Privacy Policy
Last updated October 29, 2026
This policy explains what we collect, why, and the choices you have. evviro provides coaching, tracking and care team context. It does not diagnose, prescribe or replace licensed care.
Who we are
Evviro Inc. ("evviro", "we", "us") operates the evviro website, the evviro app and the evviro platform for care teams and organizations. Contact: Evviro Inc., 8 The Green, Ste R, Dover, DE 19901, United States, contact@evviro.com.
What we collect
- Account data: name, email, phone number if you give it, country, time zone, sign-in and security settings.
- Health and wellness data you choose to enter: medications, peptides and supplements with amount, unit and date, symptoms, mood and check-ins, questionnaire answers, meals, protein and water, body measurements, lab results you upload, and what you tell Aiden by text or voice.
- Data from connected devices: only when you connect a wearable or your phone's health data, and only the data types you allow, such as sleep, heart rate, heart rate variability, recovery and activity.
- Payment data: processed by our payment provider. We receive your plan, payment status and the last digits of your card. We never see or store your full card number.
- Business contact data: what you send us through forms or email as a provider, organization or partner.
- Technical data: device type, app version, error reports and security logs. On this website, standard request logs (IP address, browser type, page requested and time) are recorded to deliver and protect the site, and Google Analytics counts visits with page addresses and event names only, never what you type into a form. The evviro app uses no analytics, no advertising pixels and no ad trackers.
Why we use it
- To run your membership and the features you use, including Aiden's memory, reminders and check-ins.
- To share information with your clinician or care team, only for the data types you have allowed.
- To keep you safe: if you describe a medical emergency or a crisis, we show emergency resources such as 988 and may inform your connected care team as described in the app.
- To process payments, prevent fraud, secure our systems and meet legal obligations.
- To improve evviro using aggregated or de-identified information.
Consent and your choices
You decide, per data type and per clinician, what your care team can see, and you can change that at any time in the app. Substance use information is not shared by default. Private reflections are never shared. Aiden's memory can be switched off at any time, and you can choose to keep or delete what was remembered.
AI
Aiden is an AI coach, not a person and not a clinician. Conversations are processed by AI models in our own secured cloud environment to generate replies. We govern Aiden under an AI management system based on ISO/IEC 42001: every answer passes safety checks and is traced in an audit log so it can be reviewed. We do not use your health data to train third-party AI models.
Who we share data with
- Your care team, only as you allow in the app.
- Service providers that help us run evviro under contract (cloud hosting, payments, app stores and notification delivery, website hosting, scheduling and email), and the devices and services you choose to connect. Each receives only what it needs. Notifications never contain health details.
- Organizations that provide evviro to you, such as a clinic or health plan, under their agreement with us.
- Authorities when required by law or to protect someone's life.
We do not sell personal data and we do not share it for advertising.
Where data is stored and how it is protected
Data is stored with Amazon Web Services in the United States, encrypted in transit and at rest. Access is limited to people who need it, and every access to clinical data is logged. If you use evviro from outside the United States, your data is transferred to the United States with safeguards required by applicable law.
How long we keep data
We keep your data while your account is active. After you close your account we delete or de-identify it, except where we must keep records, such as audit records of AI answers and safety events, payment records and records required by health or tax laws, which we keep for the period those laws require, generally up to 6 years.
Your rights
Depending on where you live, including California, Washington, other US states and the European Union, you can ask to access, correct, download or delete your data, withdraw consent, and object to or restrict certain uses. In Washington and other states with consumer health data laws, we ask for your separate consent before collecting and before sharing consumer health data. Write to contact@evviro.com. We will not treat you differently for using your rights.
Health privacy laws
When a clinic, health plan or other covered organization provides evviro to you, we may handle your information on its behalf under a business associate agreement, and its notice of privacy practices also applies. If a breach of your health information occurs, we will notify you and regulators as required by law.
Age
evviro is for adults 18 and older. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy in a meaningful way, we will tell you in the app or by email before the change takes effect.
Contact
Evviro Inc., 8 The Green, Ste R, Dover, DE 19901, United States. contact@evviro.com