Everbind

Privacy Policy

Effective 23 September 2026 · Loadcircle Ltd

Everbind is a binder you keep yourself: the people to tell, the documents, the money, the accounts, your wishes and your digital life, recorded on your own phone. We never receive any of it, and the app has no way to send it.

1. What the app stores, and where

Everything you record is written to the app's own private storage area on your device. That is:

• the people to tell — names, what they are to you, and how to reach them;
• the documents section — what exists, where the original is kept, and any photographs you take of the papers you actually hold;
• money and policies — the institutions, the reference numbers you enter, and what pays what;
• accounts and logins — where each login lives: the manager, the safe, the notebook. Never the password itself. The app does not ask for one and has nowhere to put it;
• your wishes, in your own words;
• digital life — devices, subscriptions and the accounts that would otherwise outlive you;
• which look you have chosen for the app, and how far through the sections you have got.

This is kept in the app's private directory. Nothing is written anywhere else on your phone by Everbind, and no other app can read that directory.

2. Encrypted on the device

Your binder is encrypted at rest. The key is generated on your device and held in the Android Keystore, and on phones with the hardware for it, it does not leave that hardware. That means a copy of the app's files taken off the phone — by a file manager, by a repair shop, by anyone — is not readable without the phone's own keystore. It also means that if the key is destroyed, which happens when the app's data is cleared or the device is factory reset, the binder cannot be decrypted by anyone, including us. We could not recover it if we wanted to.

3. What the app does not do

• No internet. The app does not hold the INTERNET permission, so it cannot open a network connection. Nothing you type or photograph can be transmitted anywhere, because there is no code path and no permission for it to travel by.
• No account. There is nothing to sign up for, no email address, no password, and no user identifier of any kind.
• No analytics or crash reporting. No usage data, no diagnostics and no device identifiers are collected or sent.
• No advertising. There are no ads and no advertising SDK, and the app does not use the advertising ID.
• No third-party services. Everbind includes no third-party SDK that collects data.
• No backup to us or anyone else. App backup is switched off in the app itself, so a backup agent cannot copy your binder off the device.

4. Photographs

When you photograph a document, Everbind asks the system to show either your camera or your photo picker. The app does not have permission to read your photo library: with the system picker it sees only the specific photographs you choose. A copy of each chosen photograph is placed in the app's private storage so that your binder survives even if you later delete the original from your gallery. That copy is not uploaded anywhere.

5. The hand-over document

Everbind can gather your binder into a single document — a PDF — that someone else can read. You choose where it is written using the system's file saver, and you choose who receives it. Two things follow from that, and they are worth being plain about:

• Once written, that file is outside the app's control. It is handled by whatever app, folder or service you put it in, and if you put it in a cloud drive, that provider's own privacy policy applies to it.
• Once you hand it to somebody, they have it. Unlike the binder itself, the document is not encrypted, because its whole purpose is to be read by someone who does not have your phone. Give it only to people you mean to give it to.

6. The payment

Paying for Everbind happens entirely through Google Play. That means:

• We never see your payment details. Your card or payment method is given to Google, not to us. We receive no name, no address, no card number and no email address;
• We receive no personal data at all. The only thing we can see is aggregate sales reporting from Google Play — the number of purchases and the amount — which contains nothing that identifies a person;
• Google Play holds the record of your purchase against your Google account, not against this app. That is deliberate: it is what lets you restore what you have paid for on a new phone, or after uninstalling the app, without an account with us;
• Google's own privacy policy applies to the transaction, and is available at policies.google.com/privacy.

7. Deleting your data

You can clear the example binder inside the app, and delete anything you have entered. Clearing the app's data in your phone's settings, or uninstalling Everbind, destroys the encryption key and with it everything the app has stored — permanently, as above. Because we never receive your binder, there is nothing for you to ask us to delete from a server; but equally, we cannot recover your binder for you if your phone is lost. Your purchase record is held by Google Play, not by us, and it is managed through your Google account.

8. Children

Everbind is a tool for keeping a personal record of your affairs. It is not directed at children, and we do not knowingly collect information from children — indeed we collect no information from anyone.

9. Your rights

Data protection law (including the UK GDPR) gives you rights over personal data held about you. We hold none: your binder never reaches us, and the purchase record is held by Google. If you have a question about this, you are welcome to contact us at the address below, and you have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office).

10. Changes to this policy

If a future version of Everbind changes what it stores or where, this page will be updated before that version is released, and the effective date above will change. The version of this policy that applies to you is the one published here at the time you use the app.

11. Contact

Loadcircle Ltd, England and Wales · francis@loadcircle.co.uk