Skip to content

Security

Account security, authentication, and data protection

Security

Samvise takes your security seriously. Learn about authentication options, security features, and best practices to keep your account safe.

Account Authentication

Sign In Methods

Sign in with Apple (iOS app)

  • Available in the Samvise iOS app
  • No separate password to remember
  • Protected by your Apple account's own security (including any two-factor authentication you have enabled there)

Email and Password

  • Traditional authentication
  • Password must be at least 8 characters
  • Password reset available from the login page

Email One-Time Code

  • Choose "Email me a code" on the login page
  • We email a 6-digit code to your account's address; enter it to sign in
  • Codes expire after an hour, and you can request a new one about once a minute
  • Signs you in to an existing account only; it does not create a new account

Password Tips

  • Use a unique password for Samvise
  • Don't reuse passwords from other sites
  • Use a password manager
  • Change it if you suspect compromise

Sessions

Signing Out

  • Click your profile icon > Sign Out
  • Ends your session on that device

Sign Out Other Devices

  • Settings > Security > Sign out other devices
  • Ends every session except the one you're using, for example on a lost or shared device
  • Samvise keeps you signed in until you sign out; sessions don't expire after a period of inactivity

Shared Computers

  • Always sign out when you're done
  • Don't save your password in a shared browser

Data Encryption

In Transit

All data is encrypted between your browser and Samvise over HTTPS/TLS.

At Rest

Data is encrypted in the database, with industry-standard practices for backups and key management.

OAuth Tokens

Google Calendar OAuth tokens:

  • Stored securely server-side, never exposed to the browser
  • Never shared with third parties
  • Revocable anytime

Connected Apps

Google Calendar

  • View connection status in Settings
  • Disconnect anytime from Settings
  • Or revoke from the Google side: Google Account > Security > Third-party apps > Samvise > Remove access

Account Deletion

Deleting Your Account

Permanently delete your account and data:

Process

  1. Go to Settings > Account
  2. Choose Schedule Deletion (24h) or Delete Now
  3. Confirm your identity with your password or an email code (in the iOS app, Sign in with Apple accounts confirm with Apple)

Scheduled or Immediate

  • A scheduled deletion starts automatically after 24 hours, and you can cancel it in Settings until then
  • Delete Now starts deletion right away
  • Once deletion starts, it is permanent and cannot be undone

What Gets Deleted

  • All tasks and schedules
  • All settings and preferences
  • Calendar integration
  • Account data

What Doesn't Get Deleted

  • Your own Google Calendar events (they remain in Google)
  • Data you exported and downloaded

Phishing Awareness

Legitimate Samvise Communications

  • Automated email from Samvise (sign-in codes, account emails, reminders, and digests) comes from notifications@samvise.io
  • When a person on the Samvise team replies to you, the reply comes from amolvikramsingh@gmail.com, the support address on our Support page
  • We never ask for your password or a sign-in code by email, and you should never share a code with anyone
  • Samvise only asks you to sign in at samvise.io or in the Samvise app; check the address before you enter your password

If You Receive a Suspicious Email

Reporting Security Issues

If you discover a security issue:

  • Email: amolvikramsingh@gmail.com
  • Include a detailed description and steps to reproduce
  • We'll acknowledge and work with you to verify and fix the issue

Your Data Rights

  • Right to access your data
  • Right to data portability: export everything anytime
  • Right to deletion
  • Data minimization: we only store what the product needs

Next Steps