Privacy policy

Last updated 31 August 2026

Draft. This describes what the app actually does today and has not yet been reviewed by a lawyer.

The short version

Your record lives on your phone. It works with no account at all. If you create an account it is also stored on our sync service so you do not lose it with the phone. Nothing about your health is sold, and nothing is used for advertising.

What is stored, and where

Your record — symptom logs, medications, medication logs, change events, post-visit captures and pattern dismissals — is written to a database on this device. Each of those holds what you entered: what you felt, where, how bad you said it was, the words you used, and when. With an account, the same rows are synced so another device can read them.

What stays on this device and never syncs

Your name and the words you use for things (used by Ask), your reminder and privacy settings, drafts, your age band, and the flags that remember which questions you have already been asked. These are held in the app’s own storage and are removed by Delete all data.

Your age

We ask for your date of birth once. We store only whether you are over 18 or not — never the date itself. It is used for one thing: a subscription is not offered to under-18s.

Apple Health

Only if you connect it. The app reads 8 kinds of data: sleep, steps, resting heart rate, heart rate variability, active energy, exercise minutes, distance and flights climbed. It refuses 27 other kinds Apple would allow, including blood glucose, blood pressure, ECG, lab results, conditions, medications, body mass and body composition. Nothing is ever written back to Apple Health.

Ask, and what a model sees

Ask answers from your record by counting and sorting it on your device. Pro adds a written reading of an answer the app has already worked out. When that happens, the figures already computed are sent — a count, a rate, a date range — and the entries behind them are not. Your record is not sent to a model, and the model is never asked to look anything up.

Who else is involved

Supabase provides accounts and sync. Anthropic phrases Pro readings, reached only through our own server function — never directly by the app. Apple provides HealthKit, on your device. Those are all of them: there is no analytics service, no advertising network and no data broker.

The website, and the waitlist

ever-since.app collects one thing, and only if you type it in: an email address for the waitlist, kept with the date you added it and a note of which page it came from. There is no name field and nowhere to put anything about your health — the table has one meaningful column, and that shape is the guarantee. It is the same Supabase project the app syncs to. The key the page carries can add an address and cannot read one back, so the list cannot be seen through the website by anyone. The site sets no cookies, runs no analytics, and loads nothing from any other company. To come off the list, write to support@ever-since.app and it is deleted.

How long any of it is kept

Your record is kept until you delete it. There is no expiry and nothing is removed on a schedule, because a health record you have been keeping for three years is worth more than one kept for three months. Deleting your account removes the synced copy; deleting all data removes the copy on this device. Backups roll off within 30 days of a deletion.

What is never done with it

Your record is not sold. It is not shared with advertisers, data brokers or insurers. It is not used to train a model. There is no analytics service in this app, so there is no record of which screens you opened or how long you spent on them.

What you can do with your data

Export it — My Data offers your whole record as a file you keep. Correct it — every entry can be edited or removed. Delete it — all of it, from Privacy & Security, without asking anyone. These are in the app rather than behind a request form, which is the point.

Under 13

Ever Since is not for under-13s. We ask for your date of birth once during setup and the app cannot be set up with a date under 13. If you believe a child under 13 has created a record, contact us at support@ever-since.app and it will be removed.

How it is protected

The record on your phone is protected by the phone itself, and the app can be locked with Face ID. Data in transit is encrypted, and the synced copy sits behind your account. No system is immune, and this policy does not claim otherwise.

Deleting things

Delete all data, in Privacy & Security, removes the record from this device. Delete account, in Account, removes the account and its synced copy. Neither asks you to email anyone.

What this app is not

Ever Since is a general wellness record. It describes what you entered. It does not diagnose, does not treat, and is not a medical device.

If this changes

If this policy changes in a way that affects what is collected or who sees it, you will be told in the app before it takes effect — not only by a new date on this page.

Contact

Questions, corrections or a request to remove a child's record: support@ever-since.app.