Privacy Policy

1 Information We Collect

We collect only the information necessary to provide the App's features. This includes:

• Account information — your email address and display name, provided when you create an account.
• Habits — the habits you create, including their names, categories, descriptions, and completion records.
• Screen time logs — daily screen time entries you manually log, including minutes used and your personal limit at the time of logging.
• Daily reflections — journal-style text entries you choose to write within the App.
• Challenge and streak data — your challenge participation, task completion records, and habit streak history.
• Notification preferences — whether you have enabled or disabled in-app reminders. Reminders are scheduled locally on your device and no notification token or device identifier is transmitted to our servers.

We do not collect your precise location, contacts, photos, browsing history, or any other device data beyond what is listed above.

2 How We Use Your Information

We use the information we collect solely to:

• Create and maintain your account and provide the App's core features.
• Calculate your streaks, progress statistics, and achievement milestones within the App.
• Send transactional emails such as password resets and email confirmations.
• Schedule local reminders on your device for habit check-ins, if you have opted in.
• Improve the reliability and performance of the App.

We do not use your information for advertising, and we do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3 Third-Party Services

The App relies on the following third-party services to operate. Each provider processes data subject to their own privacy policy.

• Supabase — provides our database and authentication infrastructure. Your account credentials and all App data are stored on Supabase servers hosted on Amazon Web Services (AWS) in the United States. Governed by the Supabase Privacy Policy.
• Resend — delivers transactional emails (e.g., password reset, email confirmation) on our behalf. Your email address is shared with Resend only for this purpose. Governed by the Resend Privacy Policy.
• HaveIBeenPwned Pwned Passwords API — when you create or update your password, it is checked against a database of known compromised passwords as a security measure. This check is performed server-side by Supabase; your password is never sent in plain text to any external service.

4 Data Storage & Security

All App data is stored on Supabase infrastructure hosted in the United States. We implement row-level security policies so that each user can only access their own data. We use industry-standard practices including encrypted connections (HTTPS/TLS) and secure authentication. While no system is completely immune to risk, we take reasonable technical measures to protect your information.

5 Data Retention & Deletion

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time directly within the App by going to Profile → Delete Account. Upon deletion, your data is removed from our systems. Note that Supabase and Resend may retain server logs for a limited period as part of their standard operations, subject to their own retention policies.

6 Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account or provided us with personal information, please contact us at support@everward.app and we will promptly delete the information.

7 Your California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — you may request information about the categories and specific pieces of personal data we have collected about you.
• Right to delete — you may request deletion of your personal data. The easiest way to exercise this right is by deleting your account directly in the App (Profile → Delete Account).
• Right to opt out of sale — we do not sell your personal information, so there is nothing to opt out of.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

To submit a request, contact us at support@everward.app.

8 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will make reasonable efforts to notify you within the App. Continued use of the App after any changes constitutes your acceptance of the updated policy.

9 Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Caffrey Tech LLC
support@everward.app