Privacy Policy

1. Introduction

Welcome to Evermark ("we," "our," or "us"). We built Evermark to help families and friends capture and preserve travel memories. This Privacy Policy explains what information we collect, how we use it, and your rights around it.

By using Evermark, you agree to this policy.

---

2. Information We Collect

Information You Provide

• Account information — your name, email address, and password when you register
• Profile — display name, username, and profile photo
• Content — photos, captions, place names, and notes you attach to evermarks
• Trip information — trip names, dates, locations, and travel type

Information Collected Automatically

• Location data — GPS coordinates when you place an evermark (only collected when you actively use the Mark feature)
• Device information — device type and operating system version, used only for troubleshooting

Information from Third Parties

• Authentication — if you sign in via a third-party provider, we receive basic profile information from that provider

---

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Save and display your evermarks, trips, and memories
• Show your content to crew members you've invited
• Generate AI trip summaries (we send place names and captions — never photos — to Anthropic's API for this feature)
• Send you important account-related emails (security notices, password resets)
• Improve the app and fix bugs

We do not sell your data. We do not use your data for advertising.

---

4. How We Share Your Information

With Crew Members You Invite

Content you mark as public is visible to members of your crew. Content you mark as private is visible only to you.

With Service Providers

We use trusted third-party services to operate the app:

Provider	Purpose	Data Shared
Supabase	Database and file storage	All app data
Anthropic	AI trip summary generation	Place names and captions only
Mapbox	Map display	Your location while using maps
RevenueCat	Subscription management	Purchase and subscription status
Expo / EAS	App delivery and updates	App bundle only, no personal data

All providers are contractually required to protect your data and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of our users.

Business Transfers

If Evermark is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

---

5. Data Storage and Security

Your data is stored on Supabase's infrastructure, hosted on Amazon Web Services (AWS) in the United States.

We protect your data with:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Row-level security (RLS) enforced at the database level — your private content cannot be accessed by other users
• Secure password hashing — we never store your password in plain text

No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@evermarkapp.com.

---

6. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your profile, trips, and evermarks are permanently deleted within 30 days
• Backup copies may persist for up to 90 days before being purged

---

7. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update or correct inaccurate information
• Deletion — request deletion of your account and associated data
• Portability — request your data in a portable format

To exercise any of these rights, email us at privacy@evermarkapp.com.

---

8. Children's Privacy

Evermark is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

If you believe a child under 13 has created an account, please contact us at privacy@evermarkapp.com.

---

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

To submit a request, contact privacy@evermarkapp.com.

---

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to your registered address or by displaying a notice in the app. Your continued use of Evermark after changes take effect constitutes acceptance of the updated policy.

---

11. Contact Us