Privacy Policy
Last Updated: December 21, 2025
QoopLabs OÜ ("we", "our", or "us"), a company registered in Estonia, operates the Evozen mobile application (the "Service").
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
1. Information Collection and Use
We are a "Privacy-First" application. We do not require you to create an account, provide your email, or share your name to use Evozen.
Our data collection is minimal and designed to protect your anonymity.
A. Local Data (Default)
By default, all your journal entries, mood logs, and tags are stored locally on your device using your phone's native storage. We do not have access to this data.
B. Anonymous Cloud Backup (Optional)
If you choose to enable the "Cloud Backup" feature, we store an encrypted copy of your data on our secure cloud servers (Google Firebase).
- Encryption: Your data is encrypted on your device using a "Recovery Key" before it is uploaded. We do not have access to your Recovery Key. Therefore, we cannot read or decrypt your journal entries.
- Identity: We use an anonymous identifier generated by RevenueCat to associate your encrypted data with your device. We do not link this identifier to your name, email, or phone number. We may alias this identifier with your anonymous Recovery Key to facilitate data restoration, but this link remains disconnected from your personal identity.
2. Third-Party Services
We use trusted third-party services to operate the Service, handle infrastructure, and support the app via advertising.
A. Advertising
To keep Evozen free to use, we display advertisements.
- Google AdMob: We use Google AdMob to serve ads.
- AdMob may collect and use identifiers (such as your Advertising ID) and usage data to serve personalized or non-personalized ads.
- This data collection is governed by Google's privacy policy.
- https://policies.google.com/privacy
B. Purchases & Infrastructure
- RevenueCat: We use RevenueCat to manage in-app purchases and anonymous user identity.
- Google Firebase: We use Firebase for:
- Cloud Firestore: To store your encrypted backups (if enabled).
- Remote Config: To update app features and configuration remotely without an app update. This may collect anonymous device attributes (e.g., OS version, language) to serve the correct configuration.
- https://firebase.google.com/support/privacy
3. Data Retention
- Local Data: If you delete the app, your local data is permanently deleted.
- Cloud Backup: If you enable Cloud Backup, your encrypted data is retained in Firebase. You can delete this data at any time by using the "Delete Cloud Backup" option in the app settings or by contacting us with your RevenueCat ID.
4. GDPR Rights (EU Users)
Under the General Data Protection Regulation (GDPR), you have rights regarding your personal data.
- Right to Access: You have full access to your data because it lives on your phone.
- Right to Erasure: You can erase all your data at any time by uninstalling the app (for local data) and using the "Delete Cloud Backup" feature (for cloud data).
- Right to Portability: If you use Cloud Backup, you can restore your data to a new device using your Recovery Key.
Note on "Zero-Knowledge" Encryption: Because your cloud backups are encrypted with a key that only you possess, we technically cannot "access" or "process" the content of your journals, even though we host the file.
5. Security
The security of your data is important to us.
- Local Data: Protected by your device's security (passcode/FaceID).
- Cloud Data: Protected by Client-Side AES-256 Encryption. Even if our servers were compromised, your data would remain unreadable without your personal Recovery Key.
6. Children's Privacy
Our Service does not address anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 13.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us:
By email: [email protected]