Privacy Policy
1. Introduction
Eva, LLC ("Cardeon," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you access or use the Cardeon mobile application, website, or related services (collectively, the "Service"). By using the Service, you consent to the collection and use of information as described in this Privacy Policy.
2. Applicability
This Privacy Policy applies to individuals using the Service within the United States. Cardeon is intended solely for users located within the United States.
3. Information We Collect
a) Information You Provide
- Name
- Email address
- Date of birth
- Sex
- Assessment responses
- Challenge participation data
- Wellness-related responses
- Optional notes or journal entries
- Customer support communications
- Subscription plan selections and billing preferences
b) Automatically Collected Information
- Device type
- Operating system
- App version
- Log data
- Usage analytics
- Crash reports
- IP address
- Session activity
- Cookie and tracking information
c) Payment Information
Cardeon does not collect, store, or process payment card information directly. All payment processing is handled exclusively by Stripe, Inc., our third-party payment processor. Payment information entered through the Stripe-hosted interface is transmitted directly to Stripe and is subject to Stripe's Privacy Policy and security standards. Cardeon receives only limited transaction confirmation data (such as subscription status and payment confirmation) from Stripe and does not have access to your full payment card details at any time.
4. Sensitive Information
Cardeon may collect wellness and mental health-related information through self-assessments, challenge participation, journaling, or other optional user activities. This information is collected solely for operation and improvement of the Service.
Cardeon does not knowingly collect:
- Biometric data
- Criminal records
- Political affiliation data
- Religious affiliation data
5. How We Use Information
- Operate and improve the Service
- Personalize user experiences
- Deliver assessments and challenge activities
- Maintain account integrity
- Provide customer support
- Improve platform functionality
- Prevent abuse and fraud
- Comply with legal obligations
- Process and manage billing and access codes for existing Provider seat licenses (Cardeon does not currently charge individual users a subscription fee)
- Send transactional and billing communications related to existing Provider subscriptions, including trial-expiration and payment-reminder notices where applicable, as well as notices regarding scheduled account deletion due to inactivity
6. Data Ownership & Control
Cardeon retains sole control over all platform infrastructure, user accounts, and stored data. Organizations, employers, providers, nonprofits, coaches, or other business clients purchasing access to the Service do not receive access to individual user data unless separately authorized by the user in writing. Cardeon is not currently accepting new organizational purchases.
7. Cookies & Tracking Technologies
Cardeon may use cookies, analytics tools, and similar technologies for session management, security, performance monitoring, product analytics, and fraud prevention. Users may disable cookies through browser settings, though portions of the Service may become unavailable.
8. Data Retention
We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, maintain platform security, resolve disputes, and enforce agreements. Subscription and billing records may be retained for longer periods as required by applicable financial, tax, and legal obligations. Certain content may become inaccessible to users after challenges or activities expire, though retained internally for compliance or security purposes.
Inactive Account Deletion. To protect user privacy and minimize data we no longer need, Cardeon automatically deletes accounts that have been inactive for 12 consecutive months, as follows:
- Individual (free) accounts — after 12 months with no sign-in, the account and its associated data are permanently deleted. Accounts with access sponsored by a Provider follow the Provider rule below instead of this one.
- Provider accounts — while a subscription or sponsored access is active, the account is not subject to inactivity deletion. The 12-month inactivity period begins once that subscription or access ends; after 12 months of inactivity following that point, the account and its associated data are permanently deleted.
- Business Client administrator accounts — the same rule applies: the 12-month period begins once the organization's access ends, and the account is not subject to inactivity deletion while that access is active.
Before deletion, we send a warning email to the account's registered email address 30 days and 7 days before the scheduled deletion date, giving the user the opportunity to sign in and retain the account.
Deleted account data is removed from our production systems, with backups purged within 7 days. Associated payment information held by our payment processor (Stripe) is redacted to the extent permitted by Stripe's own data retention requirements.
This policy does not apply to data we are required to retain for legal, tax, or regulatory purposes, which we retain only as long as necessary for those purposes.
9. Children's Privacy
The Service is intended for use by individuals age 18 and older. We do not knowingly collect personal information from individuals under the age of 18.
If we learn that we have collected personal information from someone under the age of 18, or if an account was created by someone under 18 prior to October 23, 2026, we will notify the account holder that their account is scheduled for closure 30 days from the date of notice. If the account holder turns 18 before the end of that 30-day period, the scheduled closure is cancelled and the account may continue. Signing in to the account during the 30-day period does not cancel the scheduled closure.
If you believe we have collected information from someone under 18 in violation of this policy, please contact us at [email protected].
10. Information Sharing
We do not sell personal information for advertising purposes. We may share information with:
- Authorized service providers
- Stripe, Inc. for payment processing (subject to Stripe's Privacy Policy)
- Cloud infrastructure providers
- Analytics providers
- Legal authorities when required by law
- Successors in connection with mergers or acquisitions
Cardeon does not monitor user activity, physical location, or participation in activities in real time. Cardeon assumes no duty to provide emergency response, crisis intervention, safety monitoring, wellness supervision, or physical activity oversight.
11. Data Security
We implement commercially reasonable safeguards intended to protect personal information. However, no system can guarantee complete security. In the event of a data breach affecting your personal information, Cardeon will notify affected users as required by applicable law.
12. User Rights & Choices
Users may request:
- Access to personal information
- Corrections to personal information
- Deletion of their account and associated data
- Portability of their personal information where technically feasible
In addition to user-initiated deletion, accounts may be automatically deleted after 12 consecutive months of inactivity, as described in Section 8 (Data Retention).
Certain information may be retained where legally required or necessary for legitimate business purposes, including subscription and billing records.
13. California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information.
14. Do Not Track Disclosure
Where applicable, Cardeon honors browser "Do Not Track" signals.
15. Changes to this Privacy Policy
We may update this Privacy Policy periodically. Where changes are material, we will provide notice through the Service or by email. Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.