Privacy
Your data is yours. Full stop.
Most health apps say "we take your privacy seriously." We took it so seriously we built the platform so that we literally cannot read your data. Here's how.
You hold the key
Your passphrase generates an encryption key on your device. We never see it.
Encrypted before it leaves
Symptoms, journal entries, and notes are encrypted before being sent to our servers.
We store ciphertext
Even if our database were copied, the contents would be unreadable noise.
Anonymous mode
Sign up without your real name. Your account can be just a passphrase.
Privacy by design
Zero-knowledge: your data stays with you. We can never read it.
What we collect
An email address (or just a username if you choose anonymous mode), and the encrypted blobs of your health data. That's the whole list.
What we don't collect
Your name (unless you tell us), your location, your contacts, your IP for tracking purposes, your usage analytics tied to your identity, or anything that could be sold.
Your rights
Export everything anytime. Delete everything in one tap. We honor it within 24 hours.
If you forget your passphrase
Because we don't have your key, we can't recover your encrypted data. That's the trade-off of true privacy. You can always start fresh — and your old encrypted blobs become permanently unreadable.
More questions?
Read the Privacy FAQ — straight answers about your passphrase, how Eva works, employers, and law enforcement.
Open the Privacy FAQ