Privacy Policy

Effective 17 October 2026. Everwick is operated by an individual owner in Texas, United States.

Everwick is a household financial modeling tool. The numbers you enter stay on your own device — on the web, everything stays in your browser; on the mobile app, signing in stores the household and portfolio data you enter in your account. Everwick runs no advertising and sells nothing about you. The site counts its visits with Google Analytics (section 5); that counting never sees the numbers you enter.

1. Where your financial data lives

On the web: accounts, holdings, balances, goals, assumptions, planning notes, cash flow, debts, benefits, and simulation results are stored in your browser's local storage on the device you use, and nothing is uploaded as a set. The one exception is the optional price refresh described in section 3: it sends the ticker symbol of a holding through our hosting provider, so a symbol you look up can appear in ordinary server request logs. No amounts, balances, or account values are ever sent. Clearing your browser data for this site, or using "Delete Everything" inside the app, erases them.

In your account: on the Everwick mobile app, the data you enter while signed in is stored in your account: your portfolios, accounts, holdings (ticker symbols, share counts and prices), contribution schedules and goals, and your household data — cash flow, debts, benefits, and your planning triage answers. Data that was already on the device before you signed in is different: it moves into your account only through a move you explicitly confirm — the app shows a list of what will move and asks first. The web does not yet offer moving data into an account; everything on the web stays in your browser. Signing in by itself copies nothing that is already on a device. Data stored in your account lives in Cloud Firestore, a service of Google LLC acting as our processor, in the United States. Each stored record belongs to your account alone; Everwick's access rules let only your signed-in account read or write it. Anything not stored in your account stays on the device and is shown as "on this device" in the app.

For data on your device there is no backup on our side: clearing browser data, switching devices, or private browsing loses it and it cannot be recovered by us. For data stored in your account, Everwick keeps it until you delete the account (section 8); you can ask for a copy at any time (section 8).

2. An account is optional

Everwick works fully without an account. If you choose to create one or sign in, that step is handled by Firebase Authentication, a service of Google LLC acting as our processor. Two methods are live: email and password, and Continue with Google. In either case the following is processed outside your device:

Using email and password does not involve the Google-profile row above. Using Continue with Google means no Everwick password exists for your account. Either way, this table is the complete set of account information held outside your device; the only other data that leaves it is described in sections 3 to 5 (looked-up ticker symbols, ordinary web-server request logs, and visit statistics).

Creating an account does not, by itself, upload anything already on a device. On the web, your financial data never leaves your browser. On the mobile app, the portfolio and household data you enter while signed in is stored in your account, as described in section 1. The web and the mobile app do not share data with each other. Google's handling of the above is described in the Firebase privacy documentation.

3. Optional price lookups

If you use the price-refresh feature, the ticker symbol you look up is sent to a market-data endpoint to retrieve a current price. Your balances, holdings, account values, and personal details are not included in that request. The request goes to query1.finance.yahoo.com (Yahoo Finance) through our hosting provider; if Yahoo does not answer, our hosting provider may retry the lookup against cdn.cboe.com (Cboe Global Markets). Both of those providers receive the request from our hosting provider, so they see the ticker symbol and our hosting provider's network details, not your IP address. If the server-side path fails entirely, your browser may fall back to the public relays corsproxy.io or api.allorigins.win — those relays are contacted directly by your browser, so they can see the ticker symbol and your IP address. Because the primary path is served through our hosting provider, the symbol also appears in that provider's request logs (section 4), which means it is visible to Everwick's operator there. That log entry shows which symbol was requested, never how much of it you hold. If you prefer not to involve any of this, enter prices manually and do not use price refresh.

4. Hosting

The site is served by Cloudflare (Cloudflare, Inc.), which processes ordinary web-server request data such as IP address, timestamp, requested URL, and user agent, in order to deliver the page and protect against abuse. Fonts and images are served from this same domain. Beyond that, loading Everwick contacts one external host: Google, to load the visit-counting script described in section 5 when that counting is on for your visit. No other external host is contacted until you sign in or use price refresh. During the hosting transition, and if the fallback is ever activated, the site may instead be served by Netlify, which processes the same categories of web-server request data.

5. Visit statistics (Google Analytics)

The site uses Google Analytics 4, a service of Google LLC, to count visits so the operator can see whether anyone is finding the site. It records which pages are visited, roughly where visits come from (country or city level, derived from the IP address — Google Analytics 4 does not log the full IP address), and what kind of device and browser is used. The page address it receives is cut down to the site and the page path — anything after a ? or # is removed — and the site a visit came from is reduced to that site's domain name.

Visits are not counted at all when your browser sends a Global Privacy Control or Do Not Track signal: Google Analytics is not loaded and sets no cookies. It is also loaded only on myeverwick.com, so test copies of the site are never counted.

If your device indicates that you are in the European Economic Area, the United Kingdom or Switzerland, Everwick asks first: Google Analytics is not loaded and sets no cookies until you choose Allow, and choosing Don’t allow, or not answering, means it is never loaded. Everwick works this out on your device from its time zone and language settings, and asks whenever they are unclear; a device set to a time zone and languages from outside those countries is treated as being outside them. Your answer is remembered in this browser’s local storage. Anyone, wherever they are, can change it at any time: open the visit-counting choice. Choosing Don’t allow there stops the counting and removes the Google Analytics cookies. If your browser sends Global Privacy Control or Do Not Track, visits are not counted and there is no choice to make, so this link shows nothing.

It is configured to do only that: no advertising features, no ad personalization, no "Google signals" cross-device profiling, and Everwick never sends it an identifier of its own (no account ID, email address or user ID). Google Analytics assigns its own random visitor identifier, stored in the cookies described in section 7, plus a per-visit session number, and records standard visit events: a first visit, the start of each visit, and how long a page was in use. It does not see your financial data, your simulation results, your account details, or anything you type into the app — those stay on your device exactly as described in section 1. Google processes this measurement data on the operator's behalf; Google's own description is at policies.google.com/technologies/partner-sites.

To opt out, use Google's browser add-on at tools.google.com/dlpage/gaoptout, or block the googletagmanager.com and google-analytics.com domains with a content blocker or your browser's tracking protection. Everwick works exactly the same with analytics blocked.

6. What Everwick does not do

• No advertising, ad networks, or ad identifiers.
• No sale or sharing of personal information for money or for cross-context behavioral advertising.
• No product telemetry inside the app, no session recording, and no trackers beyond the visit counting described in section 5.
• No credit, banking, or brokerage connections. Everwick never asks for bank credentials, card numbers, or government identifiers, and cannot move money or place trades.
• No payments. Everwick is free today and has no purchase path, so no payment data exists.

7. Cookies

Everwick sets no advertising cookies. It uses your browser's local storage for your own data and preferences, and Firebase Authentication stores a session token locally if you sign in. Google Analytics sets first-party cookies (named _ga and _ga_…) that tell repeat visits apart from new ones; they carry a random identifier, not your name or anything you entered. In the European Economic Area, the United Kingdom and Switzerland they are set only after you choose Allow, and your answer is kept in local storage, not in a cookie. Whenever the Everwick app opens and Google Analytics does not run, the app removes those cookies if an earlier visit left them. Section 5 describes what that measurement collects and how to opt out.

8. Your choices and requests

• Visit counting: change your visit-counting choice at any time (section 5). If your browser sends Global Privacy Control or Do Not Track, visits are not counted and there is no choice to make, so this link shows nothing.
• Erase local data: use "Delete Everything" in the app, or clear this site's browser data. Delete Everything keeps your visit-counting choice, so a Don’t allow stays in place; clearing this site’s browser data removes that choice too.
• Access, correct, or delete an account: email myeverwick@pm.me from the address on the account. Account deletion is handled manually at present and is processed within 30 days.
• Reset a password: use the password-reset link in the sign-in screen.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to be free from discrimination for exercising them. Because the only personal information Everwick holds outside your device is account data, requests are answered from that data. We do not require an account to use the product, and we do not charge differently based on privacy choices.

9. Retention

Data on your device persists until you clear it. Data stored in your account persists until you delete the account, which removes every record under it; sign-in data is handled as described in section 2. Hosting and authentication logs are retained by those providers under their own schedules.

10. Children

Everwick is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child created an account, email us and we will delete it.

11. International visitors

Everwick is operated from the United States, and its tax and account modeling is built for US rules. If you use it from elsewhere, the processing described above happens in the United States and other countries where Google, Cloudflare, and — while it remains the transitional fallback host — Netlify operate.

12. Open beta

Everwick is in open beta. Cloud storage of account data is described in section 1. A future release may add sync between devices or other processing; if that changes what is described here, this page is updated and its effective date changes before the feature ships.

13. Contact