Privacy Policy

App: everQUIN Effective date: 2026-10-18 Last updated: 2026-10-18

What changed on 2026-10-18: we now list the app's anonymous download of the notable-lives list from our news feed (§3h); the Cloudflare Turnstile check and Resend email used for beta sign-ups, and what a beta sign-up stores and for how long; and that some of everQUIN's music and illustrations are made with AI tools (Suno, Adobe Firefly). We also now say plainly that everQUIN is for adults 18 and over (it previously said not for children under 13). The app still sends nothing you write anywhere.

---

Plain-language summary

• everQUIN runs on your device. What you write, log, photograph and reflect on stays on your phone, in private, OS-sandboxed storage that is kept out of iCloud and Google backups.
• We have no user accounts, no servers that store your data, and no third-party analytics.
• No AI features, no chatbot. Nothing you write is sent to OpenAI, Google Gemini, Anthropic, or any other large-language-model provider. The framework's replies are written in advance and assembled on your phone. (Some of the music and illustrations were made with AI tools — see section 8.)
• Photos you add never leave your phone unless you choose to share or back them up yourself.
• Sharing is something you do, not something we do. When you tap "share," your phone's own share sheet opens; you choose the recipient and channel. We never see who you shared with.
• You can delete everything at any time from inside the app (Self → Settings → Delete all data). This is irrevocable.
• everQUIN is for adults 18 and over. It discusses mortality, relationships, and self-knowledge.

If any of this changes in a future version, we'll update the policy and notify you in-app at least 14 days before the change takes effect.

---

1. What information the app processes

1a. Information you provide directly

When you complete onboarding and use the app, you may enter:

• Your first name (used only to address you in the app)
• Your birth date (used to count the days you have lived and to compute your timeline)
• A self-narrative ("who are you right now?" — your starting story) and your answers to the framework's questions
• People in your rings: the names, birth dates you choose to add, relationship, status (living / passed / estranged) and energy (giving / neutral / draining) of people you place on your qSOIL ring map
• qMARVEL entries: titles, descriptions, weight, and an optional photo of the moments you log on your EKG, each marked Open or Facade
• qTENSOR entries: the length of a pause you measured and notes on how you answered a moment
• qJOHARI and qMASLOW self-estimates
• Practice entries: journal entries, tracker entries and reflections from The Walk, pathways, weekly resets and study guides
• Margin notes, saved verses, and reading progress
• Icebreaker and Ravel Walk play: the name and birth date of the person you play with, an optional photo of their face, and the answers you both give
• Settings: notification time, appearance, text size, app lock

1b. Information the app generates

• On-device history: the framework's past messages to you and your replies, the record of what you've completed, and which verses you've seen in your daily rotation — used only to drive features inside the app.
• A random install identifier: a random code created once per install and kept on your phone. It is sent only with music requests (see §3e) so the media service can rate-limit and sign a link. It is not tied to your name, your store account, or anything you write, and it changes if you reinstall.

1c. Information we do not collect

• We do not collect your last name, email address, or phone number.
• We do not collect advertising IDs (IDFA / AAID) or fingerprint your device.
• We do not read your phone's contacts. People in your rings exist only as the names you type in.
• We do not record audio or video. The microphone is never requested. Canon narration is pre-recorded audio that ships with the app.
• We do not upload photos. Photos you add to a marvel or to an Icebreaker player are copied into the app's private storage; location metadata (EXIF GPS) is removed, and only the capture date is kept for marvel photos so your timeline can sort correctly.
• We do not track which apps you switch to or use alongside everQUIN.

1d. Approximate location — only if you opt in

The framework can colour today's nudge with the weather where you are. This requires your phone's approximate (coarse) location.

• Off by default. No location request fires until you turn on Weather context (Self → Settings → Weather & location).
• What's sent when enabled: your approximate latitude/longitude to Open-Meteo (api.open-meteo.com) for the forecast, and to BigDataCloud (api.bigdatacloud.net) for a place name (city / region).
• What's not sent: your name, your reflections, any other app content.
• Disabling: turn the switch off. The cached city/region is cleared.

---

2. Where information lives and how it's protected

2a. On-device storage

Everything you enter is stored locally on your phone, in the app's private storage area. iOS and Android keep this storage in a per-app sandbox that other apps cannot read, and the operating system encrypts it at rest whenever your phone has a passcode or biometric lock set. This storage is excluded from iCloud and Google device backups. Photos are kept in the app's own folders on the device. You can additionally lock the app behind Face ID, Touch ID, or your device passcode (Self → Settings → App lock). If you uninstall the app, all of it is deleted.

2b. We do not run servers that store your personal data

everQUIN has no user accounts. There is no server we maintain that stores your name, your reflections, your people, your photos, or anything else you enter.

2c. The bundled canon

The 306-verse canon and its narration ship inside the app. Reading or listening is never reported anywhere.

---

3. When anything leaves your device

3a. Sharing

When you tap "share" on a verse, a card, a trace or a report, your phone's standard share sheet opens. You choose what to send, to whom, and through which app. We never see what you shared, who you shared it with, or whether they responded. Shared text may include the link everquin.com/from, which simply opens our website.

3b. Backups and exports you make

Exports (Markdown, JSON, PDF) and backups are files the app hands to your share sheet. They go only where you put them — Files, a drive, an email to yourself. A backup includes everything, photos and Facade-marked entries included, so a restore is exact; keep it somewhere you trust. We never receive a copy.

3c. App store reviews and crash reports

If you leave a review on the App Store or Google Play, that review is governed by Apple's or Google's terms. If you opt in (through your phone's settings) to share crash reports with Apple or Google, those reports contain crash traces and device characteristics, never your entries.

3d. In-app purchases

Purchases (Patron, Founding Patron, packs, genres, study guides) are processed by Apple or Google. We never receive your payment details, name, or billing address. The app keeps the store's confirmation on your device.

3e. Streaming music

Most songs stream from our media service (media.everquin.com, a Cloudflare Worker in front of Cloudflare R2 storage) the first time you play them, then play from a cache on your phone. To play a song, the app asks the media service for a short-lived link ("ticket"). The request contains:

• the song and genre requested
• the random install identifier (see §1b) and your platform (iOS or Android)
• for a paid genre only: proof that you own it — on iOS, the store-signed purchase record Apple gives the app; on Android, the product names you own (no purchase token)

The service checks the proof, returns a link that expires within six hours, and stores nothing: it keeps no log, no database, and no listening history. Like any web request, it exposes your IP address to Cloudflare; the service uses it only in the moment, to limit requests per minute. If you never play a streamed song, this section does not apply.

3f. Weather context (opt-in)

See §1d.

3g. Ravel Walk across two devices (not yet available)

Today the Ravel Walk is played on one phone, passed between partners; nothing leaves the device. A future version will let each partner walk from their own phone. When it ships, the two phones will exchange end-to-end encrypted messages through a relay we operate (a Cloudflare Worker). The relay will see only an opaque pair identifier, a sender label, the encrypted message and a timestamp, and the devices' public keys — never the content. Private keys stay in your phone's secure keychain. We will update this policy before that feature ships.

3h. Notable lives (Seasons)

To keep the recently departed in Seasons current, the app downloads a public list of notable people who died in the past year (names, birth and death dates, a short description) from our news feed (news.everquin.com/relevance.json, a Cloudflare Worker). It checks at launch, in the background, at most twice a day, on the phone and on the web version alike. The request is a plain, anonymous download: it carries no install identifier, no account, nothing you've written, and no location. Like any web request, it exposes your IP address and your device's standard user-agent string to Cloudflare; our code does not log or store them. If the download fails, the app keeps the last copy it had.

---

4. Permissions the app may request

The app asks only when you take an action that needs a permission. Decline any of them and the app keeps working in a reduced form.

Notably absent: microphone, contacts, calendar, health, motion, background location.

---

5. Children

The app is for adults 18 and over and is not directed to anyone younger. It discusses mortality, intimate relationships, loss, and self-knowledge — content intended for adults. We do not knowingly collect data from children; the app holds data only on the device it's installed on. Icebreaker's adults-only table opens only when both birth dates entered show both players are adults.

---

6. Your rights

Because your data is on your device, you exercise your rights directly in the app:

• Access and correct: everything you've entered is visible and editable where you entered it.
• Export: Self → Settings → Your data → Export Markdown or Export JSON.
• Delete one item: delete it where it lives.
• Delete everything: Self → Settings → Delete all data → Delete everything. This wipes the profile, journal, marvels and their photos, rings and their photos, margin notes, reading progress — everything. It cannot be undone.
• Uninstall: removing the app deletes all its data.

If you are in the EU, UK, California, or another jurisdiction granting specific privacy rights, you can exercise all of them through the in-app actions above. We hold no copies.

---

7. Data retention

Your data stays on your device until you delete it or uninstall the app. We do not have a copy. The media service retains nothing (§3e).

---

8. AI and machine learning

There are no AI or machine-learning features in the app. Insights and the framework's replies are computed on your phone from what you've entered, using fixed rules and pre-written text. If we ever add an AI feature, it will be opt-in, disclosed at the moment of use, and announced here first. A conversational chatbot is not on the roadmap.

Some of everQUIN's media is made with AI tools: the songs' audio is rendered with Suno from our lyrics, and many of the app's illustrations were generated with Adobe Firefly. That media ships inside the app or streams from our own server; none of it sees anything you write.

---

9. Third-party services the app uses

That's the complete list. Fonts are bundled inside the app; nothing is fetched for typography. We do not use Google Analytics, Firebase, Mixpanel, Segment, Amplitude, Sentry, Bugsnag, AppsFlyer, Branch, Adjust, or any other SDK that collects behaviour data.

---

10. International users

There is no server-side processing of your entries, so there is no cross-border transfer of them to disclose. Your data lives where your phone is.

---

11. Changes to this policy

If we change this policy, we will:

1. Update the "Last updated" date at the top. 2. Show an in-app notice the next time you open the app. 3. For material changes (for example, any new off-device data flow), give at least 14 days' notice before the change takes effect.

The current version is published at https://everquin.com/privacy.html. Prior versions are available on request.

---

12. Contact

For privacy questions, deletion help, or to report a concern: feedback@everquin.com (also reachable in the app: Self → Settings → Send feedback). We respond to legitimate privacy inquiries within 30 days.

---

13. Crisis disclosure

The everQUIN framework discusses topics that can surface difficult feelings — mortality, grief, isolation, relationship loss, identity. The app is not a substitute for professional mental-health care.

If you are in crisis or considering harming yourself, contact a qualified provider or a crisis service:

• United States: 988 Suicide and Crisis Lifeline (call or text 988)
• International: findahelpline.com for country-specific resources
• Emergency: 911 (US) or your local emergency number

The app has no crisis detection and cannot summon help. If you write something painful in your journal, only you will see it.

---

14. The web version

A browser version of everQUIN at app.everquin.com runs from the same source and keeps its data in your browser's local storage (IndexedDB), which is not encrypted the way the phone sandbox is. On the web there are no notifications, no weather, no photos, no purchases, and image share cards are replaced by text. Free songs stream from the same media service (§3e). To remove web data, use Delete all data or clear the site's data in your browser. Everything else in this policy applies equally.

---

15. App store privacy summaries

Apple App Privacy:

• Data Not Linked to You: Coarse location — only when you opt in to Weather context; sent to the weather and place-name services, not stored by us.
• Data Linked to You: none.
• Data Used to Track You: none.

Google Play Data safety:

• Data collected: Approximate location — optional, only with Weather context on; not stored on our servers.
• Data shared: Open-Meteo and BigDataCloud receive approximate coordinates when Weather context is on.
• Encrypted in transit: yes — HTTPS for every request.
• Deletion: yes — in the app.

If a future feature changes this, the labels will be updated before the feature ships.

---

16. Beta invite requests (website)

This section covers the website, not the app. If you request a beta invite at everquin.com/beta, we collect what you type into that form: your name, the email for your invite, your platform, the Google account email (Android testers only — Google Play admits only the accounts we add), and, if you choose, your phone model, why you're interested, and how you heard about everQUIN.

• Why: only to run the beta — to choose invite waves and to add you as a tester in Apple TestFlight or Google Play testing, which then email you under Apple's or Google's terms.
• Where: in a database on Cloudflare (our host, Cloudflare D1), readable only by the everQUIN team.
• Emails: we email you your install links through Resend (resend.com), our email-sending provider, which receives your name, your email address and the links for your platform in order to deliver the message. A repeat request re-sends them at most once every 12 hours. The everQUIN team gets a short note with only your name and platform, sent through Cloudflare Email Routing.
• Abuse control: we keep a salted, one-way hash of your IP address to limit repeated submissions (counted for about an hour in Cloudflare's key-value storage, alongside a hash of your email for the 12-hour re-send limit). We never store the IP itself. The form is also protected by Cloudflare Turnstile, a security check run by Cloudflare that processes signals from your browser and device, and your IP address, to tell people from bots; Cloudflare handles that data under its Turnstile privacy addendum. Apart from that check, the page uses no analytics or advertising trackers. Your browser remembers locally which step of the page you reached and that you have sent a request; that never leaves your browser.
• How long: until the beta ends; then we delete the list. Ask us anytime at feedback@everquin.com and we'll delete your request sooner.
• Never sold, shared for marketing, or used for anything but the beta.

---

Honest about uncertainty

This policy is written to match what the app actually does. If you spot something that contradicts how the app works, tell us at the address above — we will correct the policy or the app, whichever is wrong.