Privacy Policy

Overview

Evarith is a set of everyday apps — notes, tasks, journal, habits, calendar, mail, and more — in one place. This policy covers every app under evarith.com. It does not cover third-party sites you reach by following a link out of Evarith, such as Notion or Google.

Who operates Evarith

Evarith is operated by an individual developer, not a registered company, and is governed by the laws of India. For data protection purposes, that individual is the controller of the personal data described below. See Contact for how to reach them.

Information we collect

Account information

When you create an account with email and password, we store your name, username, email address, a securely hashed password, and the timezone your browser reports. If you sign in with Google or Apple instead, we receive your name, email address, and profile picture from that provider under the permissions you approve there.

Content you create

Evarith stores what you put into it: notes, journal entries, tasks, habits, calendar events, kanban boards, captures, mail you compose, market watchlists, videos you upload to Stream, and messages you send in Rooms. This content is yours; we store it so the app can show it back to you.

Guest Mode

Notes created in Guest Mode stay in your browser’s local storage and are never sent to the Evarith server. We have no copy of them and cannot recover them if your browser data is cleared.

Optional integrations

If you connect Notion, your integration token is encrypted before storage and used only to create pages you explicitly send. See the Help Center for detail on how that token is handled.

Share-network

Share-network helps your devices find each other for direct, peer-to-peer transfer. To do that, it uses each device’s public network address, and may relay traffic through Cloudflare’s TURN service when a direct connection is not possible.

Technical and usage data

Our servers log the IP address of requests, used to apply rate limits and to keep the service secure. We use Vercel Analytics for aggregate usage measurement (such as which pages are visited); it is configured to avoid cookies and does not track you individually across sites.

How we use it

• To create and secure your account, and to keep you signed in.
• To store and display the content you create, across your own devices.
• To run features you choose to use, such as sending a note to Notion or asking the AI assistant.
• To keep the service reliable and secure, including rate limiting and abuse prevention.
• To understand aggregate usage and improve the product.

We do not sell your personal information, and we do not use your content to serve you advertising.

Who we share it with

We share information only with the service providers that make Evarith work, each acting on our instructions to provide their specific function:

• Supabase / Postgres — hosts the primary database that stores your account and content.
• Google, Apple — if you choose to sign in with them.
• Notion — only if you connect it, and only for pages you choose to send.
• OpenRouter and the AI model providers it routes to — power the Ask assistant, Capture, and Journal reflection features. See AI features.
• Convex — hosts Rooms’ live messages.
• Cloudflare — provides R2 storage for Stream videos and, where needed, TURN relay for Share-network.
• Vercel — hosts the application and provides aggregate analytics.
• Weather and map data sources (Open-Meteo, Nominatim, and similar) — receive the place or coordinates you search for in Weather and Maps, not your identity.

We disclose information if the law requires it, or to protect the rights, safety, or property of Evarith or its users. We do not otherwise sell or rent your information to third parties.

AI features

Ask, Capture, and Journal’s reflection and transcription features send the text you submit (and, for transcription, audio converted to text by your browser) to an AI model through OpenRouter to generate a response. That content is processed to answer your request and is not used by Evarith to train any model. AI responses can be wrong; do not rely on them for medical, legal, or financial decisions.

How long we keep it

We keep your account and content for as long as your account is open. If you delete a piece of content, it is removed from the database; if you delete your account, we remove your account record and personal content within a reasonable time, except where we must keep something to meet a legal obligation, resolve a dispute, or enforce our agreements.

Security

Passwords are stored hashed, never in plain text. Integration tokens (such as Notion’s) are encrypted at rest with a key held only by the server, and are never sent back to your browser. Connections to Evarith use HTTPS. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

Your rights

Whatever your location, you can ask us to give you a copy of your personal data, correct it, or delete it, by writing to the address in Contact. Some rights depend on where you live:

European Economic Area and United Kingdom (GDPR/UK GDPR)

You have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. We process your account data to perform our contract with you (providing the service) and, for optional features, based on your consent, which you can withdraw at any time. You may lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

You have the right to know what personal information we collect and why, to request deletion, and to correct inaccurate information. We do not sell or share personal information for cross-context behavioral advertising, so there is no opt-out link to provide. We will not discriminate against you for exercising these rights.

Brazil (LGPD)

You have the right to confirm whether we process your data, to access it, to correct incomplete or inaccurate data, to request anonymization, blocking, or deletion of unnecessary data, and to withdraw consent at any time.

India (DPDP Act, 2023)

Where we rely on your consent to process personal data, that consent is specific to the purpose stated at the time we ask for it, and you may withdraw it at any time going forward without affecting anything already done. You have the right to access a summary of the personal data we hold about you and the processing we carry out, to correction and erasure of that data, and to nominate another person to exercise these rights on your behalf if you die or become unable to act. To raise a grievance, write to the contact below; we will respond within the time the Act requires.

International transfers

Evarith and the service providers listed above operate internationally, so your information may be processed in a country other than the one you live in, including countries whose data protection laws differ from your own. Where a provider processes data on our behalf outside your country, we rely on that provider’s own safeguards for cross-border transfer.

Children’s privacy

Evarith is not directed at children and is not designed for anyone under 18. We do not knowingly collect personal data from a child. If you believe a child has given us personal data, contact us and we will delete it.

Cookies

Evarith sets one essential cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. Vercel Analytics is configured to measure aggregate usage without setting a tracking cookie.

Changes to this policy

If we make a material change to this policy, we will update the effective date above and, where the change is significant, tell you inside the app before it takes effect.

Contact

For any question about this policy, or to exercise a right described above, write to [add contact email].