Privacy Policy

1. What this policy covers

Fourlyn (“we”, “us”) is a product studio run by Fourlyn Technologies Pvt Ltd, a company registered in India. This policy covers this website and the EverWhy mobile app.

Our other products (Aura, Apple Foundation Models SDK, RecoveryOS, VibeShift) are not available to the public yet. We will describe how each one handles personal data here before it is released.

When we build software for a client, the personal data in that software is handled under our contract with the client, not under this policy.

2. This website

Pre-registering for EverWhy

If you fill in the pre-registration form, we save the name and email address you enter. With them we save the date, the offer you were shown (the first month free) and whether you were shown the price for India or for other countries.

We use this to email you about the launch and to apply the offer when you sign in to the app with the same email address. We do not use it for anything else. To be taken off the list, write to help@fourlyn.com.

Starting a project

If you send the “Start a project” form, we save what you enter: your name, email address, company if you give one, the kind of work you need and your description of the project, with the date. We use it only to reply to you and to discuss the project.

Email

If you write to us, we keep your message and your email address so that we can reply.

Cookies and tracking

This website sets no cookies and has no analytics or advertising trackers. To choose which price to show, the EverWhy page reads your device’s time zone. That happens in your browser; nothing is sent to us unless you submit one of the forms.

Server logs

The site is hosted on Google Firebase Hosting. Like every web host, it records the IP address and browser details of each request, to deliver the page and keep the service secure.

3. The EverWhy app

EverWhy is built so that what you capture stays on your phone. The table shows where each kind of data is kept; the details follow.

What stays on your phone

Everything you capture is saved in the app’s storage on your device: your decisions, voice recordings, the photos and documents you attach, the people you name, your timeline and your reminders. Speech is turned into text on the phone. We cannot see any of this. If you delete the app, this data is deleted with it, unless you have made a backup.

Your account

You sign in with your Google account. From Google we receive your name, email address, profile picture and an account ID. We use them to sign you in and to stop people who are not signed in from using the AI features. They are held in Firebase Authentication, a Google service.

AI processing

To build a decision card, answer a question or summarise your decisions, the app sends text to an AI model: the text of what you said, the emotion and people you tagged, and for questions and summaries the text of the earlier decisions involved. The text goes through our servers to Anthropic, the company that provides the model, and the result comes straight back to your phone.

We do not store this text, and our use of the model is set up so that Anthropic does not keep it after replying. Our server logs record only technical details: your account ID, the size of the request, how long it took and any error code. Voice recordings, photos and documents are never sent.

Backup to Google Drive

Backup is optional. If you turn it on, the app encrypts your data on your phone with a key protected by a PIN you choose, and uploads it to a hidden app folder in your own Google Drive. The app asks Google for access to that folder only; it cannot see your other files. We never receive the backup or the PIN, so we cannot read it or recover it. If you forget the PIN and lose the phone, the backup cannot be restored.

SMS and Gmail (message signals)

Message signals are optional and off until you turn them on. If you turn them on, the app can notice a few kinds of money and life events in your messages, such as a SIP or EMI payment that failed, a credit card bill that is due, paid or missed, or a promotion or pay revision, and show them on the Home screen so you can record what you decide.

• SMS (Android only): with Android’s SMS permission, the app reads received text messages from senders such as banks. Messages from personal phone numbers are skipped.
• Gmail: with your permission through Google, the app has read-only access to your Gmail. It searches only for messages that may be about card statements, payments, SIPs, EMIs, promotions or pay revisions, and reads only their sender, subject and the first lines Gmail provides as a preview. It does not read full messages or attachments, and it cannot send, change or delete email.

Messages are checked on your phone by fixed rules. No AI model reads them. Message text is not saved. The only thing saved is the event: its type, the sender’s name, the last four digits of a card, an amount and a date, and it is saved only on your phone. Message text and these details are never sent to our servers, to an AI model or to anyone else. Events are not included in your backup and are deleted after 90 days.

If you choose to record what you decide about an event (“Record why”), the AI that summarises your words is also told the kind of event, such as “credit card bill coming up”, and the question the app asked you, so the summary says what it is about. It is not told the sender, card digits, amount or date. A copy of the event’s details is kept with that memory on your phone, so you can see what it was about, and is included in your encrypted backup with the rest of the memory.

You can turn SMS or Gmail off at any time in Profile → Message signals. That stops the reading and deletes the events found from it. To remove the permission itself, use your phone’s app settings or the security page of your Google account.

Notifications

To send notifications to your phone, we store a notification address (a device token) with your account ID, whether the phone is iOS or Android, the app version, whether notifications are allowed and the dates it was saved and updated. It is deleted when you sign out. Reminders you set are scheduled on the phone and are not sent to us.

Usage statistics

The app sends anonymous usage statistics to Google Analytics for Firebase, such as which screen was opened or which feature was used. An event contains only numbers, yes-or-no values and fixed words, never anything you said or typed. Events are tied to a random ID for the installation, not to your account. Google Analytics also records basic device details such as the model, operating system version and country. You can switch this off in Profile → Privacy → Anonymous usage statistics.

Permissions the app asks for

• Microphone, to record what you say.
• Notifications, to show reminders and messages from us.
• Photos and files, only for the items you choose to attach.
• SMS (Android), only if you turn on message signals, to read received messages as described above.

Google account data

We use the information we receive from Google only to sign you in, to store your encrypted backup in your Drive if you turn backup on, and to find the events described above in your Gmail if you turn Gmail on. Gmail data is used only to show you those events in the app, and with the memories you record about them. The sender, card digits, amounts and dates stay on your phone (and in your encrypted backup, for an event you recorded about) and are never sent to our servers or to anyone else. Only the kind of event goes to the AI, with your own words, when you record about it. Gmail data is never used for advertising, never sold, never used to train AI models, and never read by people.

EverWhy’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

EverWhy is not on sale yet. Subscriptions will be bought through the App Store or Google Play, which handle the payment. We will not receive your card details.

4. How we use personal data

We use personal data only to:

• run the features you use, such as sign-in, AI answers, notifications and backup;
• tell people who pre-registered about the launch and apply their offer;
• reply when you write to us or send a project enquiry;
• understand, in aggregate, how the app is used so that we can improve it;
• keep our services secure and prevent abuse.

We do not sell personal data, show ads, or use what you capture in EverWhy to train AI models.

5. Who processes data for us

These companies process personal data on our behalf:

• Google (Firebase and Google Cloud): website hosting, sign-in, our backend functions and database, notification delivery and usage statistics. Apple delivers notifications to iPhones.
• Anthropic: the AI model that processes the text described under AI processing.

Our backend functions run in Google Cloud’s Mumbai region. Google and Anthropic may process data in other countries, including the United States.

We share personal data with no one else, unless the law requires it or it is needed to protect someone’s safety or our legal rights.

6. How long we keep it

• Pre-registration details: until you ask us to remove them, or until the launch offer has ended.
• Your account: until you ask us to delete it.
• Notification address: until you sign out or it stops working.
• Text sent for AI processing: not kept.
• SMS and Gmail: message text is not kept anywhere. Events found in it stay on your phone for 90 days, or until you turn that source off. An event you recorded a memory about is kept with that memory until you delete it.
• Project enquiries: until you ask us to delete them, or two years after our last contact with you.
• Emails you send us: for as long as needed to deal with your request.
• Data on your phone and your Drive backup: under your control. You delete them from the app or from your Google account.

7. Your choices and rights

In the app you can:

• switch off usage statistics;
• turn off or delete your backup;
• turn off SMS or Gmail reading, which also deletes what was found from it;
• clear all data from the phone;
• sign out, which removes the phone’s notification address from our servers.

You can also ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, including your account, your pre-registration and any project enquiry. Write to help@fourlyn.com from the email address concerned. We reply within 30 days.

Depending on where you live, the law may give you further rights, such as withdrawing consent or complaining to your data protection authority. This includes India’s Digital Personal Data Protection Act and the GDPR in Europe.

8. Security

Data travels between your device and our servers over encrypted connections. Our database cannot be read or written directly from the app or the website; only our own backend functions can reach it. Backups are encrypted on your phone before they leave it.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

9. Children

Our website and apps are not meant for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to help@fourlyn.com and we will delete it.

10. Changes to this policy

When we change this policy, we change the date at the top of this page. If a change affects how we handle your personal data in an important way, we will also tell you in the app or by email before it takes effect.

11. Contact

Questions or requests about this policy or your personal data: help@fourlyn.com.