Privacy Policy

Everyday is operated by [Company legal name], [Registered business address] ("we", "us"). We are responsible for the personal information described here. Questions about privacy go to privacy@[your-domain].

Information you give us

• Account details: your first name, email address and password. Passwords are stored only as a salted scrypt hash, never in readable form.
• Set-up choices: your time zone, optional age range, usual wake, meal and sleep times, goals, the wellness areas you focus on, reminder level and any goal packs you turn on.
• Wellness activity: the goals in your routine and their schedules, your check-ins (Done, Partly, Not yet, Skip), snoozes, day modes (such as Sick or Travel), mood check-ins, custom goals you create (which can include medication or supplement reminders), and the daily scores calculated from them.
• Messages you send us, for example to support.
• Early-access list: if you join it (no account needed), your email address, which phone you use, whether you'd like to test the app before launch, and when you joined. We use it only to tell you about the iPhone and Android launch and, if you asked, beta testing. Every email has a link to leave the list, which deletes your entry. We delete the list 12 months after the apps launch.

Information created as you use the app

• A record of in-app actions, such as adding a goal, answering a reminder or changing settings. We use it to run features like reminder pacing and to understand which features help people.
• Reminder history: which reminders were sent and when, so the app can avoid over-notifying you.
• Technical information our hosting provider records when your device connects, such as IP address, device and browser type, and error logs.

Subscription information. If you subscribe to Everyday Plus on the web, our payment processor Stripe collects your payment details. We never see or store your full card number. We keep your subscription status, plan, renewal date and Stripe customer ID. If you subscribe through the App Store or Google Play, Apple or Google handle payment, and we receive only your subscription status.

What we don't collect. We don't collect your precise location, contacts, photos, microphone or camera data. We don't read data from Apple Health or Google Health Connect. There are no advertising or cross-app tracking tools in Everyday.

Some of what you record, such as sleep, exercise, eating, mood, stress, alcohol-free or smoke-free days, therapy or check-up reminders, and medication reminders, can count as health information or "consumer health data" under privacy laws in some places. That includes the EU and UK GDPR and US state laws such as Washington's My Health My Data Act.

• We collect it only with your consent, which you give when you create an account, and only to provide the app to you.
• We use it to build your daily plan, send reminders, calculate your score, and show your reports, patterns and suggestions.
• We do not sell it, use it for advertising, or share it with anyone except the service providers listed below who help us run the app.
• You can withdraw consent at any time by deleting your account. Because the app can't work without this information, withdrawing consent means closing the account.

Everyday is a wellness app, not a medical service. Patterns it shows are personal observations, not diagnoses. If you're in crisis or thinking about harming yourself, contact your local emergency number or a crisis line in your country right away.

• To provide the app: your plan, reminders, check-ins, scores, reports and insights.
• To manage your account, including sign-in, password reset emails and important service messages.
• To process Everyday Plus subscriptions and free trials.
• To keep the app secure, prevent abuse and fix problems.
• To improve Everyday, using aggregated or de-identified information wherever possible.
• To meet legal obligations and enforce our Terms.

• Contract: to provide the app and subscriptions you signed up for.
• Explicit consent: to process wellness and health information.
• Legitimate interests: to keep the app secure and improve it, in ways you would reasonably expect.
• Legal obligation: for example, keeping billing records.

We share personal information only with service providers that process it on our behalf, under contracts that limit how they can use it:

• Hosting and database (currently Railway): stores the app and its data.
• Email delivery (currently Brevo): sends password reset and account emails.
• Payments (Stripe on the web; Apple and Google for in-app purchases): processes subscriptions.
• In-app subscription management (currently RevenueCat): confirms App Store and Google Play purchases. It receives a random account identifier and your purchase records, never your wellness data.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy will continue to apply to your information. We do not sell personal information, and we do not share it for targeted or cross-context behavioural advertising.

Our service providers may store or process information in the United States and other countries. When information from the EU, UK or other regions with transfer rules is sent abroad, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• We keep your information while your account is open.
• When you delete your account, your profile, routine, check-ins, moods, scores and activity records are deleted from our live database straight away. Copies in backups are removed within 30 days.
• Password reset links expire after 60 minutes.
• Billing records may be kept longer where tax or accounting law requires it, typically by our payment processor.

• Download your data: in the web app, open You → Privacy & data → Download my data.
• Correct it: change your goals, daily times, focus areas and reminder settings on the You and My goals screens. For anything else, such as your name or email, contact us.
• Delete your account: You → Privacy & data → Delete my account. This also cancels a web subscription.
• Reminders: change the reminder level on the You screen, or turn notifications off in your device or browser settings.

Depending on where you live, you may also have the right to access, correct, delete or port your information, to restrict or object to certain uses, to withdraw consent, and to appeal a decision we make about your request. This includes rights under the GDPR, UK GDPR, Canadian privacy law, and US state laws such as the California Consumer Privacy Act. To use any of these rights, email privacy@[your-domain]. We'll verify the request comes from you and answer within the time the law allows. We won't treat you differently for using your rights. You can also complain to your local data protection authority.

We protect your information with encryption in transit (HTTPS), hashed passwords, signed sessions that can be revoked, and restricted access to production systems. Resetting your password signs you out on every device. No system is perfectly secure, so use a password you don't use anywhere else.

Everyday is not for children under 13, and we don't knowingly collect information from them. If you're under 18, or under the age of digital consent where you live, you need a parent or guardian's permission to use Everyday. If you believe a child under 13 has created an account, contact privacy@[your-domain] and we'll delete it.

The web app uses one essential cookie to keep you signed in, and your browser's local storage for small preferences such as tips you've dismissed. The iPhone, iPad and Android apps keep your sign-in token in the device's app storage and schedule reminders as local notifications on your device. We use no advertising or analytics cookies.

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect. We won't use your health information in a new way without asking for your consent first.

[Company legal name], [Registered business address]. Privacy questions: privacy@[your-domain]. Everything else: support@[your-domain] or the Help page.