This policy covers both the Everblue iOS app and the everblue.me marketing website, how each handles your data, and your rights about it. The app comes first because it's what matters most.

The short version (app)

Everblue is built to keep your life on your phone. The app has no login and no account— you're identified only by a random ID stored on your device and an optional nickname.

Your journal entries, location, Apple Health data, and music history stay on your device.When you include a photo, it is described by Google's paid Gemini — never used to train AI — and only the resulting text is saved, on your device.
To write your journal, the app sends short, de-identified textto AI providers (Google Gemini and Anthropic Claude), plus — to describe a photo you include — the photo itself to Google's Gemini. Your raw health data and precise location history are never sent.
No ads, no advertising trackers, no IDFA, no selling your data.We don't profile you and we don't track you across other apps or sites.

The Everblue iOS app

No account, no identity

The app does not ask you to sign up or log in. On first launch it generates a random anonymous identifier that lives on your device, plus an optional nickname you can set. We don't collect your name, email, phone number, or contacts.

One anonymous daily ping

Once per day, the app sends our server a single anonymous signal: a random install identifier (minted on your device, separate from everything above and never linked to your journal) and the number of days since you installed. That's the entire payload — no journal content, no location, no device details. We use it only to know whether people keep using Everblue week to week.

What stays on your device

Photos.When a photo is part of your day, the app first checks it on your device and skips anything sensitive (nudity, IDs, payment cards) — those are never sent. A clean photo is sent to Google's Gemini to generate a short description (see What leaves your device below); only that description is stored, on your device. The image itself is not kept by us.
Apple Health. If you allow it, the app reads health data (such as steps, sleep, heart rate, and workouts) read-only to weave the rhythm of your day into entries. It is processed on-device, is never written back to Health, and is never sold, shared, or used for advertising.
Location. If you allow it, the app notes places you go (optionally in the background) so they can appear in your journal. Location is processed on-device and is not shared.
Music & microphone/speech. If you allow it, the app reads your recently played music on-device, and can transcribe your voice for voice entries. These stay on your device.
Journal entries are stored locally on your device.

What leaves your device

To generate the words of your journal and power the Cloudy companion, the app sends short, de-identified text (a few words about your day) to large-language-model providers. To describe a photo you include, it also sends that phototo Google's Gemini. On Google's paid tier, your prompts and images are not used to train Google's models, and we send a per-request “do not store” flag. Under Google's abuse-monitoring policy a copy may be retained briefly (about 55 days) and then deleted; no person reviews it unless abuse is flagged. We strip location metadata (EXIF/GPS) from a photo before sending it, and we never send your raw health data, your precise location history, or any directly identifying information.

Google Gemini — generates journal text and describes the photos you include.
Anthropic Claude — used for premium recap features.

These snippets are processed to return your generated text and are not used to advertise to you. The de-identified text and your anonymous ID may be stored on our backend (hosted on Heroku with PostgreSQL) so your journal and Cloudy's memory work across sessions.

Subscriptions

Paid plans are auto-renewable subscriptions handled by Apple's App Store through RevenueCat. Apple processes the payment — we never see your card or payment details. RevenueCat tells us only whether a subscription is active.

What the app does NOT do

No third-party advertising or ad trackers, and no IDFA.
No selling or renting of your data to anyone.
No behavioral profiling across other apps or websites.

Your choices & deleting app data

Every permission (Photos, Health, Location, Music, Microphone) is optional and can be granted or revoked anytime in iOS Settings; the app still works without them, with fewer signals to draw on. Because there is no account, deleting the app removes the data stored on your device. To request deletion of any data associated with your anonymous ID on our backend, email hi@everblue.meand we'll remove it within 30 days.

The short version (website)

We collect two things on this site:

Your email, when you join the waitlist.
Anonymous usage analytics, so we know which pages matter.

That's it. No accounts, no payment data, no behavioral profiling, no selling anything to anyone.

What the website collects

When you join the waitlist

We collect the email address you submit. It's the only field on the form.

When you visit any page

We use Google Analytics to count pageviews, referrers, country, browser, device type, and approximate session duration. Google's tools anonymize IP addresses by default.

What we don't collect

We don't ask you to create an account.
We don't process payments on this site.
We don't run third-party advertising trackers.
We don't have a “data partner” program.

Who else sees your website data

Mailchimp (email)

Email addresses go to Mailchimp, where we store the waitlist.

Google Analytics (anonymous usage)

We use the free tier of Google Analytics (GA4) for traffic stats. Their privacy policy covers what Google does with the data on their end.

Heroku (hosting)

The site is hosted on Heroku. Heroku's standard hosting logs include the IP that requested each page. We don't read these logs for any individual visitor.

Unsplash (blog images)

Some images on our blog are loaded from images.unsplash.com. When your browser loads them, Unsplash sees the request. Their privacy policy covers what they do with it.

Data retention

Your waitlist email stays in Mailchimp until you ask us to remove it or click the unsubscribe link in any of our emails.
Analytics retention follows Google's default (currently 14 months).

Your rights

You can:

Unsubscribefrom waitlist emails at any time via the link in each email's footer.
Ask us to delete your email by writing to hi@everblue.me.
Ask us what we have on you by writing to the same address.

We respond to those requests within 30 days.

Cookies

The site uses two kinds of cookies:

Google Analytics's _ga* cookies, which count returning visitors.
A session cookie for the admin portal — only set if someone logs into it. The admin is single-user and not relevant to public visitors.

We don't use behavioral or advertising cookies.

Children

Neither the Everblue app nor this site is directed at children under 13, and we don't knowingly collect data from them. If we learn we've collected an email or other data from someone under 13, we'll delete it.

Changes

If we update this policy, we'll post the new version here with a fresh “Last updated” date. Substantive changes that affect what we collect or who sees it will also be emailed to anyone on the waitlist.

Contact

Email hi@everblue.mefor anything. We're two people. We read it all.