A few things, up front.
- Keep belongings on your device without an account.
- Cloud sync is optional. The database is in the United States.
- Google / Microsoft are for sign-in, not reading your messages.
- No ads or behavioral analytics SDKs in this version.
01Who operates Everkeep
Everkeep is operated by Mitsuke, an independent developer based in Canada. For questions about this policy or your data, contact mitsukilearnshowtocode@gmail.com. This policy describes Everkeep 1.0.0 for iOS and this informational website.
02What we process, and why
| Information | How it is used |
|---|---|
| Belongings you enter: names, photos, prices, currencies, purchase dates, notes, categories, tags, retirement and recently deleted records. | To organize your collection, calculate average ownership costs, and create the views you request. Records start on your device and upload to Supabase when you enable cloud sync. |
| Account identifiers, verified email, chosen provider, authentication tokens, and basic profile information returned by a sign-in provider, such as a name or profile image. | Supabase uses this information to authenticate you and associate cloud data with your account. Everkeep uses your account ID and email to identify your account; it does not publish a public profile. |
| Purchase entitlement and transaction information supplied by Apple; your random account UUID when you purchase while signed in. | To validate, unlock, and restore advanced analytics where in-app purchases are available. Apple handles payment details; Everkeep does not receive your card number. |
| Support emails and attachments you choose to send. App version, iOS version, device type, and language only if you choose to include them. | To answer your questions and investigate reported issues. Item records, photos, passwords, and device identifiers are not automatically attached. |
| IP address, request timestamps, and technical or security information processed by hosting, authentication, and email providers. | To deliver requests, protect the service, and diagnose failures. Everkeep has no advertising or behavioral analytics SDK in this version. |
03Local use and optional cloud sync
You can manage belongings without creating an account. Local-only records are not uploaded to Everkeep’s cloud database. After signing in, you choose whether to enable cloud sync and whether to import guest records. When enabled, records and selected photos sync through Supabase while the app is open and connected. Pausing sync stops future syncing; it does not delete data already stored in the cloud.
The configured Supabase database is hosted in East US (North Virginia), United States. Authentication, delivery, support, and infrastructure providers may process information in other countries. Their protections and laws may differ from those where you live. Contact us for information about safeguards applicable to your data; this policy does not itself authorize or replace any consent or transfer procedure required by local law.
04Google, Microsoft, and other sign-in providers
Google and Microsoft authorize sign-in on their own pages. Everkeep does not receive your Google or Microsoft password. We request basic identity scopes (openid, email, and profile) to verify your identity and link you with the cloud records you choose to sync. We do not request access to Gmail or Outlook messages, contacts, calendars, or Drive files. The authentication service may retain the basic identity and profile data returned by your provider.
Google account data is used for sign-in, account identification, and the related sync and account-support features you request. It is not sold, used for advertising, or used to train AI models. Access or transfer is limited to providing these features through our service providers, support you request, security, or applicable legal obligations. Our handling of Google data is subject to the Google API Services User Data Policy, including its Limited Use requirements.
Sign-in methods shown in the app depend on which providers are enabled. Apple sign-in is available only when configured. You can manage authorizations in your provider’s account settings; revoking provider access alone does not delete existing Everkeep cloud records.
05Photos, sharing, and backups
The system photo picker gives Everkeep access to the photos you select. Selected images are compressed and saved in the app; copies upload if cloud sync is enabled. Saving a generated card to Photos requests permission to add images.
Recommendation cards are generated on your device. Prices are hidden by default. A card is passed to a destination only when you use the system share sheet. The destination handles the shared copy under its own policies. Exported backups contain your records and photos. Anyone with access to an exported file may be able to read it; keep it somewhere you trust. Device or iCloud backups are controlled by your Apple settings, separately from Everkeep’s cloud sync.
06Service providers and disclosure
We use Supabase for authentication, database storage, photos, and account-deletion functions; Google and Microsoft for the sign-in methods you select; Apple for iOS services and purchases when available; and Gmail for support correspondence. This website is hosted using OpenAI Sites and its delivery infrastructure. Providers receive the information needed to perform their roles and may process operational logs.
We do not sell your personal information, share it for targeted advertising, or operate a public belongings feed. We may disclose information to respond to a valid legal obligation, protect users or service security, or carry out a transfer you explicitly request. We do not claim end-to-end encryption of synced records.
Provider information: Supabase · Google · Microsoft · Apple · OpenAI.
07How long information is kept
Local records remain until you remove them or remove the app’s data. Recently Deleted offers a 30-day recovery window; expired records are removed when the app next processes cleanup or sync. Retiring an item preserves its record. Account data and synchronized records remain while the account is active unless deleted.
Permanent item removal does not guarantee immediate removal of every uploaded photo from cloud storage; unused cloud copies may remain until account deletion or service cleanup. When sync is paused, offline changes will not reach the cloud until sync resumes. Exported files and copies on other devices or sharing destinations are not remotely erased.
Support messages are kept while needed to resolve and follow up on a request, then deleted when no longer necessary, subject to legal obligations. Infrastructure logs and platform backups follow provider retention cycles, so deleting live records may not immediately remove residual backup or security-log copies. We do not promise immediate erasure from every backup.
08Deleting an account and controlling your data
In the app, open Profile → Account → Delete account. Re-authentication is required. After successful deletion, the service removes the account’s active cloud records and stored photos. Before deletion, the app preserves the current collection in guest storage on that device; deleting an account does not erase those local copies. Review and remove local records separately if you want them gone. Sign-out also preserves local caches.
If you cannot access the app, email us from the account’s email address to request deletion or help. We may ask for the minimum information needed to verify account ownership. Never send passwords, one-time codes, or payment details. Deleting an account does not cancel an Apple subscription; manage subscriptions separately in your Apple account settings.
You can edit records, export a backup, pause sync, remove shared copies where the destination allows it, or ask us for access, correction, deletion, or a portable copy of data we control.
09Security
We use HTTPS for service requests, account-scoped access controls for cloud records and photos, and the iOS Keychain for sign-in tokens. Everkeep does not synchronize those tokens through iCloud Keychain. Local item files are in the app’s storage and rely on iOS/device protections; exported backups are not end-to-end encrypted by Everkeep. No storage or transmission method can be guaranteed perfectly secure.
10Your privacy rights
Your rights depend on where you live. Where applicable, you can request access, correction, deletion, portability, restriction, or object to processing, withdraw consent for optional features, and complain to your local privacy regulator. Withdrawal does not affect processing already lawfully carried out. Disabling sync or signing out does not by itself delete prior cloud records.
Where a legal basis is required, we process data needed to provide requested account and sync features to perform our service relationship; optional sharing and device permissions follow your choices; limited security and support processing serves legitimate service interests where permitted; and some retention may be required by law. Everkeep does not use your records for automated decisions with legal or similarly significant effects. Contact us to exercise rights; we will verify and respond as required by applicable law. This notice is not a claim of certification in any jurisdiction.
11Children
Everkeep is a general-purpose belongings app and is not directed at children. If you believe a child has provided personal information without authorization required by local law, contact us so we can investigate and take appropriate steps.
12This website
The pages explain the app and link to support. The cost calculator runs in your browser and sends no input to Everkeep. We do not add advertising cookies, visitor analytics, sign-up forms, or third-party fonts. The hosting platform may process network and security logs and, for restricted previews, authentication information. Its policies apply to that processing.
13Changes and contact
We will update the date on this page when this policy changes and provide further notice or request consent when required before materially changing how we use data. Questions and requests: mitsukilearnshowtocode@gmail.com. Operator: Mitsuke, Canada.