Privacy Policy

1. Who we are and what this covers

This Privacy Policy explains how Ebenezer Kyei Addei, an individual who operates Everwise ("Everwise", "we", "us") collects, uses, shares and protects information when you use myeverwise.com and the Everwise app.

2. Information we collect

Depending on how you use Everwise, we may collect or process the following categories of information:

• Account information: your name, your primary email address, and your password (stored only as a one-way hash).
• Sign-in and security settings: your authenticator-app key (stored encrypted), backup codes (stored only as one-way hashes), and for each passkey its public key, a device name and when it was added and last used. A passkey's private key stays on your device or security key; Everwise never receives or can access it.
• Recovery email (optional): if you add one, a second email address used only for account recovery and important security notices. It's stored encrypted, shown only in masked form, and you can change or remove it anytime in Security.
• Security logs: sign-ins, signed-in devices and security changes (such as adding a passkey, changing your recovery email, or an account recovery), with the approximate location and device involved (stored encrypted). You can see them on your Security page. They never include your password, codes or keys.
• We don't collect phone numbers for sign-in, verification, recovery or security alerts.
• Private beta and waitlist: if you join the waitlist, your email address and (optionally) first name, stored encrypted where noted, used only to contact you about access to Everwise. While Everwise is in private beta, we also keep a list of invited email addresses and when access was granted or ended.
• Profile information: preferences such as theme, communication choices and privacy settings.
• Financial account information: account names, types, the last 4 digits of account numbers, balances and credit limits, from accounts you connect through Stripe, or simulated demo accounts if you haven't connected any.
• Transaction information: purchases, deposits, transfers, bills and subscriptions, from connected accounts (or simulated demo transactions).
• Debt and credit-related information: loan and card balances from connected accounts (or simulated), and interest rates, minimum payments, due dates, statement dates and credit limits when a provider reports them or you choose to enter them yourself. Values you enter are identified as provided by you; values that aren't reported are shown as "Not reported", not estimated. Everwise does not pull live credit reports.
• Savings and investment-related information: savings goals, balances of connected accounts, and illustrative contributions and investment projections.
• Your goals: the financial and life goals you set and track.
• AI and assistant conversations: questions you ask Ask Everwise. Today these are processed in your browser and are not saved to our servers.
• Uploaded documents: if we add document upload in the future, documents you choose to provide.
• Device information: browser type, operating system, approximate location (city, region and country, estimated from your IP address) and a random device identifier used to recognize browsers you've signed in from.
• Usage information: how you interact with the Service, such as pages viewed and features used.
• Cookies and similar technologies: see our Cookie Preferences.
• Customer support communications: messages you send us and our replies.
• Consent records: which versions of our legal documents you accepted and when, with the IP address and browser used at the time (stored encrypted), so we can show that consent was given.
• Connected account data: when you connect a bank through Stripe, the data you authorize Stripe to share, as listed on the connection screen. We don't receive your bank login credentials or full account numbers.

3. Why we collect it and how we use it

• To create and operate your account and provide Everwise features.
• To secure your account: verifying your identity, detecting suspicious activity, rate limiting, recognizing new devices and sending security alerts (for example, when you sign in from a new device).
• To generate insights, plans, projections and recommendations based on your information and goals.
• To communicate with you about your account, security and changes to our policies.
• With your permission, to send product updates and tips (you can opt out anytime).
• To understand usage and improve the Service, where you've allowed optional analytics.
• To comply with legal obligations and enforce our Terms.

4. How we share information

Everwise does not sell your personal information, and we don't share it for cross-context behavioral advertising. If that ever changed, we would update this policy in advance and give you the choices required by law.

We share information only as needed:

• Service providers that host, store, secure or deliver the Service on our behalf (for example cloud hosting, database and email delivery providers), under agreements that limit their use of the data.
• Stripe, Inc., which we use to connect to your financial institutions when you choose to link an account (Stripe Financial Connections). Stripe acts as our service provider and also collects and uses your data as an independent controller, as described in its End User Terms (stripe.com/legal/end-users) and Privacy Policy (stripe.com/privacy).
• Other third-party integrations you choose to connect, as described when you connect.
• When required by law, legal process or to protect the rights, safety and security of users, Everwise or others.
• In connection with a merger, acquisition or sale of assets, subject to this policy's protections.
• With your consent or at your direction.

5. How long we keep information

We keep information for as long as your account is active and as needed to provide the Service. When you disconnect a bank, we revoke Everwise's access at Stripe and delete that bank's accounts and transactions from Everwise. When you delete your account, we revoke every bank connection and delete your account data from our active systems. Records of your consent to connect a bank are kept, without being linked to your account, for as long as Stripe requires (currently 24 months after our agreement with Stripe ends). Limited information may be kept longer where required by law, to resolve disputes, prevent fraud or abuse, or maintain security records, and backups are overwritten on a rolling schedule.

6. Account deletion

You can delete your account at any time from Settings → Privacy → Delete account. Deletion is permanent. It revokes Everwise's access to any connected banks at Stripe and removes your profile, settings, goals, financial data, security settings and activity history from our active systems.

7. Access, download and correction

You can download a copy of your data from Settings → Privacy. You can update most information directly in the app. For other access or correction requests, contact us and we'll respond as required by applicable law. We may need to verify your identity first.

8. Your control over connected accounts

If you connect external accounts in the future, you'll see what Everwise will access before you continue, and you can disconnect them at any time in Settings. Disconnecting stops future data collection from that source.

9. Third-party provider responsibilities

Third-party providers you choose to use (such as future account-connection providers) handle your information under their own privacy policies and security practices. We choose providers carefully and limit what they may do with data they process for us.

10. How we protect information

We use administrative, technical and physical safeguards designed to protect your information. See Data & Security. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

11. Where information is processed

Everwise currently stores and processes information in the United States. If that changes, or if you use Everwise from outside the United States, information may be transferred to and processed in other countries, and we'll use appropriate safeguards where required.

12. Children's privacy

Everwise is not intended for children and we don't knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we'll delete it.

13. Your choices

• Communication preferences: opt in or out of product updates in Settings. Security and account notices are required while your account is active.
• Cookies: choose which optional cookie categories to allow in Cookie Preferences.
• Personalization: turn personalized recommendations on or off in Settings → Privacy.

14. Privacy rights

Depending on where you live, you may have rights to know, access, correct, delete or port your information, and to not be discriminated against for exercising these rights.

You can download or delete your data yourself in Settings → Privacy. To make any other privacy request, or if you can't sign in, email privacy@myeverwise.com. We may need to verify your identity before acting on a request, and we'll respond within the time required by the law that applies to you.

15. Changes to this policy

We'll update this policy as Everwise changes. Each version shows its version number and last updated date. We'll notify you of material changes in the app or by email.

Contact us

Questions about privacy? Contact Ebenezer Kyei Addei, an individual who operates Everwise ("Everwise", "we", "us") at privacy@myeverwise.com. [Business mailing address: to be published. Until then, please contact us by email.]