Privacy Policy
App: everQUIN Effective date: 2026-11-05 Last updated: 2026-10-08
Plain-language summary
- everQUIN runs on your device. What you write, log, photograph and reflect on stays on your phone, in private, OS-sandboxed storage that is kept out of iCloud and Google backups.
- We have no user accounts, no servers that store your data, and no third-party analytics.
- There is no AI in the app. Nothing you write is sent to OpenAI, Google Gemini, Anthropic, or any other large-language-model provider. The framework's replies are written in advance and assembled on your phone.
- Photos you add never leave your phone unless you choose to share or back them up yourself.
- Sharing is something you do, not something we do. When you tap "share," your phone's own share sheet opens; you choose the recipient and channel. We never see who you shared with.
- You can delete everything at any time from inside the app (Self → Settings → Delete all data). This is irrevocable.
- Children under 13 should not use this app. It discusses mortality, relationships, and self-knowledge, and is intended for adults.
If any of this changes in a future version, we'll update the policy and notify you in-app at least 14 days before the change takes effect.
1. What information the app processes
1a. Information you provide directly
When you complete onboarding and use the app, you may enter:
- Your first name (used only to address you in the app)
- Your birth date (used to count the days you have lived and to compute your timeline)
- A self-narrative ("who are you right now?" — your starting story) and your answers to the framework's questions
- People in your rings: the names, birth dates you choose to add, relationship, status (living / passed / estranged) and energy (giving / neutral / draining) of people you place on your qSOIL ring map
- qMARVEL entries: titles, descriptions, weight, and an optional photo of the moments you log on your EKG, each marked Open or Facade
- qTENSOR entries: the length of a pause you measured and notes on how you answered a moment
- qJOHARI and qMASLOW self-estimates
- Practice entries: journal entries, tracker entries and reflections from The Walk, pathways, weekly resets and study guides
- Margin notes, saved verses, and reading progress
- Icebreaker and Ravel Walk play: the name and birth date of the person you play with, an optional photo of their face, and the answers you both give
- Settings: notification time, appearance, text size, app lock
1b. Information the app generates
- On-device history: the framework's past messages to you and your replies, the record of what you've completed, and which verses you've seen in your daily rotation — used only to drive features inside the app.
- A random install identifier: a random code created once per install and kept on your phone. It is sent only with music requests (see §3e) so the media service can rate-limit and sign a link. It is not tied to your name, your store account, or anything you write, and it changes if you reinstall.
1c. Information we do not collect
- We do not collect your last name, email address, or phone number.
- We do not collect advertising IDs (IDFA / AAID) or fingerprint your device.
- We do not read your phone's contacts. People in your rings exist only as the names you type in.
- We do not record audio or video. The microphone is never requested. Canon narration is pre-recorded audio that ships with the app.
- We do not upload photos. Photos you add to a marvel or to an Icebreaker player are copied into the app's private storage; location metadata (EXIF GPS) is removed, and only the capture date is kept for marvel photos so your timeline can sort correctly.
- We do not track which apps you switch to or use alongside everQUIN.
1d. Approximate location — only if you opt in
The framework can colour today's nudge with the weather where you are. This requires your phone's approximate (coarse) location.
- Off by default. No location request fires until you turn on Weather context (Self → Settings → Weather & location).
- What's sent when enabled: your approximate latitude/longitude to Open-Meteo (
api.open-meteo.com) for the forecast, and to BigDataCloud (api.bigdatacloud.net) for a place name (city / region). - What's not sent: your name, your reflections, any other app content.
- Disabling: turn the switch off. The cached city/region is cleared.
2. Where information lives and how it's protected
2a. On-device storage
Everything you enter is stored locally on your phone, in the app's private storage area. iOS and Android keep this storage in a per-app sandbox that other apps cannot read, and the operating system encrypts it at rest whenever your phone has a passcode or biometric lock set. This storage is excluded from iCloud and Google device backups. Photos are kept in the app's own folders on the device. You can additionally lock the app behind Face ID, Touch ID, or your device passcode (Self → Settings → App lock). If you uninstall the app, all of it is deleted.
2b. We do not run servers that store your personal data
everQUIN has no user accounts. There is no server we maintain that stores your name, your reflections, your people, your photos, or anything else you enter.
2c. The bundled canon
The 306-verse canon and its narration ship inside the app. Reading or listening is never reported anywhere.
3. When anything leaves your device
3a. Sharing
When you tap "share" on a verse, a card, a trace or a report, your phone's standard share sheet opens. You choose what to send, to whom, and through which app. We never see what you shared, who you shared it with, or whether they responded. Shared text may include the link everquin.com/from, which simply opens our website.
3b. Backups and exports you make
Exports (Markdown, JSON, PDF) and backups are files the app hands to your share sheet. They go only where you put them — Files, a drive, an email to yourself. A backup includes everything, photos and Facade-marked entries included, so a restore is exact; keep it somewhere you trust. We never receive a copy.
3c. App store reviews and crash reports
If you leave a review on the App Store or Google Play, that review is governed by Apple's or Google's terms. If you opt in (through your phone's settings) to share crash reports with Apple or Google, those reports contain crash traces and device characteristics, never your entries.
3d. In-app purchases
Purchases (Patron, Founding Patron, packs, genres, study guides) are processed by Apple or Google. We never receive your payment details, name, or billing address. The app keeps the store's confirmation on your device.
3e. Streaming music
Most songs stream from our media service (media.everquin.com, a Cloudflare Worker in front of Cloudflare R2 storage) the first time you play them, then play from a cache on your phone. To play a song, the app asks the media service for a short-lived link ("ticket"). The request contains:
- the song and genre requested
- the random install identifier (see §1b) and your platform (iOS or Android)
- for a paid genre only: proof that you own it — on iOS, the store-signed purchase record Apple gives the app; on Android, the product names you own (no purchase token)
The service checks the proof, returns a link that expires within six hours, and stores nothing: it keeps no log, no database, and no listening history. Like any web request, it exposes your IP address to Cloudflare; the service uses it only in the moment, to limit requests per minute. If you never play a streamed song, this section does not apply.
3f. Weather context (opt-in)
See §1d.
3g. Ravel Walk across two devices (not yet available)
Today the Ravel Walk is played on one phone, passed between partners; nothing leaves the device. A future version will let each partner walk from their own phone. When it ships, the two phones will exchange end-to-end encrypted messages through a relay we operate (a Cloudflare Worker). The relay will see only an opaque pair identifier, a sender label, the encrypted message and a timestamp, and the devices' public keys — never the content. Private keys stay in your phone's secure keychain. We will update this policy before that feature ships.
4. Permissions the app may request
The app asks only when you take an action that needs a permission. Decline any of them and the app keeps working in a reduced form.
| Permission | When asked | What it enables | Refusable? |
|---|---|---|---|
| Notifications | When you set a daily reminder time | Your daily verse, at the time you choose. Scheduled on the device; there is no push server. | Yes |
| Photos (read) | When you add a photo to a marvel or an Icebreaker player | Choosing a photo; the app keeps a private copy with location data removed | Yes — skip the photo |
| Camera | When you photograph a marvel as it happens, or a player for Icebreaker | Taking that photo | Yes — skip the photo |
| Photos (add only) | When you save a share card | Saving the card image to your library | Yes — share instead |
| Location (approximate) | Only after you turn on Weather context | Weather-aware nudges (see §1d) | Yes — off by default |
| Face ID / Touch ID | When you turn on App lock | Locking the app | Yes — App lock is off by default |
Notably absent: microphone, contacts, calendar, health, motion, background location.
5. Children
The app is not directed to children under 13. It discusses mortality, intimate relationships, loss, and self-knowledge — content intended for adults. We do not knowingly collect data from children; the app holds data only on the device it's installed on. Icebreaker's adults-only table opens only when both birth dates entered show both players are adults.
For users 13–17: parental guidance is recommended for the timeline and grief-related content.
6. Your rights
Because your data is on your device, you exercise your rights directly in the app:
- Access and correct: everything you've entered is visible and editable where you entered it.
- Export: Self → Settings → Your data → Export Markdown or Export JSON.
- Delete one item: delete it where it lives.
- Delete everything: Self → Settings → Delete all data → Delete everything. This wipes the profile, journal, marvels and their photos, rings and their photos, margin notes, reading progress — everything. It cannot be undone.
- Uninstall: removing the app deletes all its data.
If you are in the EU, UK, California, or another jurisdiction granting specific privacy rights, you can exercise all of them through the in-app actions above. We hold no copies.
7. Data retention
Your data stays on your device until you delete it or uninstall the app. We do not have a copy. The media service retains nothing (§3e).
8. AI and machine learning
There are no AI or machine-learning features in the app. Insights and the framework's replies are computed on your phone from what you've entered, using fixed rules and pre-written text. If we ever add an AI feature, it will be opt-in, disclosed at the moment of use, and announced here first. A conversational chatbot is not on the roadmap.
9. Third-party services the app uses
| Service | Purpose | Data received |
|---|---|---|
| Apple App Store / Google Play | Distribution, purchases, opt-in crash reports | Purchase records under their terms; crash traces if you opt in |
| Your phone's share sheet | Routing what you choose to share | Whatever you choose to share, to whoever you select |
everQUIN media service (media.everquin.com, Cloudflare) | Streaming songs not bundled in the app | Song requested, random install identifier, platform, proof of a paid genre; IP address seen by Cloudflare. Nothing stored. |
Open-Meteo (api.open-meteo.com) | Weather — only if you opt in | Approximate latitude / longitude |
BigDataCloud (api.bigdatacloud.net) | Place name for the weather — only if you opt in | Approximate latitude / longitude |
That's the complete list. Fonts are bundled inside the app; nothing is fetched for typography. We do not use Google Analytics, Firebase, Mixpanel, Segment, Amplitude, Sentry, Bugsnag, AppsFlyer, Branch, Adjust, or any other SDK that collects behaviour data.
10. International users
There is no server-side processing of your entries, so there is no cross-border transfer of them to disclose. Your data lives where your phone is.
11. Changes to this policy
If we change this policy, we will:
1. Update the "Last updated" date at the top. 2. Show an in-app notice the next time you open the app. 3. For material changes (for example, any new off-device data flow), give at least 14 days' notice before the change takes effect.
The current version is published at https://everquin.com/privacy.html. Prior versions are available on request.
12. Contact
For privacy questions, deletion help, or to report a concern: [email protected] (also reachable in the app: Self → Settings → Send feedback). We respond to legitimate privacy inquiries within 30 days.
13. Crisis disclosure
The everQUIN framework discusses topics that can surface difficult feelings — mortality, grief, isolation, relationship loss, identity. The app is not a substitute for professional mental-health care.
If you are in crisis or considering harming yourself, contact a qualified provider or a crisis service:
- United States: 988 Suicide and Crisis Lifeline (call or text 988)
- International: findahelpline.com for country-specific resources
- Emergency: 911 (US) or your local emergency number
The app has no crisis detection and cannot summon help. If you write something painful in your journal, only you will see it.
14. The web version
A browser version of everQUIN at app.everquin.com runs from the same source and keeps its data in your browser's local storage (IndexedDB), which is not encrypted the way the phone sandbox is. On the web there are no notifications, no weather, no photos, no purchases, and image share cards are replaced by text. Free songs stream from the same media service (§3e). To remove web data, use Delete all data or clear the site's data in your browser. Everything else in this policy applies equally.
15. App store privacy summaries
Apple App Privacy:
- Data Not Linked to You: Coarse location — only when you opt in to Weather context; sent to the weather and place-name services, not stored by us.
- Data Linked to You: none.
- Data Used to Track You: none.
Google Play Data safety:
- Data collected: Approximate location — optional, only with Weather context on; not stored on our servers.
- Data shared: Open-Meteo and BigDataCloud receive approximate coordinates when Weather context is on.
- Encrypted in transit: yes — HTTPS for every request.
- Deletion: yes — in the app.
If a future feature changes this, the labels will be updated before the feature ships.
16. Beta invite requests (website)
This section covers the website, not the app. If you request a beta invite at everquin.com/beta, we collect what you type into that form: your name, the email for your invite, your platform, the Google account email (Android testers only — Google Play admits only the accounts we add), and, if you choose, your phone model, why you're interested, and how you heard about everQUIN.
- Why: only to run the beta — to choose invite waves and to add you as a tester in Apple TestFlight or Google Play testing, which then email you under Apple's or Google's terms.
- Where: in a database on Cloudflare (our host), readable only by the everQUIN team.
- Abuse control: we keep a salted, one-way hash of your IP address to limit repeated submissions. We never store the IP itself. The page uses no cookies, analytics, or trackers.
- How long: until the beta ends; then we delete the list. Ask us anytime at [email protected] and we'll delete your request sooner.
- Never sold, shared for marketing, or used for anything but the beta.
Honest about uncertainty
This policy is written to match what the app actually does. If you spot something that contradicts how the app works, tell us at the address above — we will correct the policy or the app, whichever is wrong.