Privacy Policy

The short version

Your health data stays on your device. Our server only ever receives anonymous daily step totals, your unlocked badges, and your device timezone and platform, tied to a random device identifier. There is no account, no email, no name. No ads, no third-party analytics, no tracking, and your data is never sold.

Data processed on your device

With your permission, Everest reads your step counts from Apple Health (HealthKit) on iPhone, or from Health Connect on Android. This detailed step history is processed locally, on the device, to compute your progress toward the next badge.

Everest never reads any other health data type: steps only. You can revoke this permission at any time in Apple Health or Health Connect settings.

Data stored on our server

To keep your progress if you reinstall, our server stores exactly five things: an anonymous device identifier (a random identifier stored in the iOS Keychain, or the Android app-scoped device identifier), your daily step totals (one number per day, nothing finer), your unlocked badges with their unlock dates, your device timezone (so days are counted in your local time), and the platform (iPhone or Android).

That server is self-hosted in the European Union (France). None of this data is linked to your name, email address or phone number, because we never collect those in the first place.

What we never do

Health data is never used for advertising, marketing or data mining of any kind, in line with App Store guideline 5.1.3 and Google Play health data policies.

We never sell data, never share it with data brokers, and embed no advertising or third-party analytics SDK in the app. Everest does not track you across other apps or websites.

Third parties we rely on

Apple: distributes the iPhone app through the App Store, provides HealthKit on your device, and processes subscription payments.

Google: distributes the Android app through Google Play, provides Health Connect on your device, and processes subscription payments.

RevenueCat: manages our subscriptions. RevenueCat receives the same anonymous device identifier and store purchase receipts, so your subscription can be validated and restored. RevenueCat never receives any health or step data.

That is the complete list. No other company receives any data from Everest.

Payments

Payments are processed entirely by Apple or Google through your store account. We never see or store your card details.

Retention and deletion

Server data is kept for as long as you use Everest. Uninstalling the app stops all syncing. To have your server data deleted, email support@geteverest.app and include the device identifier shown in the app settings; we delete it within 30 days.

Your rights (GDPR)

Under the EU General Data Protection Regulation you can request access, rectification, erasure, restriction, portability, or object to processing. Write to support@geteverest.app. You can also lodge a complaint with your local supervisory authority (in France, the CNIL).

Legal bases: performance of the contract (syncing your progress and subscription), your consent (health permission, notification permission), and our legitimate interest in operating and securing the service.

Children

Everest is not directed at children under 13 and offers no account or social features.

Changes to this policy

If this policy changes, the new version is posted on this page with an updated date. Significant changes are announced in the app.