Privacy Policy

The controller for your personal data is Wizard Dynamics. You can reach us about anything in this policy — including requests to access or delete your data — at manu.check24@gmail.com.

We keep data collection to the minimum the app needs to work. We never sell your data, never use it for advertising, and never track you across other apps or websites.

• Host account (if you create events): your name and the email address from Sign in with Apple — Apple may give us a private relay address. Used to sign you in and manage your events. You can also continue without an account (guest mode), in which case we hold no name or email for you.
• Photos and event content: the photos guests and hosts capture in the app, plus event details such as the event name and date. This is the core of the service — collecting your event’s photos and showing them at the reveal.
• Identifiers: a user ID that links your data to you, and a device identifier used by our payments provider to attach a purchase to your device.
• Purchases: which event package you bought, via Apple In-App Purchase. Apple processes the payment — we never receive your card or bank details.

No location, no contacts, no health data, no browsing history. Everlens contains no advertising SDKs and no cross-app tracking, and it does not use the advertising identifier (IDFA). The app therefore does not ask for App Tracking Transparency permission.

Guests join an event anonymously by scanning the host’s QR code. No sign-up or email is required — a guest only provides the photos they choose to take and, if they like, an optional first name that is shown with their photos in the event gallery.

Photos belong to the event. They are private: visible to the event’s host and — depending on the host’s settings — to the other guests of that same event, and only after the host reveals the roll. Photos are not public and are not indexed by search engines.

We rely on a few trusted providers who process data on our behalf, solely to run the service:

• Supabase — database, photo storage, and authentication (servers in the United States).
• Apple — Sign in with Apple, In-App Purchase, and push notifications.
• RevenueCat — manages in-app purchases.

Each provider processes data under its own privacy terms and our agreements with them.

Our backend is hosted in the United States. Where data is transferred out of your country, we rely on appropriate safeguards such as the providers’ standard contractual clauses.

We keep event data and photos until the host deletes the event or their account, or asks us to delete it. After that we remove it from active systems. Backups are rotated regularly.

If you are in the EU/EEA or the UK, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can withdraw consent at any time. To exercise any of these, email manu.check24@gmail.com. You may also complain to your local data protection authority.

Everlens is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Data is encrypted in transit (HTTPS/TLS), and access is restricted by row-level security rules so that one event’s photos are never exposed to another event.

We may update this policy from time to time. The date at the top shows the latest version; material changes will be highlighted in the app or on this page.

Wizard Dynamics — manu.check24@gmail.com.