This policy covers both the Everblue iOS app and the everblue.me marketing website, how each handles your data, and your rights about it. The app comes first because it's what matters most.

The short version (app)

Everblue is built to keep your life on your phone. The app has no login and no account— you're identified only by a random ID stored on your device and an optional nickname.

Your journal entries, Apple Health data, and music history stay on your device.When you include a photo, it is described by Google's paid Gemini — never used to train AI — and only the resulting text is saved, on your device.
To write your journal, the app sends short, de-identified textto AI providers (Google Gemini and Anthropic Claude), plus — to describe a photo you include — the photo itself to Google's Gemini. Your raw health data is never sent — and the app collects no location data at all.
No ads, no advertising trackers, no IDFA, no selling your data.We don't profile you and we don't track you across other apps or sites.

The Everblue iOS app

No account, no identity

The app does not ask you to sign up or log in. On first launch it generates a random anonymous identifier that lives on your device, plus an optional nickname you can set. We don't collect your name, email, phone number, or contacts.

One anonymous daily ping

Once per day, after the day has ended, the app sends our server a single anonymous signal: a random install identifier (minted on your device, used for nothing else, separate from everything above, and never linked to your journal) and the number of days since you installed. Riding along are at most twelve daily tallies — plain counts of how the app was used that day:

times you opened the app
times you waited more than 20 seconds for writing
entries written (bucketed: 0, 1–2, or 3+)
entries read
reactions left on entries
chat messages sent
widget opens
evening-digest notification taps
letters read
memory-gallery opens
past days filled in
paywall views

That's the entire payload. No journal content, no chat content, no location, no timestamps finer than a day, no device identifiers — nothing that can be linked to your journal or to who you are. We use it only to see whether Everblue is actually helping people keep a journal, and where it loses them.

What stays on your device

Photos.Photos enter your journal only when you add them yourself — the app does not scan your photo library. A photo you add is first checked on your device and skipped if it is sensitive (nudity, IDs, payment cards) — those are never sent. A clean photo is sent to Google's Gemini to generate a short description (see What leaves your device below); only that description is stored, on your device. The image itself is not kept by us.
Apple Health. If you allow it, the app reads health data (such as steps, sleep, heart rate, workouts, and mindful minutes) read-only to weave the rhythm of your day into entries. Each health category is a separate switch you control individually. It is processed on-device, is never written back to Health, and is never sold, shared, or used for advertising. Menstrual-cycle data is off by defaultand only read if you turn that switch on; when you do, your raw cycle data (dates, flow) stays on your device — at most a derived day number and phase label (like “day 24, luteal”) rides an entry request transiently, and is never stored on a server.
Location. Everblue does not collect your location. The app never asks for location permission and holds no location data. Location metadata (EXIF/GPS) is stripped from any photo you add before anything leaves your device.
Music & microphone/speech. If you allow it, the app reads your recently played music on-device, and can transcribe your voice for voice entries. These stay on your device.
Journal entries are stored locally on your device.

What leaves your device

To generate the words of your journal and power the Cloudy companion, the app sends short, de-identified text (a few words about your day) to large-language-model providers. To describe a photo you include, it also sends that phototo Google's Gemini. On Google's paid tier, your prompts and images are not used to train Google's models. Under Google's abuse-monitoring policy a copy may be retained briefly (about 55 days) and then deleted; no person reviews it unless abuse is flagged. We strip location metadata (EXIF/GPS) from a photo before sending it, and we never send your raw health data or any directly identifying information.

Google Gemini — generates journal text and describes the photos you include.
Anthropic Claude — used for premium recap features.

These snippets are processed to return your generated text and are not used to advertise to you. Our backend does notstore your journal, your photos, or Cloudy's memory of you — those live on your device. The only things our servers keep are your journaling preferences (keyed to an anonymous ID) and the anonymous daily tallies described above.

Subscriptions

Paid plans are auto-renewable subscriptions handled by Apple's App Store through RevenueCat. Apple processes the payment — we never see your card or payment details. RevenueCat tells us only whether a subscription is active.

What the app does NOT do

No third-party advertising or ad trackers, and no IDFA.
No selling or renting of your data to anyone.
No behavioral profiling across other apps or websites.

Your choices & deleting app data

Every permission (Health, Photos, Calendar, Music, Microphone) is optional and can be granted or revoked anytime in iOS Settings; the app still works without them, with fewer signals to draw on. Because there is no account, deleting the app removes the data stored on your device. To request deletion of any data associated with your anonymous ID on our backend, email hi@everblue.meand we'll remove it within 30 days.

The short version (website)

We collect two things on this site:

Your email, when you join the waitlist.
Anonymous usage analytics, so we know which pages matter.

That's it. No accounts, no payment data, no behavioral profiling, no selling anything to anyone.

What the website collects

When you join the waitlist

We collect the email address you submit. It's the only field on the form.

When you visit any page

We use Google Analytics to count pageviews, referrers, country, browser, device type, and approximate session duration. Google's tools anonymize IP addresses by default.

What we don't collect

We don't ask you to create an account.
We don't process payments on this site.
We don't run third-party advertising trackers.
We don't have a “data partner” program.

Who else sees your website data

Mailchimp (email)

Email addresses go to Mailchimp, where we store the waitlist.

Google Analytics (anonymous usage)

We use the free tier of Google Analytics (GA4) for traffic stats. Their privacy policy covers what Google does with the data on their end.

Heroku (hosting)

The site is hosted on Heroku. Heroku's standard hosting logs include the IP that requested each page. We don't read these logs for any individual visitor.

Unsplash (blog images)

Some images on our blog are loaded from images.unsplash.com. When your browser loads them, Unsplash sees the request. Their privacy policy covers what they do with it.

Data retention

Your waitlist email stays in Mailchimp until you ask us to remove it or click the unsubscribe link in any of our emails.
Analytics retention follows Google's default (currently 14 months).

Your rights

You can:

Unsubscribefrom waitlist emails at any time via the link in each email's footer.
Ask us to delete your email by writing to hi@everblue.me.
Ask us what we have on you by writing to the same address.

We respond to those requests within 30 days.

Cookies

The site uses two kinds of cookies:

Google Analytics's _ga* cookies, which count returning visitors.
A session cookie for the admin portal — only set if someone logs into it. The admin is single-user and not relevant to public visitors.

We don't use behavioral or advertising cookies.

Children

Neither the Everblue app nor this site is directed at children under 13, and we don't knowingly collect data from them. If we learn we've collected an email or other data from someone under 13, we'll delete it.

Changes

If we update this policy, we'll post the new version here with a fresh “Last updated” date. Substantive changes that affect what we collect or who sees it will also be emailed to anyone on the waitlist.

Contact

Email hi@everblue.mefor anything. We're two people. We read it all.