Privacy Policy
Version 1. Last updated August 31, 2026.
Who we are
EvenKin ("we", "us") is a web application that helps people share the care of someone they love (family, partners and anyone who helps) and split the load fairly. EvenKin is operated by AEA INTELIGENCIA ARTIFICIAL LTDA (CNPJ 57.601.923/0001-16), Porto Alegre, Brazil, the data controller for this service. This policy explains what we collect, why, and the choices you have. For anything privacy related, write to support@evenkin.com.
What we collect
- Account data: your email address and the name you choose to display. We sign you in with a magic link sent to your email; we never store a password.
- Care activity: what your family logs inside a care circle (care entries, expenses, meals, notes, reminders, check-ins) so it can be shared with the members of that circle.
- Health information you choose to store: the Health Vault (medications, documents, contacts, vitals and the care recipient's profile) exists so your family has it in one place. It is encrypted at rest and visible only to members of your circle. Administrators of EvenKin cannot read Health Vault content.
- Billing data: payments are processed by Paddle as Merchant of Record. We never see or store your card number; we keep a mirror of your subscription status (plan, renewal dates, payment events).
- Technical basics: a session cookie to keep you signed in, and standard server logs.
- Usage analytics: we use Google Analytics to understand how visitors use our public pages and the app (pages viewed, general region, device type). This data is aggregated; we do not send Google your name, email, care activity or anything from the Health Vault.
What we do NOT do
- We do not sell your personal data.
- We do not show advertising on pages that contain health information. On our free plan, ads may appear only on the general dashboard.
- We do not read your Health Vault. Access is restricted to the members of your care circle by design, and this restriction is covered by automated tests on every release.
Emails and your choices
We send transactional email (sign-in links, receipts and renewal notices, weekly family summaries) and occasional product email. Marketing email always includes a one-click unsubscribe link, and you can manage all preferences in Settings. Transactional email required to operate your account (like sign-in links and billing notices) cannot be disabled while the account exists.
Your rights
- Export: you can request a copy of your data.
- Deletion: you can request account erasure. We delete your identity and personal records; entries that belong to the shared family history are kept in pseudonymized form so the circle's records stay coherent.
- Consent: we record your acceptance of these policies at first sign-in, with date and version.
To exercise any right, use Settings or email support@evenkin.com.
Who processes data for us
We use a small set of infrastructure providers to run EvenKin: Railway (application hosting), Neon (database), Resend (email delivery), Paddle (payments, as Merchant of Record) and Cloudflare (DNS and network). Each receives only what it needs to provide its service.
Retention and security
We keep your data while your account exists. Sessions expire automatically. Health Vault content is encrypted at rest with a key that lives outside the database. All traffic uses HTTPS.
Changes
If this policy changes in a meaningful way, we will notify you by email or inside the app, and the version number above will change.