Security
Account security, authentication, and data protection
Security
Samvise takes your security seriously. Learn about authentication options, security features, and best practices to keep your account safe.
Account Authentication
Sign In Methods
Sign in with Apple (iOS app)
- Available in the Samvise iOS app
- No separate password to remember
- Protected by your Apple account's own security (including any two-factor authentication you have enabled there)
Email and Password
- Traditional authentication
- Password must be at least 8 characters
- Password reset available from the login page
Email One-Time Code
- Choose "Email me a code" on the login page
- We email a 6-digit code to your account's address; enter it to sign in
- Codes expire after an hour, and you can request a new one about once a minute
- Signs you in to an existing account only; it does not create a new account
Password Tips
- Use a unique password for Samvise
- Don't reuse passwords from other sites
- Use a password manager
- Change it if you suspect compromise
Sessions
Signing Out
- Click your profile icon > Sign Out
- Ends your session on that device
Sign Out Other Devices
- Settings > Security > Sign out other devices
- Ends every session except the one you're using, for example on a lost or shared device
- Samvise keeps you signed in until you sign out; sessions don't expire after a period of inactivity
Shared Computers
- Always sign out when you're done
- Don't save your password in a shared browser
Data Encryption
In Transit
All data is encrypted between your browser and Samvise over HTTPS/TLS.
At Rest
Data is encrypted in the database, with industry-standard practices for backups and key management.
OAuth Tokens
Google Calendar OAuth tokens:
- Stored securely server-side, never exposed to the browser
- Never shared with third parties
- Revocable anytime
Connected Apps
Google Calendar
- View connection status in Settings
- Disconnect anytime from Settings
- Or revoke from the Google side: Google Account > Security > Third-party apps > Samvise > Remove access
Account Deletion
Deleting Your Account
Permanently delete your account and data:
Process
- Go to Settings > Account
- Choose Schedule Deletion (24h) or Delete Now
- Confirm your identity with your password or an email code (in the iOS app, Sign in with Apple accounts confirm with Apple)
Scheduled or Immediate
- A scheduled deletion starts automatically after 24 hours, and you can cancel it in Settings until then
- Delete Now starts deletion right away
- Once deletion starts, it is permanent and cannot be undone
What Gets Deleted
- All tasks and schedules
- All settings and preferences
- Calendar integration
- Account data
What Doesn't Get Deleted
- Your own Google Calendar events (they remain in Google)
- Data you exported and downloaded
Phishing Awareness
Legitimate Samvise Communications
- Automated email from Samvise (sign-in codes, account emails, reminders, and digests) comes from
notifications@samvise.io - When a person on the Samvise team replies to you, the reply comes from amolvikramsingh@gmail.com, the support address on our Support page
- We never ask for your password or a sign-in code by email, and you should never share a code with anyone
- Samvise only asks you to sign in at samvise.io or in the Samvise app; check the address before you enter your password
If You Receive a Suspicious Email
- Don't click links or provide credentials
- Forward it to amolvikramsingh@gmail.com
Reporting Security Issues
If you discover a security issue:
- Email: amolvikramsingh@gmail.com
- Include a detailed description and steps to reproduce
- We'll acknowledge and work with you to verify and fix the issue
Your Data Rights
- Right to access your data
- Right to data portability: export everything anytime
- Right to deletion
- Data minimization: we only store what the product needs
Next Steps
- Settings: Configure account
- Data Export: Download your data