Draft for review: fill in the highlighted details in site/config.json and have a lawyer check this page before you publish it.
Evochi Join the beta
Legal

Privacy policy

What Evochi collects, why, and the controls you have. We've written it to be read, not skimmed past.

Effective [date] · Applies to the Evochi app for iPhone and Android and to this website.

The short version

  • With your permission, Evochi reads one thing from Apple Health or Health Connect: your step count. It never writes health data and never reads heart rate, sleep, location or anything else.
  • We keep daily step totals and your game progress. Detailed step samples are folded into daily totals after 14 days.
  • We don't sell your data, and we never use step data for advertising.
  • Anonymous usage events are off unless you switch them on, and never include health data.
  • You can export or delete your data at any time from Settings → Privacy & data.

Who we are

Evochi is made by [Studio legal name] ("we", "us"), [registered address]. We are responsible for the personal information described in this policy. You can reach us about privacy at [privacy email].

What we collect

We only collect what the game needs. What we hold depends on whether you play as a guest or with an account.

TypeWhat it includesWhere it comes from
Step dataStep counts with their start and end times, and which app or device recorded them.Apple Health or Health Connect, only after you allow it.
Manual stepsStep totals you type in yourself.You.
Game dataYour Evochi's name, colourway and form; level, XP, vitality and bond; quests, EvoCoins and items; nest layout; past Evochi in the Hall of Memories; your step goal, account time zone and settings.Created as you play.
Account dataYour email address, or the identifier that Sign in with Apple or Google gives us. If you use Apple's Hide My Email, we only get a relay address.You, if you create an account. Guests don't have one.
Usage events (optional)Product events such as "onboarding finished", "quest claimed" or "item bought", with the app version and time. They never contain step or health data.The app, only if you turn on Share anonymous usage events.
Beta waitlist (website)Your email address, the egg colour you picked, your referral code, who referred you, and a salted hash of your connection address used only to limit abuse.You, when you join the waitlist on this website.
Support messagesWhatever you choose to send us.You.
Technical dataDevice model, operating system and app version, and crash reports [name your crash reporter, or delete this row if you don't use one].The app.

Guests: if you play without an account, your game data and step history are stored only on your phone. Accounts: if you sign in, your game data and step history are also stored on our servers so you can pick up where you left off on a new phone.

We don't collect your location, contacts, photos, advertising identifiers or any health data other than steps.

The beta waitlist is used for one thing: inviting you to the beta, in waitlist order, by email. We don't add you to a newsletter. Your referral link tells us who you invited so you can both move up the line. To be removed, use the unsubscribe link in any email we send or write to [privacy email], and your entry is deleted. Waitlist entries are deleted when the beta ends.

How we use it

  • To run the game: turning steps into XP, EvoCoins and vitality, unlocking evolutions and keeping quests and your wallet accurate.
  • To keep things fair: matching step samples from your phone and watch so nothing is counted twice, and recording each coin transaction once so rewards can't be claimed twice.
  • To sync your progress across devices if you have an account.
  • To help you when you contact support.
  • To improve Evochi using usage events, only if you've turned them on.
  • To meet legal obligations and keep the service secure.

We don't use your information for advertising, we don't build advertising profiles, and we don't make automated decisions about you that have legal or similarly significant effects.

Legal bases (EEA, UK and Switzerland)

We rely on contract to provide the game you asked for; on your explicit consent for step data, which you give through your phone's Health permission screen and can withdraw at any time; on consent for usage events; on our legitimate interests for security and fraud prevention; and on legal obligation where the law requires us to keep or disclose information.

Step data from Apple Health and Health Connect

Step data is health-related, so we hold ourselves to stricter rules for it:

  • We ask for read access to step count only: "Steps" in Apple Health, and the "Steps" permission in Health Connect. We never ask to write data.
  • We use step data only to provide Evochi's gameplay.
  • We don't sell step data, use it for advertising or marketing, or share it with data brokers or information resellers.
  • We don't use step data to decide anyone's eligibility for credit, insurance, employment or similar.
  • We don't store step data in iCloud.
  • People at [Studio legal name] don't look at your step data, unless you ask us to while we help you, it's needed for security or to investigate abuse, or the law requires it.
  • We only pass step data to service providers who store or process it for us to run Evochi, under contracts that keep it confidential.

Evochi's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

You can stop Evochi reading steps at any time. iPhone: open the Health app, tap your profile picture, then Apps → Evochi, and turn off Steps. Android: open Health Connect, then App permissions → Evochi. Evochi keeps working, and you can add steps by hand.

When we share data

We share personal information only in these cases:

  • Service providers who host and process data for us, such as [cloud hosting provider], [support email tool] and [crash reporter]. They may only use it to provide their service to us.
  • Sign-in providers. When you sign in with Apple or Google, they handle your sign-in under their own privacy policies.
  • The law. If we're legally required to, or need to protect the safety, rights or property of our players, us or others.
  • A change of ownership. If [Studio legal name] is involved in a merger or sale, your information may transfer, and this policy will keep applying to it. We'll tell you before that happens.
  • With your permission, in any other case.

We don't sell personal information, and we don't share it for cross-context behavioural advertising, as those terms are defined in California law.

How long we keep it

DataHow long
Detailed step samplesUp to 14 days, then merged into daily totals.
Daily step totals and game dataWhile you keep your account. Deleted when you delete it.
Guest dataOnly on your phone, until you delete it in Settings or uninstall the app.
Usage events[e.g. 14 months], never linked to step data.
Support messages[e.g. 2 years] after the conversation ends.
BackupsDeleted data drops out of backups within [e.g. 35 days].

Your choices and rights

In the app

  • Export: Settings → Privacy & data → Export my data gives you a copy of your game data and step history.
  • Delete: Settings → Privacy & data → Delete all data removes everything. You can also ask without the app on our account deletion page.
  • Usage events: switch Share anonymous usage events on or off whenever you like.
  • Step access: turn it off in Apple Health or Health Connect, as described above.
  • Reminders: off unless you turn them on, and quiet hours apply.

Your legal rights

Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your information; to object to or restrict how we use it; to withdraw consent; and to not be treated differently for using these rights. People in the EEA, UK and Switzerland can also complain to their data protection authority. Residents of some US states can appeal if we turn down a request, by replying to our decision.

To use any of these rights, email [privacy email]. We may need to confirm the account is yours. We'll reply within the time the law requires, usually one month.

Children

Evochi is meant for people aged 13 and over, or older where local law requires a parent's consent to use apps like this one. We don't knowingly collect personal information from children under 13. If you think a child has given us information, email [privacy email] and we'll delete it.

Security

Data is encrypted in transit, and only people who need it to run Evochi can access it. We store account data with [cloud hosting provider]. No system is perfectly secure, so if we ever learn of a breach that affects you, we'll tell you and the relevant authorities as the law requires.

International transfers

We and our service providers may process information in [countries where your providers process data]. When information leaves the EEA, UK or Switzerland, we use legal safeguards such as the European Commission's Standard Contractual Clauses.

This website

This website doesn't use cookies, analytics or advertising trackers, and its fonts and images are served from this site. Our host keeps standard server logs (IP address, browser and pages requested) for security for [e.g. 30 days]. If you pick a colourway on the home page, your browser remembers it in local storage. It never reaches us.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app before it takes effect, and ask for your consent again where the law requires it.

Contact us

[Studio legal name]
[registered address]
[privacy email]

[If you're outside the EU or UK but offer Evochi there, name your EU and UK representatives here.]