What we collect.
What we don't.

What we collect

EvolveU collects the minimum data required to make the app work. Specifically:

• Account identifiers. If you sign in with Apple, we receive a stable user ID and, if you choose to share it, your email address. If you stay anonymous, we generate a random identifier that lives only on Supabase, our backend.
• Your practice content. The text you write during practice sessions, the methodologies you choose, the dimensions you cultivate, and the timestamps of your sessions. This is what makes the radar chart, the Recent list, and your Atlas progress real.
• Subscription receipts. When you start a free trial or purchase a subscription, Apple sends us a receipt so we can verify you have access. We never see your card details.
• Crash logs. If the app crashes, we receive an anonymous stack trace from Apple. No identifying information attached.

What we don't collect

Equally important — what we have actively chosen not to ask for:

• Your location. EvolveU does not request location permission and does not record where you use the app.
• Your contacts, photos, microphone, or camera. None of these permissions are requested.
• Advertising identifiers. We do not use Apple's IDFA. We do not run ads. We do not share data with advertisers.
• Behavioral analytics for retention. We do not track screen views, taps, or time-in-app for the purpose of figuring out how to keep you using EvolveU longer.
• Third-party SDKs that profile users. No Facebook SDK, no AppsFlyer, no Mixpanel, no Amplitude. The app is plain Flutter and Supabase.

Where your data is stored

Your account and practice content live in Supabase, a managed PostgreSQL service. The database is hosted in the United States and encrypted at rest. Transit is encrypted via TLS.

Supabase staff have administrative access to the database for the purposes of maintaining the service. They do not read your content, and we do not share or sell access to anyone else.

Third parties we use, and why

EvolveU integrates with a small number of third-party services, each for a specific reason:

• Apple handles Sign in with Apple, In-App Purchases, and crash reporting. Their privacy policy applies to those interactions.
• Anthropic provides the AI that generates your end-of-practice reflection. When you complete a practice, your inputs for that session are sent to Anthropic's Claude API. Per Anthropic's API policy, this data is not used to train models and is retained briefly for abuse monitoring only.
• Supabase hosts the database and authentication described above.

We do not use marketing, analytics, or advertising third parties.

Your rights

You can do all of the following from inside the app, at any time:

• Delete your account. Settings → Delete Account. Your auth record, profile, entitlement, and every practice session are deleted from the database within seconds. We do not keep "anonymized" copies for analytics.
• Sign out. Settings → Sign Out. Your session ends; your data remains in case you return.
• Cancel your subscription. Settings → Manage Subscription opens Apple's subscription manager. You can cancel any time before the trial ends to avoid being charged.
• Export your data. Send us a request from the address below and we'll send your raw practice content as JSON within seven days.

Children

EvolveU is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, please contact us and we will delete the account and all associated data.

Changes to this policy

If we update this policy materially, we will note the change inside the app and update the "Last updated" date at the top of this page. We will not remove protections retroactively without explicit consent.

Contact

Questions, data requests, or concerns: hello@evolveu.app