Legal

Privacy Policy

Last updated 14 September 2026

Even reads health data because that is the product, and it is careful with it because that is the deal. Detailed Apple Health data never leaves your phone. Derived readings sync to your account so the app keeps learning you across devices. Nothing is sold, nothing is shared for advertising, and the app does no tracking of any kind.

This policy covers the Even iPhone app and this website. Even is made by Aster Studio, and questions about anything below go to asterstudio9@gmail.com.

What Even reads from Apple Health

With your permission, granted type by type in Apple's own dialog, Even reads: sleep, heart rate, heart rate variability, resting heart rate, walking heart rate average, heart rate recovery, respiratory rate, blood oxygen, sleeping wrist temperature, VO2 max, steps, active energy, exercise minutes, workouts, time in daylight, cycle tracking where it is recorded, and State of Mind. It also reads the date of birth and biological sex recorded in Health, which are used to place two readings against the right reference.

You can review or withdraw any of these at any time in Health → Sharing → Apps → Even. Even also writes to Health, adding completed sessions as mindful minutes and check-ins as State of Mind, so its work appears in your own record.

What Even does with it

All of it is processed on your iPhone to compute your Even score and the readings behind it. Health data is used only for Even's own health-related function. It is never used for advertising or marketing, never used for data mining, never sold, and never disclosed to a third party for their own purposes.

What never leaves your phone

• Any raw sample from Apple Health, including your heart rate series, sleep stages, workouts and cycle data.
• The words you write in a guided writing session or a second look. Even may send the shape of a piece of writing, such as its bucketed length and the tone of it, so it can learn whether writing helps you. It never sends the text.
• Your location, at any point. Even does not request location access and does not have it, including on the measured walk, which counts your own steps.
• Anything at all, if you never sign in. Without an account there is no backend, and everything stays on the device.

What syncs to your account

Once you sign in with Apple or Google and consent to syncing, this leaves the phone and is stored under your account:

• Your profile: the first name you chose, the email address from your sign-in, an account identifier, the birth year and biological sex read from Health, which provider you used, and the app version.
• Derived readings: daily Even scores and the five parts behind them, check-ins, moods, sessions started and finished, and how a session landed for you.
• How Even chose: which suggestions were shown and which you opened, so the app can tell whether its choices are getting better.
• Model accuracy: how far a score sat from your own reading of the same days, which is the only way a change to the model can be judged rather than merely shipped.
• Purchase state: whether you hold a subscription.

All of it is linked to your account. None of it is used for tracking, and Even's App Store privacy label says the same thing.

Why

Two reasons, both of them the product. Your readings sync so Even keeps learning you on any iPhone you sign in on and survives a lost phone. And the pooled, derived record is what lets the model improve for everybody: whether a suggestion helped, whether a score matched how the day actually felt.

Who else touches it

The Even app uses a small number of processors, and no advertising or analytics network of any kind.

• Apple operates Sign in with Apple, the App Store and all payment processing. Even never sees your payment details.
• Google (Firebase) provides authentication, the database your readings are stored in, and remote configuration of the model's parameters. Access is restricted by rules that let each account read and write only its own documents, and nothing else.
• RevenueCat validates purchases and tells the app whether your subscription is active.

Each acts on our instructions. None of them receives your data to use for their own purposes.

How long it is kept

Your account and its readings are kept while your account exists, because the history is the personalisation: what worked for you last spring is what makes the suggestion in October a good one. Delete the account and it goes.

Deleting everything

In the app, open the You tab and choose Delete my account and data. That removes your account, every reading synced under it, and everything held on the phone. It is immediate and it is not reversible.

Deleting your account does not touch anything in Apple Health. That data is yours, it was always yours, and it stays where it is. If you prefer to write instead of tapping, mail asterstudio9@gmail.com from your sign-in address and we will do it.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, object to or delete the personal data held about you, and to complain to your data protection authority. Where consent is the basis for processing, you may withdraw it at any time, in Health for the reading permissions and by deleting your account for the syncing. Write to asterstudio9@gmail.com and you will get a real answer from a person.

Health data is special category data under UK and EU law. Even processes it on the basis of your explicit consent, given in Apple's permission dialog and again when you sign in, and for no purpose beyond the ones described here.

Even does not sell or share personal information as those terms are defined under California law, and has no advertising or cross-context behavioural profiling to opt out of.

Children

Even is not directed at children and is not intended for anyone under 13, or under the minimum age of digital consent where you live. We do not knowingly collect data from children. If you believe a child has created an account, write to us and it will be removed.

Security

Data in transit is encrypted. Data on the phone sits inside the app's own container, protected by iOS. Data in your account is stored by Firebase with rules that make one account's documents unreadable to any other. No system is perfect, and we will tell affected people promptly if something goes wrong.

This website

This site uses Google Analytics to count visits and see which pages are read. It sets cookies to tell a returning visitor from a new one, and Google receives your IP address and basic browser details to do that, under its own policy. You can block it with Google's opt-out add-on or any content blocker, and the site works the same. Nothing else on the site comes from anybody else. Standard server logs, which include IP addresses, are kept briefly by our host to serve the pages and defend against abuse. The links out to DOIs on the research page and to the App Store go to sites with their own policies.

Changes

If this policy changes, the current version is always here with the date at the top. A change that materially affects what leaves your phone will be announced in the app before it takes effect, not slipped into a page.

Contact

Aster Studio, asterstudio9@gmail.com.