Privacy Policy
Last updated: August 18, 2026
1. Introduction
Everlumen ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile and web application, website, and related services (collectively, the "Services"). By using Everlumen, you consent to the practices described in this policy.
2. Information We Collect
Personal Information
When you create an account, we collect your name, email address, and any profile information you choose to provide. If you sign in via Google or Apple OAuth, we receive your name, email, and profile photo from those providers.
Job Site Photos and Media
You may upload photos, videos, and other media files related to construction projects and job sites. This includes image metadata such as timestamps, GPS location (if enabled), and device information.
EXIF and location data. When you add a photo, the app reads the EXIF metadata embedded in the file by your camera and extracts the original capture time and the GPS latitude and longitude, storing them alongside the photo so it can be placed on the project map and timeline. If a photo carries no GPS data we fall back to the coordinates of the project address. Because these coordinates identify the job site - usually a private property belonging to your client - treat them as location data and consider that before publishing a photo through a public share link. You can strip EXIF data from a file before uploading it if you do not want us to receive it.
Walkthrough recordings. Walkthrough video and audio you record in the app, including anything spoken on site, is uploaded, stored, and transcribed. Make sure everyone recorded has consented where the law requires it.
Usage Data
We collect information about how you interact with our Services, including log data, device information, IP address, browser type, pages visited, and features used. This helps us improve performance and user experience.
AI Analysis Data
When you use our AI-powered features, we process your uploaded photos and text queries to generate analysis, summaries, and recommendations. The content of your conversations and uploaded images are sent to AI providers (such as Google Gemini) for processing.
Concretely: photo analysis, AI-assisted captions, site logs, project reports, walkthrough summaries, and the in-app assistant all send your photos and the associated captions, tags, and notes to Google Gemini. Photos are shared as short-lived signed links to our storage that Google fetches to read the image. Walkthrough audio and video is uploaded to Gemini for speech-to-text transcription, so anything spoken during a recording is transmitted. Addresses you enter are sent to Google Maps for geocoding, and text you have read aloud is sent to Google Cloud Text-to-Speech. See section 4 for the full list of processors.
3. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Services
- Authenticate your identity and manage your account
- Process and store your job site photos and project data
- Generate AI-powered analysis, site logs, and reports
- Send transactional emails, notifications, and support communications
- Analyze usage trends to improve features and performance
- Detect and prevent fraud, abuse, and security incidents
4. Data Sharing and Third Parties
We do not sell your personal information. We only share data with trusted third-party service providers necessary to operate our Services:
- Supabase - For database hosting, authentication, and file storage. Your account data, project information, and photos are stored securely in Supabase infrastructure.
- Google Gemini / AI Providers - For AI-powered analysis features. When you use AI features, your photos and text queries may be processed by Google Gemini. These providers have their own privacy policies governing AI data processing.
- Google Cloud Text-to-Speech - Text you ask the app to read aloud is sent to Google to synthesise the audio.
- Google Maps Platform - Project and job site addresses you enter are sent to Google's Geocoding and Maps APIs to convert them to coordinates and render map views.
- Stripe - For subscription payments. Stripe receives your billing details and card data directly; we store only a customer and subscription reference, never your full card number.
- Resend - For transactional email such as team invitations, share notifications, and account messages. Resend receives the recipient address and message content.
- Vercel and Railway - For hosting the website and the API. They process request data (including IP address and user agent) and keep short-lived operational logs.
- Analytics Providers - We may use anonymized analytics tools to understand app usage and performance.
These providers act as our sub-processors and are permitted to use your data only to provide their service to us. Each keeps its own privacy policy, and the AI, mapping, email and hosting providers listed above may process data outside your country (see section 10).
Public share links. When you create a share link, portfolio page, project page, or website embed, the photos, captions and report content you include become viewable by anyone who has the URL - no sign-in required - and published portfolio and project pages may be indexed by search engines. You control what goes into a share link and you can revoke it from within the app.
We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (merger, acquisition, or asset sale).
5. Data Storage and Security
Your data is stored on secure cloud servers provided by Supabase, with encryption at rest and in transit. We implement industry-standard security measures including SSL/TLS encryption, access controls, and regular security audits.
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
6. User Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access - Request a copy of the personal data we hold about you.
- Correction - Request that we correct inaccurate or incomplete information.
- Deletion - Request deletion of your account and associated data. You can delete your account at any time from the Settings page.
- Portability - Request your data in a structured, machine-readable format.
- Restriction - Request that we limit how we use your data in certain circumstances.
- Objection - Object to processing based on legitimate interests.
To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.
7. Cookies and Analytics
We use cookies and similar technologies to remember your preferences (such as dark/light theme), keep you signed in, and analyze app usage. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.
We use analytics tools to collect aggregated, non-identifying usage data to help us understand how users interact with our Services and identify areas for improvement.
8. Children's Privacy
Our Services are not intended for individuals under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
9. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with the Services. If you delete your account, we will begin the process of deleting your data within 30 days, except where retention is necessary for legal compliance, dispute resolution, or enforcing our agreements.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by posting the updated policy in the app and updating the "Last updated" date. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, see our contact page or write to us at: