Svala is a private, invitation-only club with end-to-end encrypted messaging. This policy is written plainly, and it is written honestly: it tells you what we cannot see, and it tells you what we can.
Svala ("we") operates the Svala application and svala.club. Contact: privacy@svala.club.
Message content, photographs, videos, membership application answers, and concierge conversations are end-to-end encrypted. They are sealed on your device with keys that never leave it, and opened only on the recipient's device. We hold no key that opens them. Neither we, nor our hosting provider, nor anyone who compels us, can read them, because we cannot.
That guarantee is mathematical, not a promise of good behaviour. It has one honest limit, stated in section 4.
To run a members' club we do hold, in readable form:
changed, whether you hold a Founding badge, and your invitation record.
industry, title, country or city, a 140-character line, and an optional monochrome portrait. You control every one of these, including showing none of them.
choose to share them — the recent messages you consent to reveal. Reports are deleted after 30 days.
End-to-end encryption hides content. It does not hide the existence of communication. Our infrastructure can see, and to some degree must retain:
it (not what they said);
including IP addresses, for a limited period.
We say this rather than claiming "no trace". There is a trace. There is no readable content.
Messages and media are deleted within 24 hours of being sent — from your device, from our database, and from encrypted storage. Deletion runs on a schedule and is not reversible by us. Announcements expire the same way. Reports expire after 30 days. If your membership lapses and is not resumed within 30 days, your account and its records are deleted.
purposes.
"Svala — New message".
file storage, server functions, push delivery. Data is hosted in the United States.
handled by Apple, and are never seen by us or by RevenueCat.
Wherever you live, you may: ask what we hold, correct it, delete your account and its data from within the app at any time, export what is exportable, and object to processing. Under GDPR and similar laws our lawful bases are contract (running your membership) and legitimate interests (security and moderation). Under CCPA/CPRA: we do not sell or share personal information. Write to privacy@svala.club; we answer within 30 days.
We cannot technically prevent another member from photographing their screen. It is forbidden by the Rules of the House and grounds for expulsion, but no encryption defeats a camera. Speak accordingly.
Svala is for adults. It is not offered to anyone under 18, and the app is rated accordingly.
If this policy changes materially, members are told inside the app before the change takes effect.