EveryCount Privacy Policy

Effective 16 October 2026.

EveryCount is made by Softcoder EOOD, 10 Stefan Karadzha Street, Sredet District, Sofia 1000, Bulgaria (EIK 208315231). We are responsible for the personal data described here. Contact: email@everycount.app.

At a glance

We show no ads, use no analytics or tracking, and never sell your data.

1. Without an account

Everything you create (counters, counts, notes, photos, categories, reminders, recaps and widgets) is stored only on your phone. Exports (spreadsheet, full backup or photos) are files that you save or send yourself. Photos you add stay on your phone. On Android they are not included in Google's app backup.

The app goes online without an account only to:

• show ready-made public counters when you start, and to open a share or public link you tap. This reads public content only;
• follow a public counter. We store a random ID for your phone (not linked to you) so we can count followers and let you unfollow. It is deleted when you unfollow or the counter is deleted;
• confirm the app is genuine when you follow, using Apple App Attest or Google Play Integrity.

Like any internet request, these reach our servers with your IP address. We don't keep request logs.

2. With an account

You only get an account if you choose to sign in. Signing in doesn't upload your counters.

• Sign-in. You sign in with Google or Apple. Google's Firebase Authentication keeps your sign-in identity, which can include your email address. We don't copy your email into our own database or use it to contact you.
• Profile. Your display name and @handle. Both are shown to people you share with and on public pages. You can change them at any time.
• Your phones. For each phone you sign in on, we keep a random ID, when it was last used and whether Sync is on.
• Activity updates (optional). If you turn them on, we keep your phone's notification token and a key for encrypting messages. Updates about shared counters are encrypted for your phone before they leave our servers. Google Firebase Cloud Messaging and Apple Push Notification service deliver them without seeing their content.
• Widget key (iPhone). A random key lets your home-screen widget send counts directly. We keep only a scrambled (hashed) copy, and it expires after 30 days.
• People you block. We keep who you blocked, so they can't join your counters. You can unblock them in You › Account › Blocked people.
• EveryCount Plus. Plus is a yearly subscription you can buy through the App Store or Google Play without an EveryCount account. RevenueCat, Inc. (USA) processes your purchase record and an anonymous app user ID. If you choose to sign in, your purchase is linked to your account ID so Plus can work across platforms. We do not see your payment details.

3. With Sync on

When you turn on Sync, all your counters and their full history upload to your account:

• counter names, types, units, icons, colours, dates and categories;
• every count, with its amount, time and note;
• your time zone, so days start and end where you are;
• photos you add to counts, if you have Plus. Before anyone else can see a photo, our servers check it automatically with Google Cloud Vision for sexual or violent content, and keep the result with the photo;
• on shared counters, who added each count.

Turning Sync off stops uploading but keeps your cloud copy. To remove it, delete your account.

4. When you share

Sharing needs Sync. You decide what each person can see, and you can change or stop it at any time.

• Invitation links show the counter's name, its value and your name to anyone who has the link. They work until they expire (within 24 hours), are used up or you revoke them.
• People you share with see either the totals only, or the full history including notes and who added each count. People you let add counts can also add their own.
• A public page lets anyone with the link see the counter's name, totals, daily chart, number of followers, your name, @handle and time zone. With full history it also shows each count, its note and who added it. Public pages can be found by search engines. Your profile page, u.everycount.app/your-handle, lists your public counters.
• Photos. People who see the full history also see the photos on its counts, once they pass the check. People who see the totals only see just the newest photo, behind the counter, without its count. Public pages show only the owner's photos that pass a stricter check, and with totals only just the newest; other people's photos are never public. A photo that doesn't pass is visible only to the person who added it, who can ask us to review it.
• Counts you add to someone else's counter become part of their counter. They and the people they share with can see them, and the owner can delete them.
• Reports. If you report a counter, a count or a person, we keep what you reported as it was then (such as the counter's name, the note, the photo and whose it is), the reason, anything you write, and your account. Without an account we keep a scrambled copy of your phone's ID instead. The person you report isn't told who reported them.

5. Why we use your data

• To provide what you asked for: your account, Sync, sharing and activity updates. This is our contract with you.
• To keep the service safe: confirming genuine apps, checking photos before others see them, preventing abuse, reviewing reports and fixing problems. These are our legitimate interests.
• Activity updates are sent only if you turn them on, and you can turn them off in the app or in your phone's settings.

We do not use your data for advertising, profiling or any other purpose.

6. Who handles data for us

• Google: Google Cloud and Firebase (sign-in, database, servers, App Check, Cloud Messaging), Cloud Storage for photos and Cloud Vision for checking them, Google Sign-In and Play Integrity. Our servers and database are in the USA (Oregon).
• Apple: Sign in with Apple, Apple Push Notification service and App Attest.
• Cloudflare: hosts the everycount.app website.
• RevenueCat (USA): processes EveryCount Plus purchases.

Data stored in the USA is protected by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework commitments of these providers.

7. How long we keep it

• Account, Sync and sharing data: until you delete it or delete your account.
• Leaving someone's shared counter: your counts stay in their counter until they delete them or you delete your account.
• Turning off a public page: the page disappears at once.
• Invitation links: removed automatically after they expire.
• Follows without an account: kept until you unfollow or the counter is deleted.
• Photos: until you remove them, delete the count or delete your account.
• Reports: up to 12 months, including a copy of a reported photo. If you delete your account, reports you made no longer point to you.
• Server diagnostic logs: up to 30 days. We don't keep request logs, and we keep no separate backups.

8. Deleting your data

• In the app: You › Account › Delete account. This removes:
  • your account, profile and @handle;
  • your counters, including for everyone you shared them with;
  • your counts in other people's counters;
  • your phones, your follows and the people you blocked.

Deletion finishes within 2 weeks. We keep only a minimal record that the account was deleted.

• Without the app: sign in at share.everycount.app/account/delete and delete your account there.
• If you can't sign in (for example, you lost access to your Google or Apple account), write to email@everycount.app. We will ask you to confirm the account is yours before deleting anything.
• Without an account: delete counters in the app, use Data and backup › Delete all data, or uninstall the app.

9. Your rights

You can access, correct, delete and export your data. Edit it in the app, use Data and backup › Full backup (JSON) to export it and Export photos to save all your photos, or delete your account. You can also object to or limit how we use it. Write to email@everycount.app.

If you are in the EU, you can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority in your country.

10. Children

EveryCount accounts are not for children under 16 in the European Union and European Economic Area, or under 13 elsewhere. Without an account the app collects nothing about anyone, so anyone can use it. If you believe a child has created an account, contact us and we will delete it.

11. Security

Data is encrypted in transit (HTTPS) and protected by access controls. Only genuine copies of the app can use account features. Keys and links are stored as hashes where possible.

12. Changes

We will update this page and, for important changes, tell you in the app before they apply.

Questions: email@everycount.app.