Privacy policy
Privacy, plainly.
Everkept is a private place for the things you want to remember, and it’s built to stay that way. The app has no account, no server of ours and no ads, and what you add never leaves your iPhone and your own iCloud. This page explains what the app keeps, where it keeps it, and what it asks your devices to do.
In brief
Yours alone
Your shelves live on your iPhone and in your own iCloud. We never receive a copy.
Words only you can read
Your words are stored in encrypted fields that only your devices can read.
Worked out on your iPhone
Search answers are worked out on your iPhone with no AI model, and voice notes are transcribed there.
Only if you allow it
The camera, the microphone, Apple Music and Journaling Suggestions are all optional.
No ads, never sold
The app has no account and no ads, and your data is never sold. Anything it counts is anonymous and never what you add.
Who we are
Everkept (“we”, “us”) is an independent app for iPhone. You can reach us at [email protected].
What Everkept keeps, and where
Everything you add to Everkept is stored in two places: on your iPhone, and in your own iCloud account, in Everkept’s container in your private CloudKit database. Apple stores it for you under your Apple Account, and it counts toward your iCloud storage. We don’t run servers for Everkept, and we never receive a copy of your shelves.
What you keep in Everkept is made of:
- Shelves: the name you give each one, its look, where it sits among your shelves, and the feelings you stand on it, with when you placed them.
- Pieces: words, photos, short videos, voice notes and their transcripts, ink drawings, captions, a place name if you write one, songs and tickets (a song, a workout, an event) and letters to open later.
If you aren’t signed in to iCloud, or iCloud isn’t available, your shelves stay on that iPhone until they can sync.
Encryption
Your words are stored in CloudKit’s encrypted fields. That covers shelf names, the feelings on them, the text you write, voice-note transcripts, captions, place names, songs and tickets, and letters. These fields are encrypted before they leave your iPhone, and only your devices, signed in to your Apple Account, can read them. We can’t, and Apple can’t either.
A few small details are stored in your private database without that field encryption: the dates things were added and happened, when a feeling was placed, a shelf’s look and order, the length and loudness outline of a voice note, how a photo stands and where pieces sit on a shelf, and the date a sealed letter is due to open.
Photos, videos, voice recordings and drawings sync as encrypted iCloud assets (files) in the same private database. Apple encrypts them in transit and at rest, with iCloud’s standard protection. Apple’s iCloud data security overview explains how that works.
When you add a photo, Everkept saves a copy of up to 2048 pixels on its longest side and a small thumbnail, not the original file. A video is kept as a clip of up to half a minute.
What stays on your iPhone
- Search. Answers are worked out on your iPhone from what you added: shelf names, feelings and when you placed them, words, transcripts, captions, places, songs and dates. No AI model writes them, and nothing is sent anywhere to answer them.
- Speech. Voice notes, and questions you ask Search out loud, are transcribed on your iPhone with Apple’s speech recognition. The first time, your iPhone may download Apple’s speech model for your language. A question you ask out loud is transcribed and then deleted; it isn’t kept as a recording.
- Widgets. A small snapshot (a few pieces from this date in earlier years, each with its caption and a small picture) is saved in Everkept’s own container on your iPhone so widgets can show it. Sealed letters are never included. Widget content is marked as private, so your iPhone can hide it while it’s locked.
- Settings. Your choices, such as the lock, the appearance and how shelves show, are stored on each iPhone and aren’t synced.
Photos
You choose photos and videos in the system’s photo picker, and Everkept only receives the ones you pick. It doesn’t ask to read your Photos library.
Camera and microphone
Everkept uses the camera only while you take a photo or a short video to add, and the microphone only while you record a voice note or ask Search a question out loud. What you record is saved on the shelf you add it to.
Songs (Apple Music)
When you add a song, Everkept looks it up in Apple Music to show its cover and play a preview. What you type in the song search goes to Apple Music for this; nothing else from your shelves does. Apple asks for your permission the first time.
Journaling Suggestions
On iPhone, Quick shelf opens Apple’s Journaling Suggestions picker. Apple shows the suggestions in its own sheet, and Everkept can’t see them. Only what you choose, such as the photos from a walk, a song, a workout or a place, is passed to Everkept, which puts it on a shelf.
Face ID lock
Everkept can lock itself whenever you leave and open again with Face ID, Touch ID or your passcode. Your iPhone handles this; Everkept never sees your face or fingerprint data, only whether you were recognised.
Usage counts
The app counts anonymous usage to learn what works and what to fix: which shelf looks are used and changed, how shelves are made, which hints and tabs are used, and, once the shop opens, which styles are viewed or bought. PostHog (posthog.com) does the counting for us as our processor, on servers in the United States. To tell one phone’s counts from another’s, the app keeps a random ID on your phone. It is made on the phone, isn’t tied to you, and is deleted when you turn counting off. The counts carry no IP address or location, and never anything you add.
- Never what you add. The counts never include your photos, words, voice notes, feelings, places, shelf names, contacts or anything else you add to Everkept.
- Not linked to you. The random ID isn’t tied to your name, your email, your Apple Account or your shelves, and no profile of you is built from it. Your phone’s name, time zone, carrier and network aren’t sent; the iPhone model, the iOS and Everkept versions and the language are.
- Your choice. Counting is on by default. Turn it off any time in Settings, under Usage counts, with Share anonymous usage. Off, the app stops counting at once, drops anything not yet sent and deletes the random ID; turned on again, it starts with a new one.
- Never for ads. The counts are never used for advertising and never sold.
What we don’t do
- No account or sign-in, of ours or anyone else’s.
- No ads, and no tracking you across other companies’ apps and websites.
- We never sell or share your data, and what you add never reaches us.
If you’ve chosen to share analytics with app developers in your iPhone’s privacy settings, Apple may send us anonymous crash reports. You control that in Settings, under Privacy & Security, then Analytics & Improvements.
Apple’s services
Everkept relies on Apple for iCloud storage and sync, Apple Music for songs, Journaling Suggestions, and speech recognition on your iPhone. When your iPhone uses these services, Apple’s privacy policy applies.
Deleting your data
- One piece: remove it from its shelf in the app.
- A shelf: delete the shelf in the app. It is deleted from your iPhone and from iCloud.
- Everything on an iPhone: delete the app from that iPhone.
- Everything in iCloud: on iPhone, open Settings, tap your name, then iCloud, then Manage Storage (sometimes called Storage), choose Everkept and delete its data. The wording varies a little between system versions.
We don’t hold a copy, so there’s nothing for us to delete on our side.
Children
Everkept isn’t directed at children under 13, or the equivalent minimum age where you live. We don’t knowingly collect personal information from anyone, including children, and nothing anyone adds ever reaches us. A parent or guardian can remove a child’s shelves as described above.
This website
Everything above is about the app. This section is only about everkept.day, the website you’re reading now.
everkept.day is a static site, and its fonts are served from here. If you switch between light and dark, that choice is remembered in your browser’s local storage and never sent anywhere. The site is hosted on Cloudflare, which may keep standard server logs, such as IP addresses, for security.
Counting visits
The website uses PostHog to count visits and to see which buttons are used, such as the beta buttons. Nothing you add in the app ever reaches it. What the app may count is under Usage counts.
- No cookies or local storage. PostHog keeps nothing in your browser, so each visit is counted on its own and we can’t tell if you’ve been here before.
- No IP addresses. PostHog is set to discard them, so they aren’t stored.
- What it records: the page you open, the site that sent you here, your browser and screen size, and which beta button you tap. It never records what you type.
- Do Not Track and Global Privacy Control are honoured. If your browser sends either one, the website doesn’t load PostHog at all.
- Why: only to understand how many people visit and whether the page is clear. It’s never sold and never used for ads.
- Who: PostHog (posthog.com) handles this for us as our processor, on servers in the United States. Their privacy policy explains how they look after it.
Changes to this policy
If this policy changes, we’ll post the new version here with a new effective date.
Questions?
Write to [email protected].