Eva privacy notice (beta)

DRAFT for legal review. Written from what the code does on 2026-10-17. Replace every [bracketed] item, and have a lawyer check it for the countries you launch in, before it's shown to the public.

[Company name], [address] ("we") runs Eva, a personal assistant that books and orders for you at businesses, with your approval. This notice says what Eva keeps, why, who else sees it, and how to delete it. Contact: [privacy@your-domain].

What Eva keeps

• Your chats with Eva: the last 60 messages of each, their titles, and in the iPhone app a copy on your phone. Delete a chat in the app, or clear one with /reset. A private chat isn't added to what Eva remembers, and is deleted when you leave it or after a day. Older messages are dropped after Eva writes a short summary of them, which you can see with /memory and delete with /forget summary (which also deletes the earlier summaries she keeps for search).
• How Eva reaches you: your Telegram or WhatsApp identifier, or an identifier for your iPhone, and a notification token for your phone.
• What you tell Eva to remember: a profile (name, email, phone, delivery address, time zone) and short notes ("no cilantro"). Eva also notes lasting preferences you mention ("allergic to penicillin"), unless you turn that off with /memory auto off. After a booking or order, she may ask whether to remember a pattern she noticed (the same dentist three times, say); nothing is saved unless you say yes. She tells you every time she saves or changes something. You can see and delete it with /profile, /memory and /forget, or in the app's Settings.
• People who matter to you, as you describe them: names, relationships, dates such as birthdays, and short facts ("loves orchids"). This is information about other people that you choose to share; Eva uses it only to help you (reminders, ideas) and never contacts them. See and delete it with /people and /forget person.
• Quiet time and check-ins: until when you asked Eva to hold off, and the check-in questions you agreed to (deleted once sent, or with /reminders cancel).
• Learning goals you set: what you're learning, why, your level, when to check in, and short notes on what each lesson covered. See and delete them with /learning.
• Suggestions, only if you turn them on (/suggestions on): Eva looks at your bookings and orders at the places you connected to notice when something is due again, and keeps only when she last suggested what (for 60 days). Turn them off with /suggestions off.
• Reminders and watches you set, and reminders before appointments she booked. Finished ones are deleted after 14 days.
• Your busy times, only if you turn on "Share when I'm busy" in the iPhone app: the start and end of events for the next 30 days, never titles, places, notes or people. They're deleted when you turn sharing off or sign out, and after 7 days without an update.
• Your spending, only what you log: payments you tell Eva about, and, if you set up the Apple Pay automation in Shortcuts, each tap-to-pay payment's amount, merchant, card name and time. Also the monthly budgets you set and the categories you chose for places. Eva never sees your card numbers or bank accounts, and can't pay or move money. The newest 5,000 payments are kept, stored encrypted. See it with /spending, and delete it all with /forget spending or in the app's Settings › Spending.
• Your connections: the access you gave Eva at each business (stored encrypted), and the references of bookings and orders she made.
• Usage counts: how many messages Eva answered for you each day, and how much processing they took, for the beta's limits.

Sensitive items (connections, profile, notes, the summary, busy times, reminders, the messages Eva sends on her own) are encrypted on our servers.

The waitlist

If you join the waitlist at Eva's website, we keep your email address, where you came from (the link you followed, such as one in a video's caption), the day you joined and, if you write one, what you'd like Eva to do for you. We use them only to email you one invite when there's room in the beta, to count where people hear about Eva, and to decide what to build; we don't sell them or add you to marketing lists. The email and what you wrote are kept encrypted. To be removed, write to [privacy@your-domain].

Your platform account

Approvals happen in your account on the platform ([platform name]), separate from Eva: your email, the phones you signed in with (a public key from each phone, never the private key), the approvals you gave or denied with the signature that proves it, and the agents you connected. Other agents than Eva can use the same account.

Who else sees what

• Anthropic (the Claude models) processes your messages, profile, notes, summary, what businesses send back, and your spending totals and payments when you ask Eva about them, to write Eva's replies, keep the summary and pick out preferences. When Eva searches the web for you, the search runs through Anthropic and its search provider; Eva is told to put only what the question needs into a search, never your contact details or notes. [Confirm Anthropic's commercial terms: no training on API data, retention.]
• Apple, when you talk to Eva in the iPhone app or with Siri: Apple turns your speech into text, on your iPhone when it can, otherwise on Apple's servers under Apple's own terms, and your iPhone reads Eva's answers out loud. Eva receives only the text, never your voice.
• Businesses you use through Eva receive what each request needs: to link your customer record, the email or phone they already have for you; for a booking or order, its details, any notes, and for delivery your address. They keep their own records under their own privacy policies.
• Apple delivers notifications to your iPhone. Telegram and Meta (WhatsApp) carry your messages if you use Eva there.
• Microsoft Azure hosts Eva and the platform and sends sign-in emails.
• [A payment provider, once real payments are on.]

We don't sell your data and don't use it for ads.

Apple Health

If you turn on Apple Health sharing in the Eva iPhone app, the app reads your workouts, heart rate, heart rate variability, resting heart rate, sleep, steps and VO2 max on your iPhone, and sends them to the Eva apps you allowed to read them (Training, Sleep), which keep them to show your training and recovery. Eva passes them on and does not keep them herself. Health data is never used for advertising, never sold, and never shared with anyone else. Turn sharing off in Settings at any time; disconnecting Training or Sleep deletes what that app kept. Eva never writes to Apple Health. [Have your lawyer review this section.]

Health information

Booking a dental appointment can reveal something about your health. Please don't send Eva medical details: she only needs what the booking needs. [Decide and state your position on health-data laws, e.g. HIPAA, before real patients use it.]

Deleting your data

• Send Eva /delete, then /delete confirm: everything above that Eva keeps is deleted, on every app you use her in, and her access at every business is revoked.
• In the iPhone app, Settings › Delete account deletes your Eva account and your platform account. On the web, the platform's account page has the same.
• Bookings and orders stay with the businesses, as their records.

Age

The beta is for people 18 and over.

Changes

We'll tell you in Eva before a change that affects how your data is used. Last updated: [date].