Privacy Policy

Last updated: October 4, 2026

GMT Consulting LLC ("Evenia", "we", "us", "our") operates the Evenia application and website at https://evenia.app (together, the "Service"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have. By using the Service you agree to this Policy.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the data controller is GMT Consulting LLC, United States. You can contact us at support@evenia.app.

1. Who can use the Service

The Service is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us at support@evenia.app and we will delete it.

2. What data we collect

a) Data you provide

Account data: name (or first name), email address, password (stored only as a secure hash), language, timezone.
Profile and practice data: your goals, intentions, desired outcomes, current situation, perceived blocks, chosen methods, reminder times.
Content you create: journal entries, affirmations, scripting, gratitude notes, "evidence" entries (wins, synchronicities), vision-board items and any photos you upload, mood check-ins. Some of this content may reveal sensitive information about your beliefs, feelings, relationships or health. You choose what to write; please avoid entering data you do not want us to process.
Support communications and anything you send us by email or in-app.

b) Data we collect automatically

Usage data: features used, sessions completed, streaks, pages viewed, approximate time of use.
Device and technical data: device type, operating system, browser, language, IP address, and identifiers needed to deliver push notifications.
Cookies and similar technologies used to keep you logged in and to understand basic usage (see Section 9).

c) Data from payment and third parties

When you subscribe, our payment processor (Stripe) collects your payment details directly. We do not receive or store your full card number. We receive limited data such as your subscription status, plan, billing country and the last four digits/card brand.

3. How we use your data (and legal bases under GDPR)

To provide the Service — create your account, generate your personalized plans, affirmations, sessions and recaps, save your journal and progress, send reminders. Legal basis: performance of a contract.
To generate personalized content using AI. Your goal, situation and recent entries are sent to our AI provider to produce text (and, where you request it, audio) tailored to you. Legal basis: performance of a contract.
To process payments and manage your subscription. Legal basis: performance of a contract and legal obligation.
To send service communications (welcome, receipts, reminders you enabled, security notices). Legal basis: performance of a contract / legitimate interest.
To send optional marketing emails, only if you opt in, with an unsubscribe link in every message. Legal basis: consent.
To secure, maintain and improve the Service, prevent fraud and abuse, and comply with law. Legal basis: legitimate interest / legal obligation.

Where we rely on consent (e.g. marketing, certain cookies, push notifications), you can withdraw it at any time.

We do not sell your personal data, and we do not use your private journal content to train third-party AI models.

4. Who we share data with (subprocessors)

We share data only with service providers that help us run the Service, under contracts that require them to protect it:

Supabase (database, authentication, file storage) — hosting of your account and content.
Stripe (payments and subscription billing).
Lovable AI gateway, with models from Google and OpenAI (generation of personalized text and audio).
Lovable email infrastructure (transactional and, if enabled, marketing emails).
Web push services provided by your browser and device OS.

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a merger, acquisition or sale of assets (you will be notified).

5. International data transfers

Our providers may process data in the United States and other countries outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable).

6. How long we keep your data

We keep your account and content for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except data we must keep for legal, accounting or fraud-prevention reasons (for example, invoices, which tax law may require us to retain for several years). Backups are deleted on a rolling basis.

7. Your rights

Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent. You can exercise many of these directly in the app (edit profile, export your data, delete account) or by contacting support@evenia.app. We will respond within the time required by law.

EEA/UK users: you also have the right to lodge a complaint with your local data protection authority.

California users (CCPA/CPRA): you have the right to know, delete, correct and opt out of "sale"/"sharing" of personal information. We do not sell your personal information. To exercise your rights, contact support@evenia.app. We will not discriminate against you for exercising them.

8. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, access controls and row-level security so each user can access only their own data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

We use strictly necessary cookies to keep you logged in and the Service working, and limited analytics/storage to understand usage and remember preferences. You can control cookies through your browser settings. Where required, we ask for your consent before using non-essential cookies.

10. Push notifications

If you enable reminders, we send push notifications to your device and/or emails at the times you choose. You can turn them off at any time in the app settings or your device settings.

11. Not medical or professional advice

The Service supports a personal mindset and journaling practice. It does not provide medical, psychological, financial or legal advice, and is not a substitute for professional care. If you are in crisis or need help, contact a qualified professional or your local emergency services.

12. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with an updated date and, for material changes, notify you by email or in the app.

13. Contact

Questions or requests: support@evenia.app — GMT Consulting LLC, United States.