Privacy Policy
Effective date: 15 August 2026 · Last updated: 15 August 2026
Even helps people who share a home settle money and coordinate the household — fairly, and without the cold edges of a bank app. This policy explains what personal data we process, why, and the choices you have. We keep it plain on purpose.
1. Who we are (Data Controller)
The service "Even" (the "App", the website thisiseven.app, and its backend at api.thisiseven.app) is operated by Harvested ZZP, a sole proprietorship registered in the Netherlands.
- Chamber of Commerce (KvK): 95741186
- VAT: NL005172182B56
- Registered address: Graaf Aelbrechtlaan 171, 1181 SV Amstelveen, Netherlands
- Contact for privacy matters: [email protected]
Harvested ZZP is the data controller for the personal data described below.
2. Scope
This policy applies to the Even mobile application, the thisiseven.app website, and the Even backend service. It does not cover third-party services you connect to Even (such as your Google account), which are governed by their own privacy policies.
3. Personal data we collect
| Category | Examples |
|---|---|
| Account | Name, email address, profile image, sign-in identifier (Apple or Google), the household you belong to |
| Household & money data | Shared expenses, contributions, running balances, settlements, notes and the items you and your household add to Even |
| Connected Google data (only if you connect it) | Read-only Gmail message metadata/content used to surface relevant household items, and Google Calendar events used to mirror a shared household calendar |
| Technical | IP address, device model and OS, app version, crash logs, and product-analytics events |
You are not required to connect a Google account to use Even's core money-settling features.
4. Google user data — Limited Use
Even's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you choose to connect your Google account, Even requests the minimum scopes needed:
- Gmail (read-only) — to detect and surface household-relevant items (e.g. shared bills and receipts) inside Even. Even does not send, delete, or modify your email.
- Google Calendar — to mirror a shared household calendar. Edits you make stay in Even; the mirror is clearly labelled.
We do not use Google user data for advertising, do not sell it, and do not use it to train generalized AI/ML models. Access is used only to provide and improve the user-facing features above, and you can disconnect your Google account at any time from within the App, which revokes Even's access.
5. Legal basis for processing (GDPR Art. 6)
- Performance of a contract — to provide your account and the App's features.
- Consent — for connecting your Google account and for optional analytics; you can withdraw it at any time.
- Legitimate interests — to keep the service secure, prevent abuse, and improve reliability.
- Legal obligation — where we must retain limited records to comply with law.
6. How we use your data
- Provide account access and the household money-settling and coordination features.
- Sync data securely between the members of your household.
- Provide the connected Gmail/Calendar features described in Section 4, when enabled.
- Send service notifications you have opted into.
- Monitor performance, diagnose crashes, and improve the App.
We do not sell your personal data.
7. AI features
Some optional features (such as drafting or summarising) may process the relevant text through a third-party AI provider under a data-processing agreement. Content sent for these features is used only to return the result to you and is not used by us to train generalized models. These features are clearly indicated in the App.
8. Sub-processors & third parties
| Provider | Purpose |
|---|---|
| Google LLC | Sign-in and, if connected, Gmail/Calendar access |
| Apple Inc. | Sign in with Apple, App distribution and push notifications |
| Cloudflare, Inc. | Website hosting and content delivery for thisiseven.app |
| PostHog | Product analytics (EU data region) |
| Self-hosted backend | The Even API and database run on infrastructure operated by Harvested ZZP |
9. International transfers
Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Data retention & deletion
We keep your personal data while your account is active. You can delete your account at any time from within the App; on deletion we remove your identifiable personal data, though limited pseudonymised logs may be retained where necessary for security or to meet a legal obligation. To request deletion by email, contact [email protected].
11. Children
Even is not directed to children under 16, and we do not knowingly collect their personal data.
12. Security
We use encryption in transit, access controls, and least-privilege practices to protect your data. No system is perfectly secure, but we work to keep your information safe and to respond promptly to any incident.
13. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with your local supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).
14. Cookies
The thisiseven.app website uses only the cookies/local storage needed to run the site and, where you consent, privacy-friendly product analytics. It does not use advertising cookies.
15. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the App.
16. Contact
Questions about this policy or your data: [email protected].