Privacy policy

Who we are

Kombo Labs Ltd runs EverFond, at everfond.app and in the EverFond iOS app, and is the controller of the personal information described here. This policy explains what we collect, why, who else handles it, and the choices you have.

If you host an event

When you sign in with Google we receive your name, email address and Google account identifier. We do not receive your Google password or your profile photo.

We keep the events you create — their names, dates, time zone, cover images and welcome messages — and a record of each purchase: what was bought, through which store, when, and the store’s transaction identifiers. Card details go to Apple or Stripe, never to us.

If you leave a message

Guests do not need an account and we do not ask for their email address. We keep the name you type (if any), and the text, voice recording, video or photo you leave, together with the time you left it.

Photos are converted to a smaller format and their location and camera data are removed. Voice and video recordings are kept as recorded. Your host can see your name on the message.

If you join the waiting list

If you give us your email address to hear when EverFond launches, we keep it with the language you were using and the event you joined from. We use it only for that announcement.

When you visit the site

On your first visit we look up which country your IP address belongs to, using a database on our own server, to choose a language; we do not store the result beyond the language cookie. Like most websites, our web server keeps short-lived logs of requests — IP address, time, page and browser — to keep the service secure and working.

Why we use it

Under UK data protection law we rely on: performing our contract with you, to run your account, events and purchases; our legitimate interests, to keep EverFond secure, prevent abuse, and choose your language; your consent, for the waiting-list email, which you can withdraw at any time; and legal obligations, where the law requires us to keep or hand over information.

Who can see it

Messages left on an event are shown to that event’s host. Guests see the host’s name on the invitation. We do not sell personal information, share it for advertising, or use messages to train artificial intelligence. We look at message content only when we need to — to fix a problem, investigate a report of abuse, or because you ask us to.

Photos, recordings and videos are served from long, unguessable links. Anyone who has a link can open that file, so take care with who you pass one to.

Companies that help us

We use a few providers, each only for its part of the service: DigitalOcean hosts our servers; Cloudflare stores images; Google handles sign-in; RevenueCat manages purchases; Stripe takes web payments; Apple takes App Store payments. Some of them process data outside the UK; where they do, the transfer is covered by UK adequacy regulations or the UK’s approved contract clauses.

How long we keep it

Your account and events are kept until you delete them or your account. Messages are kept until the host deletes the event or their account; deleting an event deletes its messages and files. Our record of your purchases is deleted with your account; Apple, Stripe and RevenueCat keep their own payment records, as tax law requires. Waiting-list addresses are kept until the launch announcement or until you ask us to remove yours. Server logs are kept for a few weeks. A sign-in lasts 90 days.

Cookies and storage

We use no advertising or analytics cookies. The site sets a cookie that keeps you signed in (everfond_session, 90 days) and one that remembers your language (everfond.locale, one year). It also stores your light or dark theme in your browser, and, while you leave a message, the name you typed, which is cleared when you close the tab. Google’s sign-in button may set its own cookies when you use it.

Your rights

You can ask us for a copy of your personal information, and to correct it, delete it, restrict or object to how we use it, or move it to another service. You can delete your account and everything in it yourself, under Settings → Delete account on the site or in the app, or write to us from the email address you sign in with. Guests who want a message removed can ask their host to delete it, or write to us with the event and enough detail for us to find it.

We will answer within a month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

EverFond is not meant for children under 13, and hosts must be at least 18. If you think a child under 13 has given us personal information, tell us and we will delete it.

Security

Everything travels over encrypted connections, sign-in tokens are stored only in a scrambled form, and access to our servers is limited to the people who run EverFond. No system is perfectly secure; if a breach puts your information at risk we will tell you and the regulator as the law requires.

Changes to this policy

We will update this page when what we do changes, and change the date at the top. If a change matters, we will tell hosts before it takes effect.

Contact

EverFond is run by Kombo Labs Ltd, a company registered in England and Wales (company number 13334671), whose registered office is at Flat 6, 57/58 Brunswick Road, Brighton & Hove, BN3 1DH. Write to us at hello@everfond.app.