Evadis exists because you want someone to know you got home. That only works if you trust us with a little information — so here is exactly what we hold, who can see it, and when it disappears.
Last updated 28 July 2026
Evadis is run by a solo founder based in the United States. In data-protection terms, we are the “controller” of the information described on this page.
Questions, requests, or complaints: crew@evadis.app. We answer within 30 days, and usually much sooner.
Everything below is collected because the app needs it to work — there is no category here that exists only to profile you.
| What | Detail | Why | How long |
|---|---|---|---|
| Your account | Email address (used to sign in), display name, phone number, chosen avatar, optional WhatsApp number, and your streak count. | To run your account and let your crew know who is checking in. | Until you delete your account. |
| Your crew’s contact details | The name, phone number and (optionally) email and WhatsApp number of each person you add as crew. These people do not need an Evadis account, and most will not have one. | So we can alert them if you miss a check-in, and show them your live status. | Until you remove them from your crew, or delete your account. |
| Sessions | The occasion type, start and end times, your check-in interval, the outcome (home safe, missed check-in, SOS), anything you typed into the optional detail fields (for example a car registration or a meeting place), and which crew members were watching. | This is the service itself — the timer, the alerts, and your streak. | Until you delete your account. This is history, not live data: it is only visible to you (and, for the session it belongs to, your crew). |
| Location | Your approximate last-known position, only while a session is live, and only if you granted your browser’s location permission. | So your crew can find you if you miss a check-in. | Erased the moment the session ends, and an automatic job erases anything older than 24 hours regardless. The app also refuses to display any location older than 24 hours. |
| Session photos | Any photo you attach to a session — for example a number plate or a listing. | So your crew has the same detail you do if something goes wrong. | Deleted from storage 24 hours after the session ends. See the warning about photo links below. |
| Notification setup | If you turn on notifications: the anonymous address your browser gives us for push messages, the keys needed to send to it, your email, and your browser and device type. | To send check-in reminders and alerts to your phone. | Until you turn notifications off, uninstall, or delete your account. |
| Feedback you send | Your message, optional star rating, which screen you were on, your email, and your browser and device type. | To fix what you tell us is broken. | Until you ask us to delete it. Your email is stored separately so it survives account deletion — tell us if you would rather it did not. |
| Error reports | When the app breaks: the error message, the technical trace, the page it happened on, your browser and device type, and — where we know it — your user ID and email. | To find and fix crashes, often before anyone reports them. | The report is kept until cleared during maintenance, but if you delete your account your identity is stripped from it immediately. Never includes anything you typed into a session. |
| Usage events | Which buttons were tapped and small context such as which occasion type. Never the contents of anything you type. | To see which parts of the app are actually used, so we build the right things. | Until cleared during maintenance. |
| Email delivery records | If an address permanently bounces or marks us as spam, we record the address and reason. If someone unsubscribes, we record their address. | To stop emailing addresses that do not work, and to honour unsubscribes. | Indefinitely — this is how we remember not to email you. |
Adding someone as crew means giving us their contact details so we can reach them on your behalf. They have not signed up with us, so please only add people who would expect to hear from you this way — and tell them you have. It is their information as much as yours.
Crew members can unsubscribe from routine emails at any time using the link at the bottom of every message. Safety alerts are the deliberate exception: a missed check-in or an SOS is always delivered, even to someone who unsubscribed. That is the entire point of the app, and we would rather be honest that opting out of a life-safety message is not something we offer. Anyone who wants their details removed entirely can email us and we will delete them.
When your crew watches a session, they open a link containing a long random code. Anyone holding that link can see that session's status while it is live — that is what makes it work without your crew needing an account. The code cannot realistically be guessed, but it is not password-protected, so treat it like a house key: it is safe until it is forwarded to someone you did not choose.
The same applies to photos you attach. They are stored at an unguessable web address that is only ever sent to your crew, and they are permanently deleted 24 hours after the session ends — but for those 24 hours, anyone given the link could open it. Please don't attach anything you would not want seen if a crew member forwarded the email.
We use a small number of established companies to actually run the service. They process data on our instructions and are not allowed to use it for their own purposes. We do not sell or share your information with anyone else — no data brokers, no advertisers.
About phone numbers. Evadis does not send text messages — phone numbers are stored so that you and your crew can tap to call each other, and alerts go out by email and push notification. If text alerts are ever added they will be opt-in, and you will be asked first. Either way, mobile information and SMS opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes.
These providers store data in the United States. If you are in the UK or the EU, that means your information is transferred outside your country; we rely on the standard legal safeguards these providers offer for such transfers.
We would also disclose information if the law genuinely required it — for example a valid court order. It has never happened.
If UK or EU data-protection law applies to you, these are the grounds we rely on: performance of a contract for running your account and sessions; your consent for location and for push notifications, both of which your browser asks you for separately and which you can withdraw at any time in your browser settings; and legitimate interests for keeping the service working — diagnosing crashes, preventing abuse, and alerting your crew when you asked us to.
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can also object to how we use it, ask us to restrict it, or ask for it in a portable format.
The fastest route is in the app: You → Delete account. That removes, there and then, your login and profile, your crew list, every session and any location on it, your custom occasions and preferences, your notification setup, and any photos you attached — the photo files themselves, not just the links. Usage events and crash reports are kept but are stripped of anything identifying you.
Two things deliberately survive, both mentioned above: any feedback you sent us (with the email you sent it from), and your address in our unsubscribe and bounce lists, because that is how we remember not to email you. Ask us and we will remove those too. For anything else, email crew@evadis.app.
If you are in California: we do not sell or share personal information as those terms are defined by California law, and we will not discriminate against you for exercising any privacy right.
If you are in the UK or the EU:if you think we have handled your data badly, please tell us first — but you have the right to complain to your national data-protection authority (in the UK, the Information Commissioner's Office).
Everything travels over an encrypted connection. The database enforces, at the database level, that a signed-in account can only ever read its own rows; the sensitive tables (error reports, unsubscribes, bounce records, notification settings) are locked so that the browser cannot touch them at all and only our server can. Unsubscribe links are cryptographically signed so they cannot be forged. Uploaded photos are checked to confirm they really are images.
No system is perfect, and we are a small prototype rather than a large company. If we ever discover a breach affecting you, we will tell you.
You must be at least 13 to use Evadis. If you are in the UK or the European Union, you must be at least 16, because that is the age at which you can agree to this on your own behalf there.
We do not knowingly collect information from anyone younger. If you believe a child has an account, email us and we will remove it.
In a life-threatening emergency, always call 911 first. Evadis alerts your crew — it is not an emergency service. We do not contact the police, ambulance, or any emergency dispatcher on your behalf, and we cannot guarantee that a message reaches anyone.
If we change what we collect or how we use it, we will update this page and change the date at the top. If the change is significant, we will email you rather than hope you notice.
See also our Terms of Service.