Your data is yours.
This policy explains what we collect, why we collect it, and the choices you have. We keep it as plain-spoken as we can.
The short version.
A one-minute read that covers the essentials. The rest of this page is the full version for the details.
What you should know in one minute
Everwove is a private place for your relationships. We collect only the information we need to run the service. Your notes, your people, and your moments are visible only to you — every record is protected at the database level so no other user can ever see them. We don't sell your data. We don't use it to train anyone's AI models. You can export everything you've put into Everwove at any time, and you can delete your account whenever you choose.
This page is the full version. If you have a question that isn't answered here, write to support@everwove.com and a human will reply.
Note: this is a working draft. Before public launch we'll have it reviewed by counsel and updated as needed.
What we collect.
The pieces of data Everwove needs to work, and nothing more.
Account information
When you sign up we collect your email address and a password (stored only as a salted hash — we never see it in plain text). If you use a third-party sign-in option, we receive your email address and a unique identifier from that provider.
Content you create in Everwove
Everything you add to Everwove — the people in your circle, the notes and moments you log, reminders, important dates, tags, and settings — is stored in our database and associated with your account. You're the only user who can see it.
Usage and device information
When you use Everwove, our servers automatically receive basic information such as IP address, browser type, device type, timestamps, and the pages or endpoints you accessed. We use this to operate the service, debug issues, and protect against abuse.
Cookies
We use a small number of strictly necessary cookies to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies.
How we use it.
What we do with your data — and what we won't.
To run the service
We use your data to show you your people and moments, send reminders you've asked for, and deliver the Week Ahead email if you've enabled it.
To communicate with you
We may email you about important account or service changes, security notices, or product updates. You can turn off non-essential emails in your account settings at any time.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't use the contents of your notes or people to train AI models — ours or anyone else's.
AI features and third-party services.
How the AI features work, and the small set of providers that help us run Everwove.
How AI features work
Features like Meeting Prep, Ask AI, and Quick Log send the relevant context (for example, the person you're asking about and related recent moments) to Anthropic's Claude API for that single request. We do not send your entire data set, and Anthropic does not retain or train on content submitted through their API.
Who else helps us run Everwove
We rely on a small set of trusted service providers to operate Everwove. They process data only on our behalf and under contract:
- Supabase — database and authentication hosting.
- Vercel — hosting our marketing site.
- Render — hosting our backend API.
- Anthropic — Claude API for the AI features described above.
- Resend — transactional email (password resets, Week Ahead digest, support notifications).
If we add or change a subprocessor, we'll update this list. If you'd like the current list at any point, write to support@everwove.com.
Your choices and rights.
You're in charge of what goes in, what comes out, and when it leaves.
Access and export
You can export your data as JSON from your account settings at any time. You can edit or delete any individual person, moment, or reminder from within the app.
Deletion
You can delete your account at any time. When you do, we remove your content from our production systems. Residual copies may persist briefly in encrypted backups before being rotated out on our normal backup cycle.
Regional rights
Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK) or CCPA (California) — for example, the right to correct, restrict, or object to certain processing of your data. To exercise any of these rights, email support@everwove.com and we'll respond promptly.
Security and retention.
How we protect your data, and how long we keep it.
How we protect your data
Data is transmitted over TLS and stored in a Postgres database with row-level security, meaning every query is scoped to the signed-in user. Passwords are hashed. Access to production systems is limited to the team members who need it.
No system is perfectly secure, and we can't promise what no one can. But we take this seriously and will tell you promptly if anything changes that you need to know about.
How long we keep things
We keep your content as long as your account is active. If you delete content or your account, we remove it from production within a reasonable period. Operational logs (IP addresses, request logs) are kept for a short rolling window for debugging and security, then deleted.
Children, changes, and contacting us.
The loose ends — plus how to reach a human when you need one.
Children
Everwove is not intended for children under 13 (or under 16 in regions where that's the applicable age). We don't knowingly collect data from children. If you believe a child has signed up, please contact us and we'll remove the account.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you by email or through the app before they take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.
Contact
Questions, requests, or feedback about privacy? Write to support@everwove.com.