Privacy Policy

Draft version for the closed beta · Last updated: 29 October 2026

This policy explains what personal information Everaly collects, why we collect it, who we share it with and the choices you have. It applies to the Everaly app and to everaly.app during the closed beta.

1. Who is responsible for your information

Everaly is operated from Mexico. The party responsible for your personal information is:

Owner to confirm: the legal name of the responsible person or company, its address (domicilio) and, if applicable, the person or department in charge of privacy requests. Mexican law requires the privacy notice to name the responsible party and their address.

2. Information we collect

Information you give us

• Account: your email address, your password (stored only as a secure hash by our authentication provider, never in plain text), your username and your confirmation that you are at least 14 years old.
• Profile: display name, bio, profile photo, cover image, your interests and, only if you choose to add it, a broad location (see section 5).
• Content: Dailies (photos and five-second videos), Ephemerals, photos in Rolls, comments, GIFs you attach, and the audio of your videos.
• Messages: the text, photos, voice messages, View Once media and shared posts or profiles you send in direct messages.
• Activity: follows and follow requests, likes, saves, shares, Favorites, Blocks, the reports you submit and your settings and preferences.

Information collected automatically

• Technical data: sign-in sessions, the app version and request logs (which include IP addresses) kept by our hosting providers to run and secure the service.
• Screenshot events: where your device lets the app detect it, a screenshot of someone else's Ephemeral or View Once media may be recorded so the owner or sender can be notified.

We remove location and other identifying metadata (such as GPS coordinates embedded by the camera) from photos and videos before they are stored.

The beta app does not include advertising, advertising identifiers or third-party analytics tools.

3. How we use it

• To create and run your account and show your content to the people you choose.
• To deliver messages, comments, likes, notifications within the app and other social features.
• To operate Discover, including matching people by shared interests or broad area, when you take part (section 5).
• To classify the topics of eligible public Dailies for Discover (section 6).
• To keep Everaly safe: review reports, enforce the Community Guidelines, prevent abuse and protect accounts.
• To send service emails, such as password reset codes. We do not send marketing emails.
• To fix problems and improve the beta.

We do not sell your personal information.

Owner/legal to confirm: the legal bases and the distinction between primary and secondary purposes required by Mexican privacy law, and whether any purpose requires separate consent.

4. What other people can see

• Public profile (the default): your username, display name, profile photo, cover, bio and your Dailies can be seen by other Everaly users. Your interests are shown on your profile unless you turn that off.
• Private profile: when you turn on Private profile, only followers you approve can see your content.
• Favorites: a Daily shared with Favorites only is visible only to the people you marked as Favorites.
• Ephemerals are visible until they expire. View Once media can be opened once. Other people can still take photos of their screen or use other means to keep a copy, so share with care.
• Rolls are shared with the participants of each Roll.
• Blocking someone hides your profile and content from them and stops new interactions between you.
• If you allow it (Settings → Interactions), other users may reuse the audio of your eligible public videos. This setting starts on for new accounts and can be turned off at any time.

5. Discover, interests and location

Discover helps people find each other. Only public accounts take part. For new accounts, Discover, “Discoverable by interests” and “Discoverable by location” start on. You can turn each of them off at any time in Settings → Location & Discover, or make your profile private.

• Interests: people who also take part in Discover by interests may see that you share interests with them.
• Location is optional. We only ask your device for location when you choose “Use my current location”. Your device's location services work out your city (or your state or region if no city is found), and we store only that broad area. We never store your coordinates and never show your distance from anyone. You can remove your location at any time.
• Matching by place uses only that broad area: the same city, or otherwise the same region.
• Discover never shows blocked accounts, accounts you already follow, or private accounts.

6. AI-assisted content classification

To show recent posts that match people's interests in Discover → Recent, we use an AI service to recognize the general topics of some posts (for example “coffee” or “basketball”), chosen from a fixed list.

• Only public Dailies are classified: shared with Everyone, from a public account that takes part in Discover by interests, and published in the last 72 hours.
• For a photo, the image is analyzed. For a five-second video, three still frames are analyzed; the audio is not.
• Never classified: Favorites-only Dailies, Ephemerals, Rolls, messages, comments and private accounts.
• The results are used only to decide which Discover → Recent viewers see the post. They are not used for advertising, and they do not identify people or describe personal traits.
• We send the request with the provider's option to store it turned off. The provider's own data-processing terms also apply.

You can keep your Dailies out of classification by sharing them with Favorites only, turning off “Discoverable by interests” or making your profile private.

Owner to confirm: that the AI provider's data-processing terms (retention, and no training on submitted content) have been reviewed and accepted.

7. Service providers and international transfers

We use these providers to run Everaly. They process information only on our instructions:

• Supabase: database, sign-in and media storage. Servers in the United States (us-east-1).
• Render: processing that extracts still frames from five-second videos for classification.
• OpenAI: AI topic classification (section 6). United States.
• Resend: sending service emails such as password reset codes.
• Cloudflare: hosting of this website and its domain.

This means your information is transferred to and stored outside Mexico, mainly in the United States.

Owner to confirm: the Render service region, the signed data-processing agreements with each provider and the wording required for international transfers.

We may also disclose information when required by law or to protect the safety of people.

8. How long we keep information

• We keep your account and content until you delete them or delete your account.
• Ephemerals expire automatically, at most three hours after they start.
• Deleting your account (Settings → Account → Delete account) takes effect immediately. Your profile becomes a neutral “Deleted user” with no name, photo, bio or location. Your Dailies, Ephemerals, comments, likes, saves, follows, Favorites, Blocks and preferences are deleted, and their media is removed by our cleanup process.
• Some information remains after account deletion. A comment that others replied to is kept as “Comment deleted”, with no text. Rolls are shared with other people, so your place in a Roll stays as “Deleted user” and your photo is removed. Text messages you sent remain in the other person's conversation under “Deleted user”; your photos, voice messages and View Once media in messages are removed.
• Reports and the related text are kept for safety and moderation, including after account deletion. Media that has been reported is held until the report is resolved, for at most 90 days, and then removed if its content no longer exists.

Owner to confirm: how long resolved reports are kept, how long backups are kept, and how long hosting providers keep their logs.

9. Your choices and rights

In the app you can:

• edit your profile, interests and location, or remove your location;
• make your profile private, and manage Discover and audio reuse;
• hide or delete your content, and block or report people;
• change your password and delete your account.

Under Mexican law you can also ask to access, correct or delete your personal information, object to its use, or withdraw your consent. To do so, use the contact in section 13. The app does not yet offer a self-service download of your data; you can request one there.

Owner/legal to confirm: how these rights requests are made and answered (including identity checks and response times), and whether to add rights for users outside Mexico (for example under the EU GDPR or US state laws).

10. Age requirement

You must be at least 14 years old to create an account; the app asks you to confirm this when you sign up. If we learn that an account belongs to someone younger, we may delete it.

Legal to confirm: whether users aged 14 to 17 need consent from a parent or guardian under the applicable law, and how that consent would be obtained.

11. Security

Media is kept in private storage and delivered through short-lived links. Access to content is checked on our servers for every request, and passwords are stored only as secure hashes. No system is perfectly secure; if you think your account has been compromised, change your password and contact us.

12. Changes to this policy

We will update this page when the policy changes and show the date of the latest version at the top. We will tell you in the app or by email about important changes.

13. Contact

Owner to confirm: a monitored contact address for privacy requests (for example a privacy@ or support@ address on everaly.app that can receive email). Today the domain only sends email.