Privacy Policy (Website)

Last Updated: November 11, 2025

Note: This privacy policy covers only our website (evolvedailyapp.com). If you're looking for information about how we handle data in the EvolveDaily mobile app, please see our App Privacy Policy.

Who We Are

EvolveDaily

Email: evolvedailyapp@gmail.com

Website: https://www.evolvedailyapp.com

We are the controller of the personal information collected through the website. If you are located in the EU, UK, or Canada, you may contact us at the above email address for any privacy-related matters.

EvolveDaily ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website. Please read this policy carefully.

1. Information We Collect

1.1 Information You Provide

When you use our website, we may collect:

  • Email address (when you join our waitlist)
  • Subscription preferences (whether you remain subscribed to waitlist updates)
  • Any other information you choose to submit through our website

1.2 Automatically Collected Data

Technical data collected automatically:

  • IP addresses
  • Browser type and version

1.3 Sensitive Data

We do not intentionally collect sensitive categories of data such as health information, financial data, biometrics, or information revealing racial or ethnic origin.

2. How We Use Your Information & Legal Basis

We use collected information to:

  • Send you waitlist confirmation emails and updates about our public launch
  • Notify you when we launch new features or our public release
  • Improve website features and user experience
  • Prevent abuse and maintain security (rate limiting, fraud prevention)
  • Analyze usage patterns to improve services (anonymized data)

Legal Basis for Processing (GDPR)

For EU/UK residents, we process your data based on:

  • Consent: You provide explicit consent when joining our waitlist and checking the consent box
  • Legitimate Interests: Improving the website, security, fraud prevention, and rate limiting

You may withdraw consent at any time by clicking the "Unsubscribe" link in any waitlist email or by contacting us directly.

3. Information Sharing and Disclosure

3.1 Third-Party Services

We share data with:

  • MongoDB (database hosting for waitlist email storage)
  • Vercel (web hosting provider)
  • Resend (email service provider for sending waitlist confirmation emails)
  • Upstash (Redis hosting for rate limiting and abuse prevention)

These service providers process your data on our behalf and are bound by data processing agreements. They may not use your data for their own purposes.

3.2 No Selling of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Storage and Security

4.1 Storage Locations

  • MongoDB Atlas cloud database (waitlist emails and subscription status may be stored in data centers outside your country)
  • Vercel hosting servers
  • Upstash Redis (temporary rate limiting data)

4.2 Security Measures

We implement security measures including:

  • HTTPS encryption for all data transmission
  • Secure database access controls with authentication
  • Email validation and sanitization
  • Rate limiting to prevent abuse
  • Cryptographically signed unsubscribe tokens
  • Regular security updates and monitoring

4.3 Data Retention

We retain your data as follows:

  • Waitlist email addresses and subscription status: Retained until you unsubscribe, request deletion, or as long as needed to fulfill the waitlist purpose (notifying you of our public launch and future updates)
  • IP addresses: Temporarily logged for rate limiting and abuse prevention, typically retained for 60 seconds (rate limit window), then discarded
  • Technical data: Retained according to our service providers' schedules for operational needs

For legal, tax, or regulatory purposes, we may retain certain information as required by law. You can request deletion of your personal data at any time by contacting us directly at evolvedailyapp@gmail.com.

5. Your Privacy Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Request data portability (receive a copy of your data)
  • Object to or restrict processing
  • Withdraw consent at any time

For EU/UK Residents (GDPR)

You may also contact your local data protection authority if you have concerns about how we process your data.

For Canadian Residents

You may contact the Office of the Privacy Commissioner of Canada regarding privacy concerns.

To exercise any of these rights, contact us at evolvedailyapp@gmail.com. We may ask you to verify your identity before fulfilling requests.

6. Cookies and Tracking

The website does not use cookies or third-party tracking for advertising. We use Vercel Analytics, which does not rely on cookies or personal identifiers. It collects only aggregated, anonymized technical data (such as the number of visitors and performance metrics) to help us maintain and improve the site while protecting user privacy.

7. Children's Privacy

EvolveDaily is designed for users aged 18 and older. We do not knowingly collect information from children under 13. If we discover such data, we will delete it immediately.

8. International Data Transfers

Your data may be transferred to and stored on servers located outside your country, including in the United States. By using the website, you consent to such transfers.

For EU/UK residents: Where legally required, we rely on safeguards such as Standard Contractual Clauses (SCCs) implemented by our service providers (MongoDB, Vercel) to protect your data during international transfers.

Our third-party service providers maintain appropriate security measures and comply with applicable data protection laws in their respective jurisdictions.

9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under CCPA/CPRA:

  • Right to know what personal data is collected and how it's used
  • Right to delete personal data
  • Right to correct inaccuracies in personal data
  • Right to opt-out of the sale or sharing of personal information (we do not sell personal data)
  • Right to non-discrimination for exercising privacy rights

To make a request, contact evolvedailyapp@gmail.com. Residents of other U.S. states with privacy laws may have similar rights.

10. Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use after changes constitutes acceptance.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data:

Email: evolvedailyapp@gmail.com

By using our website, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.