Privacy Policy

Effective date: June 16, 2026 · Everwoven ("we," "us") is operated by Jeremy Dudley, Maple Grove, Minnesota, USA.

1. Information we collect

We collect only what is needed to run Everwoven:

• Account information: your name or display name, email address, role (mom/dad/parent), and a securely hashed password.
• Pregnancy profile: your due date (or estimate), whether you are expecting multiples, and pregnancy status (active, paused, arrived).
• Content you create: prayers, notes, letters, hopes, gratitude entries, journal entries, photos, audio recordings, baby-name lists, milestones, checklists, birth plan, registry, and appointments.
• Self-tracking data you enter: kick counts, contraction times, weight, symptoms, mood, water, sleep, bump photos, and optional blood-pressure and blood-sugar notes.
• Family & partner data: entries an invited partner adds, and blessings submitted by family through a shared link (held for your approval).
• Order & payment information: keepsake/merch orders and the shipping name and address you provide. Card payments are processed by our payment processor, Stripe; we do not receive or store your full card number.
• Technical data: the minimum needed to operate and secure the Service, such as a login session token kept in your browser. We do not use third-party advertising trackers.

2. Sensitive information and photos of children

Some information you choose to provide is deeply personal — including pregnancy and health-related details and photographs that may include children. You provide this voluntarily. We treat it as private by default and protect it as described below. Please only upload photos and information you have the right to share, and remember that you control what you add and can delete it at any time.

3. How we use information

• To provide the Service: show your daily content, save your quilt and tracking data, sync between your devices and an invited partner, and fulfill keepsake/merch orders.
• To operate, secure, troubleshoot, and improve the Service.
• To communicate with you about your account or orders, and to send optional reminders only if you turn them on.
• To comply with law and enforce our Terms of Service.

We do not sell your personal information. We do not use your private content (prayers, photos, audio, health data) for advertising, and we will not use it in marketing or testimonials without your explicit, separate permission.

4. Legal bases for processing (where applicable)

Where the GDPR, UK GDPR, or similar laws apply, we process your information to perform our contract with you (providing the Service), on the basis of your consent (for optional features such as reminders and for any use of sensitive data), to comply with legal obligations, and for our legitimate interests in operating and securing the Service. You may withdraw consent at any time.

5. How information is shared

We share information only as needed to run Everwoven:

• Service providers who process data on our behalf under contract: our hosting and database provider (Railway, including a PostgreSQL database), our payment processor (Stripe), our print-on-demand fulfillment partner(s) for any keepsake or merch you order, and the web-font provider (Google Fonts) used to display the site.
• An invited partner you add to your shared quilt (see Section 6).
• Legal & safety: if required by law, legal process, or to protect rights and safety.
• Business transfer: in connection with a merger, acquisition, or sale of assets, in which case this Policy continues to apply to your information.

We do not share your private content with advertisers or data brokers.

6. Partners and family-blessing links

If you invite a partner, they can see and add to your shared quilt and pregnancy data; entries are labeled by author. If you remove a partner, they lose access, though entries already added remain (clearly attributed) unless you delete them. Blessings submitted by family through your shared public link are held privately and appear or print only after you approve them.

7. Storage, security, and retention

We use reasonable technical and organizational measures to protect your information, including password hashing, access controls, and encryption in transit (HTTPS). Data is stored with our hosting provider (Railway/PostgreSQL) in the United States. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your personal content within a reasonable period, except where we must retain limited records to comply with law (for example, order and tax records) or to resolve disputes.

8. Cookies and local storage

Everwoven uses your browser's local storage to keep you signed in (a session token), to remember saved affirmations, and to queue entries you make offline so they sync when you reconnect. These are necessary for the app to function. We do not use third-party advertising or tracking cookies. If we ever add analytics or advertising, we will update this section and present a consent choice where the law requires one.

9. Your rights and choices

You can, at any time from within the app: export all your data, and delete your account and data. Depending on where you live, you may also have rights to access, correct, restrict, or object to processing, to data portability, and to lodge a complaint with a regulator. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of "sale" or "sharing" — and we do not sell or share your personal information as those terms are defined. We will not discriminate against you for exercising your rights. To make a request, use the in-app tools or contact us (Section 13).

10. Children

Everwoven is intended for adults (expecting parents) and is not directed to children. We do not knowingly create accounts for, or knowingly collect personal information from, children under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). Parents may choose to include photos or content involving their own children; that content is provided by the adult account holder. If you believe a child has provided us information, contact us and we will delete it.

11. International users and data transfers

We operate from the United States, and your information is processed in the United States and wherever our service providers operate. At launch, Everwoven is offered primarily to users in the United States. If you use the Service from outside the United States, you understand your information will be transferred to and processed in the United States, and where required we use appropriate safeguards for such transfers.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, where required, notify you. Your continued use after changes means you accept the updated Policy.

13. Contact us

For privacy questions or to make a data request, email privacy@everwoven.app, or write to Everwoven, c/o Jeremy Dudley, Maple Grove, Minnesota, USA.

See also our Terms of Service and Medical Disclaimer.