Privacy Policy

Last updated: October 14, 2026.

Controller and contact

Tommaso Antoniazzi, Keystone, with registered office/address at Via Bartolomeo D'Alviano 28, Italia, is the controller of EverMute's data processing. For support or to exercise your rights: support@evermute.app.

What EverMute is for

EverMute opens the mobile websites of certain social networks in a browser on your iPhone and applies the rules you choose. It is not affiliated with Instagram, YouTube, TikTok, Reddit or Facebook. Their privacy policies apply when you access their sites: they receive your device's traffic directly.

Data we process and why

To create and protect your account we process your email, user identifier, optional name and technical authentication data. If you choose Sign in with Apple, we receive your Apple identifier and the data Apple makes available, including through a hidden email address. Account passwords are managed by the authentication service; they are not stored in plain text.

To provide your subscription we process the product purchased, status, expiry, trial, renewal and transaction identifiers. Apple handles the payment, and RevenueCat verifies purchases and provides statistics on subscription performance. EverMute does not receive your card details. These providers may also process technical data, IP address and device information needed for their services.

To sync your settings we store the selected platforms, rules, schedules, limits, time zone and family links. For linked children we also sync the counters produced by EverMute: opens, seconds in the app's browser, breaks respected or exceeded, and estimates of time reclaimed. The parent can see the names assigned, the rules and the counters of linked children. The parent does not receive messages, searches or social content.

On your phone we store preferences, counters and, if set, a hash of your PIN. Social sessions stay in the local browser: they are not sent to EverMute's servers. You can delete them in the app's Settings; they are also deleted when you sign out or delete your account. Choosing which native apps to limit uses Apple's Screen Time permissions. The tokens for this selection stay on the device and in the App Group: we do not sync Screen Time reports.

If you contact us we process your contact details and the information you choose to send us in order to reply. Do not send passwords, access codes or payment details.

Ad measurement (Meta)

In the app for Solo and for parents we use the Meta Platforms SDK to find out whether an install or a subscription comes from one of our ads on Facebook or Instagram. Once you have said the app is for you or that you are a parent (never on a child's phone), the SDK sends Meta app usage events (open, install, the setup screens reached, free trial started, subscription with price and currency), technical device data and an app identifier. We do not ask for tracking permission: the advertising identifier (IDFA) is not collected and we do not link this data to other apps or sites. Attribution also takes place through Apple's SKAdNetwork. Meta processes this data as an independent controller under its own privacy policy. Legal basis: legitimate interest in measuring the effectiveness of ads (Article 6.1.f GDPR); you can object by writing to support@evermute.app.

The SDK is never activated on the phones of linked children: no data of a child linked to a parent is sent to Meta.

Usage statistics (PostHog) and install attribution (AppsFlyer)

In the app for Solo and for parents we use PostHog, with servers in the European Union, to understand at which steps of the initial setup people stop. From the first launch the app sends events without a name: app opened, setup screen reached, price screen viewed, free trial started or purchase with price and currency, together with the app version, the App Store country and a random identifier created on the iPhone. PostHog also receives the IP address, but the app tells it not to derive any location from it. We do not send your name, email, account identifier, anything you type, the sites you visit or any social media content. RevenueCat reports subscription renewals and cancellations to PostHog under the same random identifier. PostHog processes this data on our behalf, as a processor. Legal basis: legitimate interest in improving the app (Article 6.1.f GDPR); you can object by writing to support@evermute.app.

We use AppsFlyer to find out which ad campaign an install comes from, under the same rules as the Meta SDK: it starts only once you have said the app is for you or that you are a parent, it does not ask for tracking permission and it does not collect the advertising identifier (IDFA). It receives technical device data, the IP address, the identifier for vendor (IDFV) and app opens; attribution also takes place through Apple's SKAdNetwork. The origin of the install (for example "organic" or the campaign name) is attached to the PostHog events and to the subscription in RevenueCat. AppsFlyer processes this data on our behalf, as a processor. Legal basis: legitimate interest in measuring the effectiveness of ads (Article 6.1.f GDPR).

AppsFlyer is never activated on a child's phone. PostHog switches off as soon as it is indicated that a parent set the app up, and sends nothing more from that phone, even if the parent later unlinks it; before that answer the app does not yet know whose phone it is and can only send the app open and the first screen.

Legal bases

We process account, rules, purchases and links as required to perform the contract and provide the service (Article 6.1.b GDPR). We protect access and infrastructure on the basis of our legitimate interest in security, balanced against your rights (Article 6.1.f). We process any information required by law in order to comply with legal obligations (Article 6.1.c). For notifications we ask for the device permission, which you can revoke in iOS Settings. We do not profile people for advertising purposes and we do not make automated decisions with legal effects.

Providers and transfers

We use Supabase for authentication and the database and RevenueCat for subscription verification; Apple handles purchases and iOS services. Meta Platforms and AppsFlyer measure the installs and subscriptions that come from our ads; PostHog collects app usage statistics on servers in the European Union (see above). The EverMute database data is currently hosted in the United States region, Ohio (us-east-2). Any transfers outside the European Economic Area must be covered by the safeguards provided for by the GDPR, for example the providers' standard contractual clauses. You can ask the controller for information about the applicable safeguards. We do not sell data and we do not use it to show you personalized advertising.

Retention and deletion

Account and settings remain as long as the account exists. The server keeps daily counters for 90 days and weekly totals for up to 400 days. Local counters are kept for up to 400 days and are reset when you change account. Technical audit logs and subscription event metadata are deleted after 400 days through automatic procedures.

Delete account in Settings starts the immediate deletion of the identity and associated data from the operational store. The app tells you if the operation failed. For an Apple account, it requires a new Apple confirmation to revoke the authorization. Backup copies and provider logs follow their respective retention cycles and are not used as active accounts. Apple and the other providers may retain data for their own legal obligations. Deleting EverMute or its account does not cancel your Apple subscription: cancel it separately in iOS Settings.

If a parent deletes their own account, the family is dissolved and the children are unlinked; their accounts are not deleted automatically. The parent can delete a child account that is still linked from Family, by selecting the name and choosing Delete account and data. After unlinking, the phone signs out of the account and does not become a Solo account; to have the data retained for an already unlinked account deleted, contact support@evermute.app.

Families and minors

The family setup is intended for a parent or someone who legitimately exercises responsibility for the minor. The parent assigns a name and generates a code: the child uses it to create their own account without providing a personal email or choosing a password. The service creates a technical identifier for authentication. The parent must explain to the child, in words suited to their age, which rules and counters are shared. The social networks' age limits and conditions continue to apply: EverMute does not replace them.

Rights and complaints

Where provided for by law, you can request access, rectification, erasure, restriction and portability of your data; you can object to processing based on legitimate interest and withdraw consent without affecting the processing carried out before. Write to support@evermute.app. We reply within the legal time limits, normally one month, and we may ask for the information strictly necessary to verify your identity. You can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority) or with the competent authority of your country.

Updates

The date at the top identifies this version. Any significant changes will be communicated through the app or your account contact details, when necessary.