Legal
The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (EU) 2016/679 (GDPR) is:
This policy applies to the Everwell iOS mobile application (the "App") distributed on the Apple App Store. It does not apply to third-party services you may access through links in the App.
The App stores the following data exclusively in the device's sandboxed local storage. This data never leaves your device and is never transmitted to us or any third party:
If you grant permission, the App reads the following data types from Apple HealthKit:
This data is read locally on your device and used solely to calculate your protection score and populate your trends. It is never transmitted to our servers. We have no access to your Apple Health data. Everwell is a wellness tool — not a medical device — and its scores are for personal motivation only.
Depending on the AI provider you choose in Settings:
If you grant notification permission, the App schedules local notifications for your weekly review reminder. Notifications are generated and displayed entirely on-device. No notification content is sent to external servers.
Pro subscription purchases are processed by Apple's App Store and RevenueCat (our payment infrastructure provider). RevenueCat receives an anonymous App User ID (a random UUID generated on first launch) and purchase receipt data solely to validate entitlements. RevenueCat does not receive your name, email, or health data. See RevenueCat's Privacy Policy.
| Processing activity | Legal basis |
|---|---|
| Storing habits, goals, and settings on your device | Art. 6(1)(b) — necessary for the performance of the app's service at your request |
| Reading Apple Health data | Art. 6(1)(a) — your explicit consent, granted via the Apple Health permission prompt |
| Scheduling local push notifications | Art. 6(1)(a) — your explicit consent, granted via the iOS permission prompt |
| Validating Pro purchase via RevenueCat | Art. 6(1)(b) — necessary for the performance of the transaction you initiated |
| Sending weekly stats to a BYOK AI provider | Art. 6(1)(a) — your explicit consent, given when you choose and configure the BYOK option |
When you use the BYOK AI option, your weekly statistics summary is transferred to the AI provider you configure, which may be located outside the EU. You control this by your choice of provider and API key. All other app data remains on your device.
RevenueCat (USA) processes purchase receipts. RevenueCat operates under standard contractual clauses and its own GDPR commitments. Apple's App Store and payment infrastructure operate under Apple's Privacy Policy.
All app data persists on your device until you delete the App or clear its storage. Uninstalling the App removes all locally stored data. We hold no copies of your data on our infrastructure. RevenueCat retains purchase records as required by Apple and applicable law.
As a data subject in the EU/EEA, you have the following rights. Because we hold no personal data on our servers, most of these rights are exercised directly on your device:
To exercise any right that requires our involvement, contact us at radek@jozefowicz.dev. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.
Step count, sleep data, heart rate, and active energy are health-related data and may constitute special category data under GDPR Art. 9. This data is processed exclusively on your device based on your explicit consent (Art. 9(2)(a)) given through the Apple Health permission prompt. We have no technical access to this data.
The App is not directed at children under 13 years of age, and we do not knowingly process data from children. If you believe a child has used the App, contact us and we will provide guidance on removing the local data.
App data is stored in Apple's sandboxed on-device storage, protected by iOS device encryption and the iOS security model. We have no access to this storage. You are responsible for securing access to your device.
We may update this policy if the App's data practices change. We will update the "Last updated" date above and, for material changes, provide notice within the App or on this page. Your continued use of the App after the effective date constitutes acceptance of the revised policy.
For any privacy-related questions or to exercise your rights:
This document was prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation).