Privacy Policy

Everyday Works respects your privacy. This Privacy Policy explains how Sadie Gordon, operating the Everyday Works brand (“Everyday Works,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information through everydayworkstoday.com, related webpages, digital-product sales, newsletters, customer support, and our mobile applications (collectively, the “Services”).

The mobile applications covered by this Policy include Forget Me Not Admin (also listed as Forget Me Not – Life Admin), Moody Meals (also listed as Moody Meal Method), Plan in Place (also listed as Plan in Place Planner), and Notes from the Nest (also listed as Notes from the Nest Rhythm), together with later versions that link to this Policy.

Please read the separate Consumer Health Data Privacy Notice for additional information about health-related information in Moody Meals and Forget Me Not. If that notice provides greater protection for consumer health data, the health-data notice controls.

1. Information we collect

The information we collect depends on the Service, platform, permissions, and features you use.

A. Contact and account information

We may collect your name, email address, account identifier, login or authentication information, communication preferences, and information you provide when creating an account, joining a newsletter, requesting support, submitting a privacy request, or contacting us.

B. Content you choose to enter or upload

Our apps are organizational tools. Depending on the app and feature, user content may include:

• Forget Me Not: medical history, allergies, medications, procedures, side effects, insurance information, emergency and professional contacts, identification or travel-document details, dates, notes, questions, photos, uploaded documents, and prescription images or medication names you choose to submit to optional OCR or medication-interaction features.
• Moody Meals: meal and food logs, mood or emotion entries, mental-clarity observations, symptoms or patterns you choose to record, goals, notes, and related health or wellness information.
• Plan in Place: itineraries, flights, lodging, reservations, confirmation information, destinations, travel notes, important documents, and related trip details.
• Notes from the Nest: family or caregiver routines, child-related schedules and notes, household information, shared planning content, and other entries you choose to create.

Please do not enter information you do not have authority to use. If you add information about another person, including a child, family member, patient, client, or travel companion, you are responsible for having an appropriate legal basis or permission to do so.

C. Location information

Plan in Place or another released feature may request precise or approximate location to organize place-based information or travel plans. We access location only when the feature requires it and you grant device permission. Forget Me Not does not request GPS or geolocation permission in the version reviewed for this draft.

D. Purchases and subscriptions

When you buy a digital product or subscription, we may receive transaction identifiers, product purchased, price, date, subscription status, renewal status, refund status, and limited billing-related information. Apple, Google, Stripe, and other payment providers process payment-card or store-account details under their own terms and privacy policies. Everyday Works generally does not receive your full payment-card number.

RevenueCat may process app-store purchase and entitlement information so the apps can determine whether subscription features are active.

E. Device, usage, and diagnostic information

The four app codebases reviewed for this draft did not contain dedicated analytics, advertising, tracking, or crash-reporting SDKs. The Services may still generate device, server, transaction, diagnostic, security, or support records needed to operate and protect a feature. Depending on the released version and enabled services, those records may include device type, operating-system and app version, language, time zone, approximate region derived from technical information, timestamps, request or error details, and identifiers used for security, subscriptions, or troubleshooting. We do not use health-related entries for advertising.

F. Website, cookie, and marketing information

When you visit our website, we may collect internet protocol address, browser and device information, pages viewed, referring page, timestamps, cookie identifiers, and interactions with forms or links. If you join our email list, Kit / ConvertKit may process your email address, subscription status, tags or interests, and engagement data. Please see the Cookie Policy for more information.

G. Support and privacy-request information

We collect the content of messages you send, attachments, the Service involved, and information reasonably needed to respond, authenticate a request, prevent fraud, or document our response.

2. Sources of information

We obtain information:

• directly from you when you enter, upload, purchase, subscribe, or communicate;
• automatically from your device or use of the Services, subject to permissions and consent settings;
• from Apple, Google, Amazon Web Services, MongoDB, RevenueCat, Stripe, Kit / ConvertKit, Google Gemini through an Emergent-managed integration when you invoke an applicable Forget Me Not feature, and other providers that help deliver a transaction or feature;
• from another user when they invite you to a shared or family feature or enter information about you; and
• from publicly available sources when reasonably necessary to protect the Services or respond to a lawful matter.

3. How we use information

We may use personal information to:

• provide, maintain, synchronize, personalize, and troubleshoot the Services;
• create and administer accounts and shared or family features;
• process purchases, recognize subscriptions, and deliver digital products;
• respond to support, privacy, accessibility, and legal requests;
• send service notices, receipts, security alerts, and messages you request;
• send newsletters or marketing only as permitted, with an unsubscribe option;
• understand feature performance and improve usability;
• secure accounts, prevent fraud and abuse, debug errors, and enforce our terms;
• comply with law, protect rights and safety, and establish or defend legal claims; and
• carry out another purpose disclosed when information is collected, with consent where required.

We do not use health-related user entries for targeted advertising. We do not sell personal information for money. If our practices change in a way that legally constitutes a sale or targeted-advertising share, we will update our notices and provide required choices before beginning that practice.

4. How information is disclosed

We may disclose personal information in the following circumstances.

Service providers

Depending on the Service and configured release, providers may perform website or app hosting, database and cloud storage, authentication, subscription administration, payment processing, email delivery, customer support, security, diagnostics, or a user-requested AI-assisted feature. Providers identified in the audited code or business inventory include Amazon Web Services (including Cognito, S3, and DynamoDB), MongoDB, Apple, Google, RevenueCat, Stripe, Kit / ConvertKit, and Google Gemini through an Emergent-managed integration for optional Forget Me Not prescription OCR/text extraction and medication-interaction requests. They may process only the information needed for their assigned function, subject to their own applicable terms and our configuration and agreements. Specific providers and configurations may vary by Service and may change; we will update this Policy when a material provider or data practice changes.

At your direction

We disclose content when you intentionally export it, share it, invite another person, use a family or caregiver feature, or direct us to connect with another service. People you share with may save, copy, or further disclose the information, so share sensitive information carefully.

Legal, safety, and rights protection

We may disclose information when we reasonably believe disclosure is required by law, court order, or valid legal process, or is necessary to protect users, the public, Everyday Works, or the integrity of the Services; investigate fraud or abuse; or enforce agreements.

Business transition

If Everyday Works is involved in a merger, financing, reorganization, sale, or transfer of all or part of the business, information may be reviewed or transferred as part of that transaction, subject to appropriate confidentiality and legal requirements. We will provide notice if required before information becomes subject to materially different privacy practices.

Aggregated or deidentified information

We may use or disclose information that has been aggregated or deidentified so it is not reasonably linkable to an individual. We do not attempt to reidentify such information except to test whether deidentification works or as permitted by law.

5. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining transaction and consent records, resolving disputes, securing systems, and meeting legal, tax, accounting, and reporting obligations.

Retention varies by data and feature. Account content may remain while an account is active and until deletion is completed. Transaction records may be kept longer when required for tax, fraud-prevention, or legal purposes. Support and security records may be kept for a reasonable period after resolution. Deletion from backups may occur on the backup system’s ordinary cycle unless a shorter period is required by law. Consumer health data is also subject to the deletion terms in the Consumer Health Data Privacy Notice.

We may retain information that has been deidentified so it can no longer reasonably identify you.

6. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the size of our operations. These may include access controls, authentication, encryption in transit or at rest where supported, software updates, backups, vendor controls, and incident-response procedures. No system is completely secure. Keep your device, password, recovery methods, and exported copies protected, and do not use the apps as the sole location for information needed in an emergency.

7. Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• know or confirm whether we process your personal information;
• access or receive a copy of certain information;
• correct inaccurate information;
• delete information;
• withdraw consent or object to or restrict certain processing;
• opt out of marketing emails;
• opt out of legally defined sale, targeted advertising, or certain profiling; and
• appeal a decision on a privacy request where applicable.

You may exercise available rights through in-app controls, the Account and Data Deletion page, or the secure contact form at https://everydayworkstoday.com/contact. Select or write “Privacy Request” and identify the app or Service involved. We may ask for information reasonably necessary to verify your identity and protect the account. Authorized agents may submit requests where the law allows, but we may require proof of authority and direct identity confirmation.

We will not discriminate against you for exercising a privacy right. We respond within the period required by applicable law. Certain information may be exempt, and we may retain limited records needed to document the request or comply with law. If we deny a request, we will explain the reason and any available appeal method.

Email and device permissions

You may unsubscribe from marketing emails using the link in the message. Service or transaction messages may still be sent when necessary. Device settings control permissions such as location, notifications, photos, camera, or files. Withdrawing a permission may prevent a feature from working.

8. Children’s privacy

The Services are designed for adult purchasers, parents, guardians, and caregivers. Children may be the subject of information an adult chooses to organize, but children under 13 are not permitted to create an account or submit personal information directly to Everyday Works. If you believe a child has submitted personal information without appropriate parental authorization, contact us so we can investigate and delete it as required.

Parents and caregivers should enter only information reasonably necessary for the intended planning function and should avoid sharing a child’s sensitive information with people who do not need it.

9. International use

Everyday Works is operated from the United States. If you use the Services from another country, information may be processed in the United States or other places where our providers operate. Those locations may have different data-protection laws. Where required, we rely on consent, performance of a contract, legitimate interests that do not override your rights, compliance with legal obligations, or another lawful basis for processing, and we use legally recognized transfer measures.

10. Third-party services and links

The Services may link to or interoperate with app stores, payment services, websites, products, or services we do not control. Their privacy practices apply to their own processing. Review their notices before providing information. An affiliate link does not give Everyday Works control over the linked company’s practices.

11. Changes to this Policy

We may update this Policy to reflect changes in the Services, law, or data practices. We will post the revised Policy with a new effective date and provide additional notice or obtain consent when required. Material changes apply prospectively unless law permits otherwise.

12. Contact us

Everyday Works is operated by Sadie Gordon in Utah, United States. For privacy questions or requests, use the secure contact form at https://everydayworkstoday.com/contact and identify the app or Service involved. For account deletion, also review https://everydayworkstoday.com/delete-app. For consumer health data, review https://everydayworkstoday.com/consumer-health-data.