Legal

Privacy Policy

Last updated August 25, 2026

Account information

When you create or manage an account, Everythingish may process your name, email address, account identifier, profile preferences, and authentication information. Passwords are hashed by the server and are not stored as readable text. Your authentication token is stored securely in the iPhone Keychain.

Life data you create

Everythingish processes information you choose to create, enter, import, or upload. This may include calendar events and reminders; notes; Pantry inventory, grocery lists, prices, purchases, and expiration dates; health information such as medications, appointments, providers, symptoms, records, and HealthKit values you authorize; vehicle information and documents; pet information; trips, bookings, packing lists, budgets, and expenses; education and career information and files; family or household details; and money information such as bills, budgets, transactions, and connected-account data.

Receipts and barcodes

When you scan or import a receipt, Everythingish may process the image and recognized text to identify a store, purchase date, products, quantities, and prices for your review. Receipt processing may occur on your device and through supported Everythingish services. Barcode numbers are used to look up product details. Open Food Facts may receive the UPC or EAN you scan and may return a product name, brand, package quantity, category, or image. Successful product information may be cached so future lookups work more reliably. You can review and correct scanned information before adding it to inventory.

AI assistant

When you use the AI assistant, the messages and other content you choose to submit are sent through the authenticated Everythingish service to OpenAI so a response can be generated. Everythingish does not send your email address or account identifier to OpenAI merely to authenticate a chat request. Chat history is currently stored on your iPhone rather than as conversation history in the Everythingish database. Do not submit information you do not want processed by an AI provider, and review AI responses before relying on them.

Plaid and financial connections

If you connect a financial institution, Everythingish uses Plaid as its financial-data connectivity provider. Plaid handles the institution sign-in flow. Your bank username and password are provided to Plaid or your institution and are not received by Everythingish. Everythingish may receive account and institution details, balances, transaction information, Item identifiers, and an access token used to maintain the connection and sync the Money feature. Plaid access tokens are retained in protected server storage and are not stored in the app or displayed to you. Disconnecting a linked bank or deleting your Everythingish account initiates removal of the associated stored Plaid connection and a request to revoke the Plaid Item when available. Plaid's End User Privacy Policy is available at https://plaid.com/legal/#end-user-privacy-policy.

Device permissions

Everythingish requests device access only when needed for a feature you choose to use. Notifications are used for supported reminders such as Pantry expiration or low-stock alerts, Calendar reminders, and Travel reminders. Camera and Photos access support barcode and receipt scanning, profile images, and attachments. Location access supports local weather, routes, and travel-related context. Other Apple permissions, including HealthKit, are requested separately when their associated features are used. You can review or revoke permissions at any time in iPhone Settings, although affected features may stop working.

Data storage and security

Depending on the feature, information may be stored locally on your iPhone, in app-controlled files, in Keychain, or in the Everythingish service and its PostgreSQL database. Some Life categories currently remain local to the device and do not have complete cloud backup or cross-device sync. Everythingish uses HTTPS for network communication, bcrypt password hashing, authenticated API access, user-scoped database records, Keychain token storage, and protected storage for sensitive service tokens. Access to information is limited to what is needed to operate and secure the service. No storage or transmission system can guarantee absolute security.

How information is used

Everythingish uses information to provide the features you request, maintain your account and session, save and organize your content, send supported reminders, process scans and product lookups, generate AI responses, support financial connections, show linked accounts, balances, and transactions in Money, respond to support requests, protect the service from misuse, troubleshoot failures, and comply with applicable legal obligations. Everythingish does not sell your personal information or use it for cross-app advertising tracking.

Third-party services

Everythingish relies on service providers for specific functions. These may include Apple services such as WeatherKit, HealthKit, MapKit, notifications, camera, Photos, Keychain, and related iOS frameworks; OpenAI for AI responses; Plaid for financial connections; Open Food Facts for barcode product lookup; Resend for account and password-reset email; Railway and PostgreSQL infrastructure for hosting and data storage; and Cloudflare for domain, network, and security services. These providers may process the information necessary to deliver their service and may retain operational or security logs under their own policies.

Retention and account deletion

Everythingish retains information for as long as needed to provide the service, maintain security, resolve disputes, and meet legal obligations. When you request Delete Account, Everythingish authenticates the request and asks the server to delete the account and supported account-scoped database records. It also attempts to revoke and remove the associated Plaid connection. After the server confirms deletion, the app removes the authentication token and account-owned local data and caches from that iPhone. Limited infrastructure, security, email-delivery, or provider logs and backups may remain temporarily under operational, fraud-prevention, or legal retention requirements.

Your choices

You can choose which Life features to use, edit or delete supported records, manage notification preferences, revoke device permissions in iPhone Settings, disconnect supported integrations, sign out, and request account deletion from Settings. You may avoid providing optional information, but some features cannot work without the information or permission they require. For privacy questions or requests that are not available directly in the app, contact Everythingish Support.

Children

Everythingish is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as Everythingish evolves. The updated date above will show when changes take effect.

Contact

Questions or deletion requests can be sent to support@everythingish.net.