This policy covers the EvyOS app at app.evyos.com, this website and the free tools and games on it, and the EvyOS connector for AI assistants. Using EvyOS is also subject to our terms of service.

On this page

  1. Who we are
  2. What we collect
  3. How we use it
  4. Who else handles it
  5. What you choose to share
  6. Cookies and local storage
  7. How long we keep it
  8. Your choices and rights
  9. Security
  10. Children
  11. Where it is processed
  12. Changes to this policy
  13. Contact

Who we are

EvyOS is operated by Obhox LLC (“EvyOS”, “we”, “us”), which is responsible for the personal information described in this policy.

Questions and requests about your information go to hello@evyos.com.

What we collect

When you create an account

Sign-in is handled by Clerk. We receive your email address, your name, your profile photo if you have one, and an account identifier. We never see your password.

What you put into EvyOS

  • Goals, projects, milestones, tasks, sub-tasks and comments, and the names and links of attachments
  • Habits and the days you complete them, and skills with the practice time you log
  • Notes, their folders and earlier versions, and calendar events
  • Links you make between records, and a history of the changes made to them
  • Workspaces you create or join, and who is in them

Settings and answers

Your time zone, read from your browser; your notification preferences; your plan; and the answers you give during setup about what you want EvyOS to help with.

Payments

Paid plans are billed through Clerk Billing, which uses Stripe to take payments. They handle your card details. We receive only which plan you are on and whether it is active.

How you use EvyOS and this site

The pages you visit, the features you use and what you click on, the device and browser you use, error reports, and an approximate location worked out from your IP address. When you are signed in, this is linked to your account, including your email address and name. Some of the tools we use for this can record a replay of how a page was used, such as clicks, scrolling and mouse movement, which helps us find where the interface is confusing.

Our servers also see your IP address with each request. We use it to limit abuse, and it appears in our server logs.

Free tools and games

The timers, calculators and games on evyos.com work without an account, and most keep what you enter in your own browser only. A shared timer stores its label and timing on our servers, and a game room stores the display names and answers players enter. Neither is linked to an account.

How we use it

  • To run EvyOS: store your records, keep them in step across your devices, and show them to you and the people you share them with
  • To send the email and push notifications you have switched on
  • To manage your plan and its limits
  • To keep the service secure, prevent abuse and fix problems
  • To understand how EvyOS is used, so we can improve it
  • To reply when you contact us

We do not sell your personal information, we do not show ads, and we do not use your content to train AI models.

Who else handles it

We use these service providers to run EvyOS. They handle personal information on our behalf, for the purposes listed.

  • Clerk: sign-in, account management, shared workspaces and billing
  • Stripe, through Clerk Billing: payments
  • Vercel: hosting for the app and this site, and app usage analytics
  • PostHog: product analytics for the app and this site
  • Google Analytics: usage analytics for the app and this site
  • Microsoft Clarity: usage analytics and session replays for the app and this site
  • Falorb: usage analytics for the app and this site
  • Bund: a widget on this site
  • OneSignal: push notifications, if you turn them on
  • Resend: delivering notification emails

Our API and database run on servers we manage.

We may also disclose information when the law requires it, to protect the rights, safety or property of our users or others, or as part of a sale or transfer of EvyOS, in which case this policy continues to apply to it.

What you choose to share

  • Shared workspaces. Everyone in a workspace can see the records in it and who else is a member. An invite link works for anyone who has it, for 7 days.
  • Public note links. When you share a note, anyone with the link can read its title and content until you turn sharing off.
  • Plan share links. A plan you share travels inside the link itself, in the part after the # sign, which browsers do not send to our servers. Anyone you give the link to can see the plan.
  • Shared timers and game rooms. Anyone with the room code can see the timer, or the players’ names and answers.
  • AI assistants. If you connect ChatGPT, Claude or another assistant, it can read your records and, if you allow it, create, change and delete them. What its provider does with that information is covered by the provider’s own terms and privacy policy. We keep only hashed copies of the keys a connection uses, and you can disconnect in Settings at any time.

Cookies and local storage

  • Signing in. Clerk sets cookies that keep you signed in. EvyOS does not work without them.
  • Preferences and speed. The app keeps small settings in your browser, such as the workspace you last chose, and a copy of your data for up to 24 hours so it opens quickly. That copy is cleared when you sign out. The free tools keep what you enter in your browser too.
  • Analytics. PostHog, Google Analytics, Microsoft Clarity, Falorb and Vercel use cookies or local storage to count visits and understand how the product is used. The PostHog cookie is shared between evyos.com and app.evyos.com, so a visit to this site and a later sign-up are recognised as the same person.

You can block or delete cookies in your browser settings. Blocking analytics does not stop EvyOS working; blocking Clerk’s cookies does. Google offers an opt-out browser add-on for Google Analytics.

How long we keep it

  • Your account and your content are kept for as long as your account exists.
  • Items you delete disappear from EvyOS straight away but remain in our database until your account is deleted. Notes you delete permanently from the trash are removed at once.
  • Shared timers expire 24 hours after they finish or were last used, and game rooms 6 hours after their last activity. Both are then removed.
  • Analytics data and server logs are kept for as long as the tools that hold them retain them, for understanding usage, security and debugging.

When you ask us to delete your account, we delete it and your content within 30 days, unless we must keep something to meet a legal obligation. Copies in backups may last for a short time after that.

Your choices and rights

  • Export. Download your goals, projects, tasks, habits, skills, notes and events as JSON or CSV from Settings. For a complete copy of everything we hold about you, email hello@evyos.com.
  • Correct. Change your name, email address and photo in your account settings, and edit anything you have created.
  • Delete. Email hello@evyos.com from the address on your account, and we will delete your account and your content.
  • Notifications. Switch each kind of email and push notification on or off in Settings.
  • AI assistants. Disconnect any assistant in Settings, and its access ends immediately.

Depending on where you live, you may have more rights over your information, such as to know what we hold, to have it corrected or deleted, to object to or restrict some uses of it, and not to be treated differently for using these rights. Residents of California and other US states with privacy laws have rights like these. We do not sell personal information or share it for targeted advertising.

If you are in the European Economic Area or the United Kingdom, we rely on our contract with you to run EvyOS, and on our legitimate interests to keep it secure and improve it. You can complain to your local data protection authority.

To make any of these requests, email hello@evyos.com. We reply within 30 days, and may need to confirm it is you first.

Security

Information is encrypted in transit. Access to our systems is limited, the keys AI assistants use are stored only in hashed form, and passwords are handled by Clerk and never reach our servers. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Children

EvyOS is not meant for children under 13, and we do not knowingly collect their information. If you are under the age where you live at which you can agree to this yourself, you need permission from a parent or guardian. If you believe a child has given us information, email hello@evyos.com and we will delete it.

Where it is processed

Our service providers, including PostHog, process information in the United States, so your information may be handled in a country other than the one you live in, where data protection law may be different.

Changes to this policy

When we change this policy we update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

Contact

Obhox LLC, operating EvyOS. Email hello@evyos.com.

See also: Terms of service.