1. Introduction

At PAI Tech LLC ("we", "us", or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We understand that privacy is especially important when dealing with health, safety, and location data. We've designed our Service with privacy at its core—we only collect what's necessary and never engage in always-on tracking.

2. Information We Collect

2.1 Information You Provide

When you create an account and use EverWhen, you provide:

Account Information: Name, email address, phone number, date of birth
Health & Care Plan Data: Medication schedules and adherence records (whether a dose was marked as taken), blood glucose readings you choose to log, optional mood entries and their dates, appointment reminders, custom reminders, and care information you or an authorized helper provide
My People and Invitations: Names and contact information for your trusted people, their relationship to you, whether they receive safety alerts or helper access, invitation status, and the permissions you grant. Someone helping you get started may propose a check-in schedule and trusted-person details for you to review when accepting a setup invitation.
Consent Records: Your sharing and automated-call choices, when you accepted the relevant disclosure, and who recommended a feature where applicable
Payment Information: Subscription, transaction, and payer-attribution records, including when someone pays for another account. Payment details are processed by the applicable app store or payment provider.

2.2 Information Automatically Collected

Device Information: Device type, operating system, unique device identifiers
Usage Data: Check-in timestamps, interaction with notifications, feature usage
Location Data: With your authorization and device permission, EverWhen may capture location while you use the app and attempt a fresh location update after a missed check-in. There is no continuous background-location tracking. See Section 4 for sharing conditions and limitations.
Call Data: Records of calls from Joanne, EverWhen's automated Wellness Agent, and later automated safety calls to trusted people, including call duration and whether the call was answered. Calls are not recorded. Speech is converted to a written transcript in real time using automated (AI) services so we can determine whether you are safe, and we retain that transcript with the incident record.

2.3 Information from Third Parties

We may receive information from:

Authentication providers (e.g., Apple Sign-In, Google Sign-In)
Payment processors for transaction verification
Analytics providers to improve our Service

3. How We Use Your Information

We use the information we collect to:

Provide Our Service: Send check-in notifications and reminders, place calls from Joanne after a missed check-in, and place later automated safety calls to trusted people when configured
Safety Features: Notify your configured contacts during incidents and help them coordinate a response; EverWhen does not dispatch emergency services
Mood Check-ins: Display your voluntarily recorded moods and recent patterns to you and helpers with safety-viewing permission. Mood data does not trigger calls, texts, or safety incidents and is not a medical assessment.
Weekly Summaries: Send active, authorized helpers permission-scoped email summaries, subject to their email preferences. Mood entries are not included in these emails.
Improve Our Service: Analyze usage patterns, fix bugs, develop new features
Customer Support: Respond to your inquiries and provide assistance
Billing: Process payments and send billing notifications
Legal Compliance: Comply with applicable laws and regulations
Security: Detect and prevent fraud, abuse, and security incidents

4. Location Data and Privacy-First Approach

Location sharing is optional and requires the account owner's authorization and device permission. A setup invitation or a helper's recommendation does not authorize it for you.

When authorized, EverWhen may capture location while the app is in use. After a missed check-in, a silent notification may wake the app to attempt one fresh location fix, subject to the operating system's permissions and background-execution limits. The background attempt may require “Always” location permission on iOS. This is not continuous tracking or a two-hour background polling service.

Current or last-known location may be shared with approved recipients during the missed-check-in incident, subject to their access permissions. They do not receive a live view of your day-to-day movements. A fresh location is not guaranteed: the device may be offline, permission may be unavailable, or the operating system may prevent an update. A last-known location may be out of date.

Only the owner can authorize location sharing. A helper may recommend it, but cannot enable it for the owner. You can disable it in Safety Settings or revoke the app's location permission in device settings. Disabling sharing does not recall information already delivered to recipients. We never sell your location data.

5. Information Sharing and Disclosure

We share your information only in the following circumstances:

5.1 With Your People

My People keeps safety alerts and helper access in one list. One trusted person can have either or both capabilities, but each capability has different access. Information shared with helpers depends on the permissions the owner grants:

Safety Access: Helpers with safety-viewing permission can see check-in status and, when Mood Check-ins is enabled, recent moods. Incident-management permission allows the related incident actions.
Reminders and Care Plan: Access to reminders, care information, and safety-setting edits depends on the separate permissions granted by the owner. Helper access is not unrestricted access to the account.
Safety Alerts: Let EverWhen contact that trusted person during configured safety events. Safety alerts alone do not grant access to your in-app care information or mood history.
Weekly Summaries: Active helpers may automatically receive weekly emails containing only the categories their permissions allow. Helpers can opt out of digest emails. Pending, declined, expired, or revoked invitations do not grant access to summaries. Owners are shown a notice about this sharing.
Sponsorship: Paying for another person's subscription does not itself grant permission to view or manage their data.

The owner can change or revoke helper permissions in My People. Mood Check-ins can be skipped or disabled in Safety Settings. Disabling the feature stops new mood entries and hides mood history in the app while disabled; it does not delete stored entries. Removing access cannot erase emails, messages, or copies a recipient has already received.

5.2 With Service Providers

We work with trusted third-party companies to help operate our Service:

Cloud hosting, database, and backend infrastructure
Authentication and account security
SMS and automated voice-call delivery
Automated (AI) wellness-call services, which may process call audio and transcripts through voice and language-model providers solely to operate the call
Subscription and payment processing (including the Apple App Store and our payment processor)
Error monitoring and usage analytics, including website visits and feature interactions

Analytics may use cookies or device identifiers to connect website visits with later app activity and, after sign-in, your account. It is not all anonymous. We do not send mood values to product analytics, include them in weekly digest emails, or use them to personalize Joanne's calls or other automated calls.

These providers are contractually bound to protect your information and use it only for the purposes we specify. We maintain a current list of the specific service providers (sub-processors) we use and will provide it on request at the contact address below.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (subpoenas, court orders)
Requests from law enforcement or government agencies
Protection of our rights, property, or safety
Emergency situations involving danger of death or serious physical injury

5.4 Business Transfers

If EverWhen is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our Service of any such change.

6. Data Security

We implement industry-standard security measures to protect your information:

Encryption of data in transit (TLS/HTTPS)
Encryption of data at rest
Periodic security reviews
Access controls limiting who can view your data
Secure authentication methods

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy:

Active Accounts: Data is retained while your account is active
Mood Entries: Retained for the life of the account and removed from our application database through account deletion. Turning off Mood Check-ins or hiding the recent-week display does not delete older entries.
Deleted Accounts: Account deletion removes associated application data through our deletion process. Some records may need to be retained for legal, billing, fraud-prevention, or security purposes. Information already sent to recipients is not recalled by account deletion.
Incident and Operational Records: Retained as needed to operate the service, resolve incidents, and provide support; retention can differ by record type. We do not represent the recent history shown in the app as an automatic deletion deadline.
Service-provider Records: Payment, communications, backup, and analytics providers may have separate retention requirements. Contact us for help with deletion requests involving those records.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Use Settings > Delete Account in the app, or contact support@everwhen.io to request deletion of your account and data
Portability: Receive your data in a machine-readable format
Opt-Out: Unsubscribe from marketing communications
Restrict Processing: Limit how we use your information
Object: Object to certain processing activities

To exercise these rights, contact us at support@everwhen.io. We will respond within 30 days.

9. Children's Privacy

EverWhen is designed for adults. It is not intended for, and we do not knowingly collect personal information from, anyone under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell your data)
Right to deletion
Right to non-discrimination for exercising CCPA rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We process your data based on:

Contract: To provide the Service you've subscribed to
Consent: For location sharing during incidents
Legitimate Interests: To improve our Service and prevent fraud
Legal Obligation: To comply with applicable laws

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Sending an email to your registered email address
Posting a prominent notice on our Service
Updating the "Last updated" date at the top of this policy

Updating this policy does not replace any separate authorization required for location sharing, helper access, or calls from Joanne, EverWhen's automated Wellness Agent.

14. SMS Opt-In Data

Notwithstanding any other provision in this Privacy Policy, SMS opt-in data and consent will not be shared with any third parties for marketing or promotional purposes.

Your phone number is used exclusively for the safety and wellness features of EverWhen—such as check-in notifications, calls from Joanne after a missed check-in, and later automated safety calls—as described in our Terms of Service. We do not sell or rent your mobile phone number to third-party marketers.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Support Email: support@everwhen.io
Address: PAI Tech LLC

We take your privacy seriously and will respond to your inquiries as quickly as possible.