Privacy Policy

1. Who We Are

Evenli is a trading name of Evenli Ltd, a company registered in England and Wales under company number 17064042. Registered office: Spurling Cannon, King Arthur's Court, Maidstone Road, Ashford, Kent, TN27 0JS, United Kingdom. Evenli Ltd operates Evenli as a communication facilitation platform for families.

Evenli Ltd is the data controller for personal data processed through the Evenli platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy-related questions or data subject requests, contact us at info@evenli.co.uk.

2. How Evenli Works

• Evenli is a web application accessed through your browser. It can also be installed as a Progressive Web App on iPhone or Android.
• You use Evenli to send messages to your family group, manage a shared calendar and track shared expenses.
• Account access is protected by email and password. All traffic is encrypted in transit (HTTPS).

2a. Lawful Basis for Processing

We process your personal data on the following lawful bases under UK GDPR:

• Contract performance (Article 6(1)(b)): account and profile data, family group data, messages, calendar entries, expenses and canvas — processing is necessary to provide the Evenli service you have subscribed to.
• Legitimate interests (Article 6(1)(f)): AI tone analysis of messages before you choose to send them, for the purpose of providing a calmer and safer communication environment. We have assessed that this interest is not overridden by your rights, given that the analysis occurs before sending, is optional, and you retain full control over what is transmitted.
• Legal obligation (Article 6(1)(c)): date of birth and age verification — we are required to verify that users meet minimum age requirements; compliance with lawful requests from courts or regulators.
• Consent (Article 6(1)(a)): where we seek your explicit consent for any processing not covered above (for example, future marketing communications), we will do so clearly and separately. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. AI Processing (OpenAI GPT-4o mini)

Before a message is sent, Evenli uses OpenAI's GPT-4o mini to score it for conflict level (0–10, where 0 is calm and 10 is highly hostile) and offer a calmer rewrite. You decide which version to send. AI also helps with calendar event understanding.

All AI calls are made server-side. API keys are stored securely in environment variables and are never exposed to the client. We do not use your message content to train AI models.

4. Data We Hold

Account, calendar, expense and message data is stored securely in Evenli's database. The data we hold is limited to:

• Registration information (name, email, hashed password, date of birth)
• Subscription status and payment records (managed by Stripe)
• Family group data (members, invite codes)
• Calendar event data and shared expense data
• Canvas notes and shared documents
• Messages you send through Evenli (auto-deleted after 28 days)
• Child profile data (Link plan only) — display name, handle and family chat messages, linked to and controlled by the parent account
• Technical data necessary to operate the service securely (session tokens, access logs)

We apply data minimisation principles: we hold only the personal data that is strictly necessary for Evenli to function as a communication facilitation platform.

5. Data Retention

• Messages: automatically and permanently deleted 28 days after they are sent. You will receive an email warning 2 days before deletion so you can export them to PDF if needed.
• Account and profile data, calendar entries, expenses and canvas data: retained for the duration of your active account. On account deletion, this data becomes immediately inaccessible and is permanently and irreversibly deleted within 30 days.
• Child profile data: deleted alongside the parent account, or immediately when the parent deletes the child profile, subject to the same 30-day permanent-deletion window above.
• Payment and subscription records: Evenli retains records of transactions for up to 6 years for its own financial compliance and accounting obligations. These records are limited to what is necessary and do not include the content of your communications or family data.

6. What We Do Not Do

• We do not sell your personal data.
• We do not share your data with advertisers.
• We do not use your messages to train AI models.

7. Your Rights Under UK GDPR

As a UK data subject, you have the following rights:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): you may request deletion of your personal data. You can also delete your account directly from your dashboard — see Section 5 for deletion timelines.
• Right to restriction of processing: you may ask us to restrict how we use your data in certain circumstances (for example, while a dispute is being resolved).
• Right to data portability: you may request your personal data in a structured, machine-readable format. You can also export your messages, calendar, expenses and canvas notes to PDF at any time from your dashboard.
• Right to object: you may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights in relation to automated decision-making: Evenli does not make solely automated decisions that produce legal or similarly significant effects about you.

To exercise any of these rights, contact us at info@evenli.co.uk. We will respond within one month in accordance with UK GDPR. We will not charge a fee for reasonable requests.

Right to complain to the ICO: if you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk, by emailing casework@ico.org.uk, or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concern first.

8. AI Data Processing Transparency

• The text of a message may be processed by AI systems for the purpose of tone refinement before you choose to send it.
• The purpose of this processing is to reduce aggressive or inflammatory language, improve clarity and support structured communication.
• AI processing does not profile users for behavioural scoring, make automated legal decisions or publicly label users.
• Your messages are not used to train any public AI models.
• AI processing is carried out under secure contractual safeguards with our AI provider, and we apply data minimisation principles throughout.

9. User Content Ownership

• You retain ownership of the content you create on Evenli.
• You grant Evenli a limited licence to process that content solely to operate the platform on your behalf.
• We do not resell personal communication data.
• We do not engage in behavioural monetisation of your data.

9a. International Data Transfers

Some of the sub-processors we use to operate Evenli are based outside the United Kingdom, including OpenAI, Inc. (our AI provider, based in the United States). When personal data is transferred outside the UK, we ensure that appropriate safeguards are in place as required by UK GDPR Chapter V, including:

• The UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK Addendum, as applicable.
• Contractual obligations on all sub-processors prohibiting them from using your data for any purpose other than providing the agreed service (including no training of AI models on your data).

Further details about our sub-processors and the transfer mechanisms in place are available on request at info@evenli.co.uk.

10. Professional Access & Oversight

Where you choose to grant a professional (for example a mediator or solicitor) read-only access to your family group:

• Access is permission-based and granted by you.
• Access is revocable by you at any time, unless legally mandated otherwise.
• Evenli does not share your data with any professional without your explicit action, except where required by a lawful request.

11. Automated Moderation

Evenli's AI may automatically:

• Detect profanity
• Detect highly aggressive phrasing
• Suggest alternative wording

The AI does not:

• Automatically send messages on your behalf
• Automatically block lawful communication
• Escalate communications to authorities, except where Evenli is under a legal obligation to do so

12. Children's Personal Data

Evenli processes data relating to children exclusively on the Link plan and only through parent-controlled child profiles. The parent or guardian creates and controls the child profile, provides consent on the child's behalf, and is responsible for the child's use of the platform.

• Child profiles have access to family chat only — they cannot access calendar entries, expenses, canvas or account settings.
• We process only the minimum data required for the child profile to function: display name, username, hashed password, and messages within the family group.
• Child profile data is linked to and fully controlled by the parent account. The parent may delete the child profile at any time.
• Child profiles are not shown advertising and their data is never used for marketing, profiling or any purpose beyond operating the service.
• Children's data is never transferred to third parties except to the sub-processors named in this policy (AI processing and hosting), and only under the same contractual safeguards as adult data.

Evenli's approach to children's personal data is conducted in accordance with the ICO's Children's Code (Age Appropriate Design Code). If you have any concerns about a child's use of Evenli, please contact us at info@evenli.co.uk.

13. Contact

For any privacy-related questions, contact us at info@evenli.co.uk.