Privacy, plainly.

In brief

• Yours alone

  Your journal lives on your devices and in your own iCloud. We never receive a copy.

• Words only you can read

  Your words are stored in encrypted fields that only your devices can read.

• Written on-device

  Titles, questions and answers are written on your device, and voice notes are transcribed there.

• Only if you allow it

  Location, Photos, the microphone and Journaling Suggestions are all optional.

• Nothing else

  No account, no analytics, no ads, no tracking and no third-party code.

Who we are

Everkept (“we”, “us”) is an independent app for iPhone, iPad and Mac. You can reach us at hello@everkept.day.

What Everkept keeps, and where

Everything you keep in Everkept is stored in two places: on your devices, and in your own iCloud account, in Everkept’s container in your private CloudKit database. Apple stores it for you under your Apple Account, and it counts toward your iCloud storage. We don’t run servers for Everkept, and we never receive a copy of your journal.

Your journal is made of:

• Days: the date, a title, the mood you chose, where the day’s label sits on its table and, if you allow it, a town name, rounded coordinates and the weather.
• What you keep on a day: words, photos, voice notes and their transcripts, drawings, captions, ticket stubs (a song, a workout, an event) and time-capsule letters.

If you aren’t signed in to iCloud, or iCloud isn’t available, your journal stays on that device until it can sync.

Encryption

Your words are stored in CloudKit’s encrypted fields. That covers the text you write, voice-note transcripts, captions, day titles, time-capsule letters, ticket stubs, place names, coordinates and weather. These fields are encrypted before they leave your device, and only your devices, signed in to your Apple Account, can read them. We can’t, and Apple can’t either.

A few small details are stored in your private database without that field encryption: the date of each day, the mood you picked, when things were added, the length and loudness outline of a voice note, where pieces sit on a table, and the date a sealed letter is due to open.

Photos, voice recordings and drawings sync as encrypted iCloud assets (files) in the same private database. Apple encrypts them in transit and at rest; they aren’t in Everkept’s encrypted fields, so they have iCloud’s standard protection rather than the field encryption above. Apple’s iCloud data security overview explains how that works.

When you keep a photo, Everkept saves a copy of up to 2048 pixels on its longest side and a small thumbnail, not the original file.

What stays on your device

• Apple Intelligence. Day titles, the question for today, the line about a date in Echoes, and the answers in Ask are written by Apple’s on-device language model. Your journal isn’t sent to Apple or to us for this. If Apple Intelligence isn’t available or is turned off, these features switch off and Everkept uses plain titles and questions.
• Speech. Voice notes, and questions you ask out loud, are transcribed on your device with Apple’s speech recognition. The first time, your device may download Apple’s speech model for your language. A question you ask out loud is transcribed and then deleted; it isn’t kept as a recording.
• Search. So that Ask can find your days, Everkept keeps a private Spotlight index of your journal on each device. It isn’t uploaded, and on iPhone and iPad it’s protected until you unlock your device.
• Widgets. A small snapshot (recent titles, today’s question and a few thumbnails) is saved in Everkept’s own container on your device so widgets can show it. Sealed letters are never included. Widget content is marked as private, so your device can hide it while it’s locked.
• Settings. Your choices, such as the Face ID seal and whether to note places, are stored on each device and aren’t synced.

Location and weather

Noting where a day happened is optional. Everkept asks for permission the first time you keep something on today’s table, never at launch, and only uses location while you’re using the app, never in the background.

• It takes one reading for the day, and the first place noted for a day is kept. The coordinates are rounded to about 100 meters (three decimal places) before they’re used or stored.
• Apple’s MapKit turns the rounded point into a town or city name. Everkept never stores a street address.
• Apple Weather (WeatherKit) looks up the day’s weather for the rounded point: a few times a day at most for today, and once for a past day.

To turn it off, switch off Note where each day happened in Everkept’s settings, or change Everkept’s access in your device’s Location Services settings.

Photos

• Adding a photo. You choose photos in the system’s photo picker, and Everkept only receives the ones you pick.
• Unwritten years in Echoes. If you allow it, Everkept looks in your Photos library, on your device, for photos taken on the same date in earlier years, so days you never wrote down can come back to you. Nothing from your library is uploaded unless you choose to keep a photo in your journal. You can switch this off with Show unwritten years from Photos in Everkept’s settings.

Microphone

Everkept uses the microphone only while you’re recording a voice note or asking a question out loud. Voice notes you keep are saved in your journal.

Moments (Journaling Suggestions)

On iPhone, Everkept can open Apple’s Journaling Suggestions picker. Apple shows the suggestions in its own sheet, and Everkept can’t see them. Only the moment you choose, such as the photos from a walk, a song, a workout or a place, is passed to Everkept, which keeps it on that day’s table.

Face ID seal

Everkept can seal itself whenever you leave and open again with Face ID, Touch ID or your passcode. Your device handles this; Everkept never sees your face or fingerprint data, only whether you were recognised.

What we don’t do

• No account or sign-in, of ours or anyone else’s.
• No analytics, advertising or tracking, and no third-party SDKs. Everkept is built only on Apple’s frameworks.
• We don’t collect, sell or share personal data. We don’t have it.

If you’ve chosen to share analytics with app developers in your device’s privacy settings, Apple may send us anonymous crash reports. You control that in Settings, under Privacy & Security, then Analytics & Improvements.

Apple’s services

Everkept relies on Apple for iCloud storage and sync, MapKit place names, Apple Weather, and the on-device models for Apple Intelligence and speech. When your device uses these services, Apple’s privacy policy applies.

Deleting your data

• One thing: remove it from its day in the app.
• Everything on a device: delete the app from that device.
• Everything in iCloud: on iPhone or iPad, open Settings, tap your name, then iCloud, then Manage Storage (sometimes called Storage), choose Everkept and delete its data. On a Mac, open System Settings, click your name, then iCloud, then Manage. The wording varies a little between system versions.

We don’t hold a copy, so there’s nothing for us to delete on our side.

Children

Everkept isn’t directed at children under 13, or the equivalent minimum age where you live. We don’t knowingly collect personal information from anyone, including children, because Everkept doesn’t collect personal information. A parent or guardian can remove a child’s journal as described above.

This website

everkept.day is a static site. It sets no cookies, runs no analytics and loads nothing from other companies; even its fonts are served from here. If you switch between light and dark, that choice is remembered in your browser’s local storage and never sent anywhere. The service that hosts the site may keep standard server logs, such as IP addresses, for security.

Changes to this policy

If this policy changes, we’ll post the new version here with a new effective date.