Privacy Policy
Last updated 1 October 2026 · applies to the everbud app (Android and iOS) and everbud.app
The short version
- We never sell your data. There are no ads in the app, and everbud.app has no tracking cookies or ad pixels.
- What you log is backed up to your account only with your explicit consent, so it's safe and on all your devices. It isn't shown to anyone you haven't chosen.
- Your prayer, Qur'an, fasting and cycle records are never shown to family or friends.
- Your family sees only what you switch on for them, person by person, and you can switch it off any time.
- Photos and questions go to an AI service only when you use an AI feature, and only after you agree.
- Ad measurement is off unless you turn it on yourself.
- Download your data or delete your account in Settings. Deleting the account deletes your data with it.
- You must be at least 13 to use everbud (16 in the EU, EEA and UK).
1. Who we are
everbud is a health and faith app for families, made in Dhaka. It is operated by YourPace Mentor (Trade License No. TRAD/DNCC/031143/2024, Dhaka North City Corporation, Uttara, Dhaka-1230, Bangladesh) and its affiliate YourPace Mentor LLC (30 N Gould St, Ste R, Sheridan, WY 82801, USA). Questions about privacy: privacy@everbud.app.
2. What we collect
Your account
When you sign in with Google (or Apple on iPhone) we receive your name, email address and profile photo. You can change the name and photo shown in everbud. We also keep your app language, the country your phone is set to (so a family alert shows the right emergency number), and the last time you opened the app, which is used only for the "hasn't opened everbud" family alert, and only if you turn that on for someone.
Your age
Before you sign in, you confirm you're old enough (section 11) in the same box where you agree to the Terms. We keep when you confirmed it. If you add your age in your health goals, we keep that too.
What you log
everbud keeps what you log on your phone and, with your consent (section 3), backs it up to your account, so it survives a new phone and works on all your devices. This covers whatever you choose to log: water, meals, sleep, weight, workouts, journal entries, medicines and the doses you mark, supplements, prescriptions, blood pressure, lab results, prayers, dhikr, your Qur'an reading and lessons, fasting and taraweeh, your period dates and symptoms, and tasks.
If you look after someone who has no phone of their own, such as a parent, everbud keeps their first name, the medicines you add for them and the doses you mark as given, in the same way. Only you see them; they are never part of what your own family can see, and they never trigger alerts to anyone.
Photos and voice
- Prescriptions and lab reports: the photo is sent to an AI service to read it (section 5). We keep what you confirm (medicine names, results and the lab's printed ranges), not the photo.
- Meal and product photos: sent to an AI service to estimate what's in them.
- Journal and progress photos: stay on your phone.
- Profile photo, cover and group photos: stored with your account so the people you connect with can see them. Anyone who has an image's direct link can open it.
- Voice: a recording you make is sent for transcription and not kept.
Health Connect and Apple Health
If you connect them, everbud reads your steps and sleep, read-only, to show them in the app. We never use this data for advertising or share it for anyone else's purposes.
Location
everbud uses your approximate location (or the city you pick) to calculate prayer times and the qibla direction on your phone. Your location is stored only on your phone and is not sent to us. Your phone's own map service turns it into a city name.
Device and technical data
- A notification token, so reminders and family alerts reach your phone.
- A one-way scrambled (hashed) form of your device's ID, so each phone gets one free trial. It can't be turned back into the ID.
- Your phone's make, on the phone only, to show the right battery settings.
Purchases
- In the app (Google Play or the App Store): Google or Apple processes the payment. We receive which plan you bought and its renewal status through RevenueCat, never your card details.
- On everbud.app (bKash, Nagad, Rocket, Bangladeshi cards): SSLCommerz processes the payment. We send SSLCommerz your name, email, the plan and the amount, and it tells us whether the payment went through. We never see your card or wallet details.
Reports
If you report a person, message or group, we keep the report (who reported, what was reported and why) so we can review it, and it is emailed to the person who reviews reports.
Help and feedback
When you report a problem, suggest an idea or answer the one-week check-in, we keep what you write, the topic you picked, how you want us to reply, and our replies, so we can help you and fix what's broken. A short alert with the topic and your phone model is emailed to the person who answers. Two things are optional:
- A screenshot, if you add one. It can show what's on your screen, so check it first. Only the person answering can see it, and it's deleted after 90 days.
- Technical details (on unless you switch them off; you can see exactly what's sent): app version, Android version, phone make and model, app language, time zone, your plan, whether notifications, exact alarms, battery and full-screen permissions are on, and how many reminders are scheduled. Never your health records, prayers, family names or location.
WhatsApp helper
If you message everbud help on WhatsApp, Meta (WhatsApp) processes that chat under its own terms. After you link your number with a one-time code from the app, the helper can read only your plan and renewal date, your last purchase's store order reference, your AI allowance, your own support tickets, and technical phone settings from your last app open (app version, notification, alarm and battery settings, reminder count). It never sees your medicines, readings, labs, prayers, Qur'an, fasting, cycle, journal, family or location, and it can't change your plan, give refunds or delete anything. Answers are written by an AI service that does not store or train on your messages. We keep the chat for 90 days, and it is included in Download my data and removed with Delete account. Unlink any time in Help & feedback.
When you tap “Did this solve it?” on a help article, we count the answer without linking it to you. If you choose to chat on WhatsApp, WhatsApp (Meta) handles that conversation under its own terms; please don't send medicine names, reports or prescription photos there.
On everbud.app
The website has no ad pixels or tracking cookies, and its fonts and code are served from everbud.app itself. It keeps anonymous daily counts of which “What do you need most?” choice people tap, which demos they finish and how often the Google Play button is tapped. Only the choice and the date are stored, never your IP address or anything that identifies you. Your browser remembers your language and your choice, so the page opens on it next time. When you tap the Google Play button, the link carries a short number for your choice, not the choice itself, so the app can start setup on it after you install; Google Play sees that number. On the pricing page, signing in keeps a sign-in session in your browser so you can pay. Like any website, our host (Vercel) sees your IP address and browser details when you visit.
3. Your consent for health and faith records
What you log about your health (medicines, readings, lab results, your cycle and the rest) and your religious practice (prayers, Qur'an, fasting, dhikr) is sensitive. Laws such as the EU and UK GDPR call it "special category" data (Article 9), and we treat it that way for everyone.
- We keep these records in your account (for backup and sync) only after you tick the consent box in the app. We record when you gave it.
- We use them only to run everbud for you: never for advertising, never sold, and never shown to anyone you haven't chosen.
- To withdraw your consent, delete your account in Settings › Delete account (or through everbud.app/delete). This deletes the records backed up to your account. You can also delete single entries in the app at any time. Withdrawing doesn't affect what we did with your consent before.
If you live in Washington State or another US state with a consumer health data law, our Consumer Health Data Privacy Policy explains the same things in the form those laws ask for.
4. What family and friends can see
Family care
Nothing is shared by default. For each family member you choose separately whether they can see your medicines and doses, blood pressure readings, lab reports, and whether they're told if you haven't opened everbud for 2 days. They may get an alert if a dose isn't marked or a reading is very high. You can turn any of this off at any time in the app.
Never shared with anyone: your prayer, Qur'an, fasting and cycle records, your journal, and your location.
Together features
If you add friends or join groups, competitions, Together Dhikr or a family khatam, the people in them see your display name and photo and what that feature is about: for example your step total in a step competition, or which para you've taken and whether it's done in a family khatam. Worship is never ranked.
Doctor pack
A doctor pack is a PDF you create and send yourself. On Plus you can also make a private link to it; the link expires after 7 days, and turning it off deletes the file.
5. AI features
AI features run only after you agree to them in the app, and you can turn them off in Settings; everything else keeps working. Requests go through our server, which does not send your email or account ID to the AI service. Sprout's chat uses your first name so it can talk to you.
| Feature | What is sent | Processed by |
|---|---|---|
| Meal, product and equipment photos | The photo | OpenRouter, which routes each request to a model provider: Google (Gemini), OpenAI, Alibaba Cloud (Qwen) or Zhipu AI (GLM) |
| Prescription and lab report scans | The photo | |
| Sprout chat and weekly reflection | Your question and first name, plus a short summary of your day and week: water, meals, weight, sleep, workouts, medicines and journal moods. You choose which of these Sprout sees in the app. Never your prayers, Qur'an, fasting, cycle or lab results. A message describing an urgent symptom is not sent to the AI at all; the app shows emergency help instead. | |
| Recipe ideas | The ingredients you enter | |
| Workout plans | Your goal, experience, training days, equipment, any limits or injuries you mention, and your weight, goal weight and height if you've logged them | |
| "What is this?" for a test or medicine | The test or medicine name | |
| Task helper | The goal or task you type and the names of your lists | |
| Voice input | Your recording | Groq (speech to text) |
We tell OpenRouter to use only model providers whose policies say they don't store or train on request data (OpenRouter's "deny data collection" setting). The providers process the content to return a result, under their own terms. AI can be wrong and is not medical advice: check anything about your health with your doctor.
6. Who processes your data
We share data only with the services that run everbud, and only what each one needs. Services your phone contacts directly (marked "from your phone") see your IP address, as any website you visit does.
| Service | What for, and what it receives |
|---|---|
| Supabase | Our backend: sign-in, database, file storage and server functions. Holds your account and everything backed up to it (servers in Singapore). |
| Vercel | Hosts everbud.app. Sees visitors' IP addresses and browser details. |
| Google sign-in (sends us your name, email and photo). Health Connect (on your phone). Google Play purchases. Firebase Cloud Messaging, which delivers notifications to Android phones: your notification token and the notification's text. | |
| Apple | Sign in with Apple, Apple Health (on your phone), App Store purchases, and Apple's push service, which delivers notifications to iPhones: your notification token and the notification's text. |
| RevenueCat | Keeps track of Google Play and App Store subscriptions: your everbud account ID and the store's purchase records, not your name or email. Deleting your account deletes your RevenueCat record too. |
| SSLCommerz | Payments on everbud.app: your name, email, account ID, the plan and the amount. You enter card or wallet details on SSLCommerz's page, not ours. |
| OpenRouter and model providers | AI features (section 5), with data collection denied. |
| Groq | Speech to text: your recording, which we don't keep. |
| Expo | Passes our notifications on to Google and Apple: your notification token and the notification's text, which for a family alert can name the family member and what happened. Your phone also checks Expo's servers for app updates (your IP address and app version). |
| Resend | Sends our emails: your email address and the email's content, such as the welcome email, the weekly summary (meals, workouts, water, sleep and active days; never prayers, Qur'an, fasting or cycle; you can turn it off), the reminder before a free trial ends, replies to your support requests, payment receipts and plan notices. Reports and feedback alerts reach the person who answers them this way too. |
| Meta | Only if you turn on Help measure our ads in Settings (off by default; on iPhone, Apple's tracking permission is asked first). When you then buy a plan, our server sends Meta a one-way scrambled (hashed) email and the amount, to measure whether our ads worked. Never any health data. Turn it off and nothing more is sent. |
| Quran Foundation | Qur'an text, translations, tafsir and word-by-word meanings: our server fetches them, so Quran Foundation gets the words you search for but nothing that identifies you. Recitation audio plays from Quran Foundation's audio servers (from your phone). |
| QuranEnc and HadeethEnc | Translator's notes, the daily ayah, hadith and duas (from your phone). |
| islamic.network | Recitation audio for the Qur'anic duas (from your phone). Prayer times and the Hijri date are worked out on your phone and our server, not by an outside service. |
| jsDelivr | Exercise pictures and instructions from the open Free Exercise DB (from your phone). |
| Pexels | Recipe photos (from your phone). When a recipe has no photo, our server searches Pexels by the recipe's name, with nothing about you. |
| Open Food Facts | Barcode lookups: only the barcode is sent (from your phone). |
We may disclose information if the law requires it, or to protect our users and the service.
7. How we use it
- To run the features you use: reminders, your records, trends, the Qur'an reader, family care and the rest.
- To back up and sync your data across your devices, with your consent.
- To send the notifications and emails described above. Emails you don't strictly need have a one-click unsubscribe link.
- To keep everbud safe and fair: one free trial per person and phone, limits on AI use (we record each AI request's model and cost, never its content), reviewing reports, and preventing abuse.
- To answer your support requests and improve the app from your feedback.
- To measure whether our ads work, only if you turn that on (section 6, Meta).
We don't use your health or faith data for advertising, we don't build advertising profiles, and we don't make automated decisions with legal or similar effects on you.
8. Keeping and deleting your data
- Your account and what's backed up to it: kept until you delete it or delete your account.
- Deleting your account (Settings › Delete account) permanently deletes your account, everything backed up to it, your stored files and doctor packs, every family share, and your RevenueCat record. It is removed from our live systems straight away, and any copies in our hosting provider's routine backups are gone within 30 days. Data on your phone goes when you uninstall the app.
- Kept after deletion, without being linked to you: payment records, for as long as tax and accounting law requires; the scrambled device ID that stops a second free trial on the same phone; and paras you finished in a family khatam (they stay counted for the family, without your name).
- Voice recordings and AI photos: not kept by us once the result comes back.
- Doctor pack links: expire after 7 days.
- Reports: kept while they're reviewed and as a record of what we did.
- Help and feedback: kept while we help you and for 12 months after, then deleted. Screenshots are deleted after 90 days.
- Technical logs (such as IP addresses and request times): our hosting providers keep these for a short time for security and fixing problems, for the periods their own policies set.
If we learn an account belongs to someone under the minimum age, we delete it (section 11).
9. Where your data is stored
Your account and backed-up records are stored with Supabase in Singapore. Some of the services in section 6 are based in, or process data in, other countries, mainly the United States and the EU. Where a provider's terms include standard contractual clauses or similar safeguards for international transfers, we rely on those. We send each provider only what it needs.
10. Your choices and rights
- Get a copy: Settings › Download my data gives you a file of what's on your phone and what's in your account on our servers.
- Delete: Settings › Delete account, or ask at everbud.app/delete if you no longer have the app.
- Withdraw consent: for backed-up health and faith records, by deleting your account (section 3); for AI features, the weekly email, notifications and ad measurement, by turning them off in Settings or using the unsubscribe link in an email.
- Change what each family member sees, or stop sharing, in the app at any time.
- Disconnect Health Connect or Apple Health in your phone's settings.
- Ask us to correct your data, to explain what we hold, or anything else: privacy@everbud.app. We reply within 30 days.
If you are in the EU, EEA or UK: we rely on your explicit consent for health and faith records and for ad measurement (you can withdraw it any time), on our contract with you to run your account and the features you use, on our legitimate interest in keeping everbud safe and preventing abuse, and on legal obligations for payment records. You can also object to processing, ask for your data in a portable form, and complain to your local data protection authority.
11. Age and children
You must be at least 13 to create an everbud account, or at least 16 in the EU, EEA and UK. Before sign-in the app asks you to confirm you're old enough, and anyone under that age must not use it. If we learn that an account belongs to someone under the minimum age, we delete it. If you think a child has an account, tell us at privacy@everbud.app.
A parent can add a child or an elderly relative without a phone as a family member they look after; the parent enters and manages that information, and the child doesn't have an account.
12. Security
Data travels encrypted (HTTPS). Each person's records are protected so that only their own account can read them, and family can read only what was shared with them. AI and payment keys stay on our server, never in the app. No system is perfectly secure, but we keep what we hold to a minimum and protect it.
13. Changes
If we change this policy in a way that matters, we'll let you know in the app or by email before it takes effect. The date at the top shows the latest version.