Privacy, plainly.

What EvolveOS keeps

Your account

Your email address and your password. The password is stored only in scrambled (hashed) form by our sign-in provider; nobody can read it, us included.

What you enter

Everything you add to the app: transactions, accounts, budgets, bills and goals; habits, moods and journal entries; meals and diet targets; health records, including medical files you upload; tasks, projects and time you log; and the names of the people in your household.

Photos and recordings, only when you choose

The app opens your camera or photos only when you pick something to add: a receipt or payment screenshot to scan, or a medical file to keep. Medical files are stored with your health records. Scanned photos are not stored at all (see Who else touches your data).

The app uses the microphone only while you tap Say it to tell it what you spent or what you need to do. The recording is sent to be read, then thrown away; we don't keep it. What you type to add several things at once is treated the same way.

Apple Health and Health Connect, only if you connect them

On your phone you can let Apple Health (iPhone) or Health Connect (Android) fill things in for you. Nothing is read until you say yes on EvolveOS's setup screen and then on Apple's or Google's own screen, where you choose each kind of data.

EvolveOS can read your workouts, steps, active minutes, sleep, weight, body fat, cardio fitness and resting heart rate: the last four weeks when you connect (weight and body fat back six months, or to your first body scan if that's earlier), then what's new. Once, it also reads a year back for workouts, steps, cardio fitness and resting heart rate, to show your bests and how they change over the months. It can write, each with its own switch: the gym sessions you log, the body scans and weights you type, and on iPhone your daily mood.

What comes in is kept in a private store under your own account that only you can read, even in a shared space. Your space gets only what the app fills in from it, such as a cardio day or a walk marked done, with where it came from.

The AI training cards, only if you say yes

Two cards in Your week and Your month are made with the help of an AI: one points out patterns in your weeks of training, the other suggests changes to your training plan. The first time one could be made, the app asks whether it may send your numbers for them. Nothing is sent until you say yes, and Not now is kept as your answer.

If you say yes, once a week the app sends numbers from your last eight weeks: how many sessions you did and of what kind, sets per muscle, your best for each main lift, runs (distance and time), steps, how long you slept, active minutes and how many days you logged each mood. Once a month it sends your training plan (its days, exercises and sets), your last six weeks' sessions and any sore spots you told Health about, as body parts only. Where you've connected Apple Health or Health Connect, some of these numbers (steps, sleep, active minutes, runs and workouts) come from there.

Only numbers, dates and the app's own names for exercises and body parts are sent, never your notes, the names you've given things, or your journal. Your phone checks every answer against your own data before it shows anything. You can turn this off at any time in Settings → AI reading.

Your plan

Whether your space is in its free trial, has EvolveOS Plus, or neither; any Plus code you used; and how many receipt scans and AI requests you've used this month, so your plan's allowance can be applied.

What we don't collect

No location, no contacts, no advertising IDs, and no analytics about how you use the app.

Why we keep it

Only to run the app you asked for: to show your information back to you, keep it in step across your phone and the website, and share it with the people in your space. We don't use it to advertise to you, we don't sell it, and we don't use it to train AI.

We also send a few emails your account needs, such as confirming your email address or resetting your password. We don't send marketing emails.

Where it's kept

Your data is stored by our database provider, Supabase, in Frankfurt, Germany. The website is served from Frankfurt too. Everything travels between your device and our servers encrypted (HTTPS).

Each household has its own private space. Access rules on the database mean only the people in your space can read or change its data, and uploaded files open only through short-lived private links.

The app also keeps a copy on your device, so it works offline and opens quickly. Signing out removes it. On iPhone, the Home Screen widget shows a small summary of your day; it never shows money.

Insights, Your week and Your month are worked out by the app on your device, from your space's own data, apart from the two AI training cards if you've said yes to them (see The AI training cards); what you've seen and marked "Not for me" is kept in your space so both of your devices agree. Their reminders are scheduled by your phone itself, at the times you choose in Settings, and nothing is sent to us or to anyone else to send them.

Who else touches your data

A few companies help run EvolveOS. Each gets only what it needs to do its one job, and none may use your data for its own purposes.

Supabase

Stores your data and files, and handles signing in. Frankfurt, Germany.

Hostinger

Hosts the website. Frankfurt, Germany.

Google (Gemini)

Only when you scan a receipt or payment screenshot, a body composition sheet or a photo of a meal, or say or type several things to add at once, and only after you've said yes in the app: the photo, the recording or the words, with your category or project names, are sent to Gemini to read them. We use Google's paid service, under which Google doesn't use what we send to improve its products or train its AI, and keeps it only for a limited time to detect misuse. We don't store the photo, the recording or the words. And, only if you've said yes to the AI training cards: once a week your training numbers (sessions, sets, lifts' bests, runs, steps, sleep length, active minutes and mood counts, some from Apple Health or Health Connect where connected), and once a month your training plan's days, exercises and sets with any sore spots as body parts. Numbers only, never your words. You can turn it off in Settings → AI reading.

Resend

Sends your account emails, so it receives your email address.

RevenueCat

Keeps track of EvolveOS Plus bought in the App Store or Google Play, so it receives your account's id, your purchases (what you bought, when, and whether it renews) and basic details of the device you bought on. Not your name, email or anything you enter.

Google Fonts

The website loads its typefaces from Google, so your browser contacts Google when you open it.

Exchange rates

The app fetches currency rates from open.er-api.com and Yahoo Finance. Only currency names are sent, never your data.

Google, Resend and RevenueCat may process data outside the European Union, under the safeguards their terms provide.

If you get the app from the App Store or Google Play, Apple or Google handle the download and any app store purchase under their own privacy policies.

Sharing a space

A space can be shared with one other person you invite, usually a partner. Everyone in a space can see and change everything in it, including things the app files under one person, like their habits, moods or journal. Only invite someone you're happy to share all of that with.

The one exception is what Apple Health or Health Connect brings in: those numbers stay in your own private store. The other person sees only the days the app marked done from them.

Your choices

• Take a copy. Settings → Backup & restore → Export saves everything in one file.
• Correct it. Anything you've entered can be edited or deleted in the app.
• Stop the AI training cards. Settings → AI reading → Let AI look at your training numbers. Off, nothing more is sent for them.
• Stop Apple Health or Health Connect. On your phone, Settings → Health → Apple Health (or Health Connect) → Disconnect, then choose whether what came in stays or is removed. Each kind of data also has its own switch there, and in Apple's or Google's own settings.
• Delete your account. Settings → Delete my account. If you're the only person in your space, the space, all its data and every uploaded file are deleted, then your account. If someone shares the space, you leave it and your account is deleted; the space stays for them.
• Ask us. For anything else, such as a question or a request about your data, email us (below). Depending on where you live, you may have further rights, such as to object or to complain to your data protection authority.

How long we keep it

For as long as you have an account. When you delete it, it's removed straight away, with anything Apple Health or Health Connect brought in. Copies may remain for a short time in our database provider's routine backups until they're overwritten.

Children

EvolveOS isn't meant for children under 16, and we don't knowingly keep their data. If you think a child has made an account, email us and we'll delete it.

Changes to this page

If this policy changes, the date at the top changes with it. If a change matters to how your data is used, we'll tell you in the app before it applies.

Contact

Questions or requests about your data: hello@evolveos.app.