Privacy Policy
Last updated: 29 July 2026
What we hold
EverRoot stores the account email you sign in with, the quiz answers that shape your routine, the products you scan (as extracted ingredient text — never the photos of labels), your routine activity (steps completed, check-ins, streaks), and your progress photos.
Progress photos
Progress photos are private to your account. They are stored encrypted in a private bucket, are readable only through short-lived signed links tied to your session, and are never public, never shared, and never analysed — the app does not measure or score anything from a photo. No one sees them unless you export a share card yourself.
Label scans
The scanner reads the ingredients panel on your phone. The photo itself never leaves your device — only the extracted ingredient text is sent to our servers to compute your match verdict.
What we never do
We do not sell your data. We do not show ads. We do not send marketing email — if we email you, something needed your attention. Payment details are handled entirely by the App Store or Google Play; we never see them.
Analytics and processors
We record product events (like completing a routine step) to understand what works, tied to your account, in our own infrastructure and in PostHog. Crash reports go to Sentry. Subscriptions are processed by RevenueCat against your store account. None of these receive your photos or your ingredient scans. Infrastructure runs on Supabase and Vercel in the EU/US under standard contractual clauses.
Deleting your data
In the app: Settings → “Delete all my photos and data” removes photos and activity immediately and permanently while keeping your account, and “Delete my account” removes everything including the account itself. You can also request deletion from the account deletion page. Nothing is retained beyond operational backups that expire within 30 days. Subscriptions are cancelled separately through the store.
Contact
EverRoot is operated by 8x Social. Privacy questions (including KVKK and GDPR requests) reach us through the support page. This policy is provided in English and Turkish; where they differ, the English text controls.