio requires your agreement, Android notification access and an explicit selection of source apps before saving new notifications. Android grants notification access broadly; Sivrelio applies your selected-app list locally. You can pause processing or revoke access in Android Settings. We do not require an app account, contacts, GPS location, photos, camera, microphone or an accessibility-service permission.
[Local notification data] For selected apps, Sivrelio processes the source app identifier/name, notification title and text, receive time and rule result. It stores these records, your selected apps, literal phrase rules and exceptions, retention and language settings on this device to provide the inbox, search and filtering. The app queries launchable apps to let you select sources. Notification contents, the app list, rules and searches are not sent to us or a remote analysis service. Android may withhold notification content. The app does not retrieve notifications from before access was enabled.
[Collection behavior] A Collect rule first saves the matching notification and then attempts to dismiss that same notification version from Android. Keep rules take priority. Sivrelio cannot prevent the original notification sound. Recognizable authentication-code patterns are skipped, but this is not a guarantee that every secret is detected. Select only apps whose notification contents you want retained.
[Retention and deletion] Free users can choose 1 or 3 days, with 3 days as the default; Pro allows up to 30 days. The inbox is limited to 1,000 records. Expired records are removed on the next database read or write, rather than at an exact time while the app is inactive. You can delete a record, clear the inbox, remove a source app and its records, or reset all local data. Shortening retention can delete older records after confirmation. Loss of Pro applies free limits to future collection without shortening the existing records' expiry; the overall count limit still applies.
[Security and backup] Notification payloads, rules and settings are encrypted with AES-256-GCM using an Android Keystore key in app-private storage. Timestamps, expiry and hashed record identifiers remain database metadata. Android app backup and device transfer exclude app data. Reset, uninstall, clearing storage, a device change or loss of the encryption key can permanently erase history. We cannot recover local records. Release builds restrict ordinary screenshots. Encryption does not guarantee protection on every compromised or unlocked device.
[Google Play purchases] Where enabled, Google Play provides a one-time Pro purchase and restoration through the same Play account. Product identifiers, purchase tokens, purchase time and state, signed purchase evidence and entitlement information are processed to validate, acknowledge and restore access. Signed evidence is stored locally. Google handles payment details; Sivrelio does not receive complete card numbers or Google passwords. Google Play Billing and its transport components send technical diagnostics to Google over HTTPS, including during automatic purchase checks on app startup and return. These include billing API results and latency, app and SDK versions, device/OS and network metadata, locale/country configuration, and random billing-client-session and request identifiers. Google uses this data for billing diagnostics and performance analysis. Session identifiers are not described here as advertising IDs or persistent device serials. This SDK diagnostic collection has no in-app opt-out; buying Pro is optional. We do not pass notification text, rules or the selected-app list to billing. Purchase and restore operations require Google Play connectivity; refund updates can be delayed while offline.
[Providers and support] Google LLC operates Google Play under its terms and Privacy Policy (https://policies.google.com/privacy); processing may occur in the United States or other provider locations. Sivrelio has no developer-operated notification server, advertising SDK, RevenueCat integration or separate developer behavioral analytics SDK. If you email orbickk@gmail.com, we process the email address, message and attachments you choose to send for support and applicable legal obligations. Do not send notification histories, passwords, purchase tokens or full card numbers. We may request a Google Play order ID to locate a purchase.
[Your rights] You can control and delete local records in the app and Android Settings. Uninstalling does not delete Google Play transaction records or support correspondence already sent. Contact orbickk@gmail.com to request access, correction, deletion or restriction of information we control. We retain support and relevant business records only as needed to resolve the request, handle disputes or meet legal requirements. Google account controls and Google's policy govern data Google controls. Data deletion and payment refunds are separate requests. We do not sell personal information.
[Children and updates] Sivrelio is not directed to children under 13. A parent or guardian can contact us with a privacy request. We update this page and its effective date when practices change, and provide an in-app notice when appropriate. Controller: OrbickK / Orbickk_Lab. Contact: orbickk@gmail.com.