Privacy Policy

1. Who is responsible for your information

Evenload, LLC is the data controller responsible for personal information processed to provide Evenload. This policy covers our website and family-care coordination service. Contact us about privacy at hello@getevenload.com.

Evenload is an organizing tool, not a healthcare provider or an emergency service. Information you put in a circle may be sensitive. Only share information about another person when you have the authority and any consent required to do so.

2. Information we collect and why

• Account and profile information: name, email, optional phone number and photo, sign-in credentials or authentication information, preferences and account dates. We use this to create and secure accounts, identify circle members and honor your settings. If you sign in with Google, we may receive profile information, including a profile photo.
• Care-circle information: care-recipient names, relationships, photos, members, roles, invitations, calendars, tasks, medication information, care-team contacts, medical-card details, notes and uploaded documents. We use this to provide the shared organizing tools you choose to use. Records may include health information, insurance details and information about people who do not have their own accounts.
• Shared-expense information: amounts, contributors, settlements, descriptions and uploaded receipts. We use this to help authorized circle members coordinate shared costs, not to process payments between family members.
• Invitation and notification information: recipient email or phone, invitation status, circle details and notification preferences. We use this to invite people, provide requested updates and manage participation.
• Employer and subscription information: organization name, contact details, work-email verification or access-code information, eligible headcount, selected plan and billing identifiers or status. We use this to manage employer sponsorship, subscriptions and aggregate reporting.
• Support and technical information: messages you send us and technical records such as IP addresses, device or browser information, request timestamps and error details when generated by the service or its providers. We use this to respond to requests, troubleshoot problems, protect against abuse and maintain the service.

Payment details entered at checkout are handled by Paddle under its own privacy notice. We do not ask you to send full card details to us.

3. Legal bases for processing

Where applicable law requires a legal basis, we process information to perform our agreement with you and provide the service; for legitimate interests such as security, fraud prevention, support and service maintenance; to meet legal obligations; or with consent when required. Where consent is required for sensitive health information or optional processing, you may withdraw it by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

Information about a care recipient should be shared only with the appropriate authorization and any legally required consent. We do not use care records for advertising.

4. Who can receive information

• Your circle: members can see shared information according to their roles. Organizers manage access. Members may download or print information they can access, and those copies are outside our control.
• Service providers: hosting, authentication, storage, email delivery, support and technical monitoring providers process information to operate the service. We use Lovable Cloud for hosting, accounts and storage, and Lovable's managed email service for email delivery. An invitation email may include the inviter's name, circle name and care-recipient name.
• Paddle: our Merchant of Record receives information needed for product sales, subscription management, payments, tax compliance and invoicing. See Paddle's Privacy Policy.
• Google: when you choose Google sign-in, Google handles authentication. Our pages also load fonts from Google Fonts, which can receive technical request information such as your IP address.
• Employers: sponsoring employers receive aggregate participation and usage figures, not individual family care records. Reports suppress small groups, with a minimum group size of 10 people. Employers do not receive your medications, care notes, documents or private circle details through the employer dashboard.
• Professional advisers and authorities: information may be disclosed to legal or accounting advisers, or to authorities when required by law or necessary to address a lawful request or protect rights and safety.

We do not sell your personal information or share private care records for targeted advertising.

5. How long we keep information

We keep account and shared-circle information while it is needed to provide the service. Retention depends on account activity, whether information is still shared in an active circle, requests for deletion, security needs and legal obligations. Billing, dispute and compliance records may need to be kept after service access ends.

When information is no longer needed, we delete or anonymize it, subject to applicable legal obligations and backup retention. Deleted information may remain in restricted backups until those backups expire. We do not promise immediate removal from every backup or from copies downloaded by other members.

Organizers can delete circles, which removes shared circle records and associated circle files. Closing your own account is different from deleting a circle and may require us to consider records shared with other members. Contact us to request account closure or discuss retention.

6. Your privacy choices and rights

You can update profile details and notification preferences in Settings, and manage records according to your circle role. To request access, correction, deletion, a copy of information, or account closure, email hello@getevenload.com. We may need to verify your identity before fulfilling a request.

Depending on your location and applicable law, you may also have rights to restrict processing, receive portable data, object to certain processing, withdraw consent, appeal a privacy-request decision or complain to a supervisory authority. We respond within the period required by applicable law. Where GDPR applies, this is generally one month, with lawful extensions when necessary. We will not discriminate against you for exercising applicable privacy rights.

7. Security

We use appropriate technical and organizational measures designed to protect personal information, including encrypted connections, account authentication, access controls and restricted access to private files. No online system can guarantee absolute security. Protect your account and invite only trusted people into your circle. Do not email sensitive medical records when making a routine support request.

8. Cookies and browser storage

We use essential browser storage to maintain sign-in sessions, remember functional preferences and carry invitation details through sign-up. Payment and sign-in providers may use their own essential storage. The app does not intentionally use marketing cookies or a separate advertising-tracking system.

You can clear or block cookies and site storage through your browser settings, but doing so may sign you out or prevent parts of the service from working. If we introduce non-essential analytics or marketing cookies, we will update this notice and provide any consent and preference controls required by law.

9. International processing and children

Our service providers may process information in the United States or other countries. Where applicable law requires safeguards for international transfers, we use legally recognized safeguards, such as adequacy decisions or standard contractual clauses, as appropriate. Contact us for information about safeguards relevant to your data.

Evenload accounts are intended for adults aged 18 and over. We do not knowingly offer accounts to children. If you believe a child has created an account or that information was shared without appropriate authorization, contact us.

10. Updates and contact

We may update this policy as the service or legal requirements change. We will update the effective date and provide notice of material changes where required.

For privacy questions or requests, contact Evenload, LLC at hello@getevenload.com.