Privacy Policy

Evolve (“Evolve”, “we”, “us”, or “our”) is building a wearable device and companion services that help people improve their posture and overall wellbeing. We believe the ability to heal yourself starts with trust, so we hold ourselves to a simple set of privacy principles: we never sell your personal data; we collect only what we need to provide the services you ask for; you can access or delete your personal data at any time; and your body’s data belongs to you.

This Privacy Policy explains what personal data we collect through this website, the waitlist, our newsletter, community features, and events (together, the “Services”), how we use and share it, and the rights and choices you have. If you have any questions, contact us at sayhi@healwithevolve.com (click to copy).

Directly from you — when you join the waitlist, subscribe to the newsletter, submit a community story, register for an event, book a call, or contact us.

Automatically — when you visit the site, we and our service providers collect limited technical data such as IP address, browser and device type, operating system, referring pages, pages viewed, and timestamps.

From service providers — for example, our scheduling provider tells us when you have booked a call, and our email provider tells us whether our emails were delivered or opened so we can keep our lists healthy.

Identifiers and contact data: your email address; and if you provide them, your name and location.

Waitlist and marketing data: the form and page you signed up from, your communication preferences, and engagement data such as emails opened and links clicked.

Community content: the name, location, and story text you choose to share through our story form, and content you submit in connection with events.

Communications: messages you send us, and information you share when you book or attend a call with our team.

Device and usage data: the technical data described in Section 2, used for security and site improvement.

We do not ask for, and you should not submit, government identifiers, payment card numbers, or medical records through this website.

We use a small number of cookies and similar technologies that are necessary for the site to function and to keep it secure, and — if we introduce analytics — to understand how the site is used in aggregate. You can control cookies through your browser settings; blocking essential cookies may affect how the site works. We do not use cookies for third-party behavioral advertising, and we honor Global Privacy Control signals where required by law.

We use personal data to: operate the waitlist and send the updates you asked for; deliver our newsletter; publish community stories you submitted for that purpose; organize and run events; respond when you contact us; secure, maintain, and improve the Services; understand interest in Evolve in aggregate; comply with legal obligations; and enforce our terms.

Where the GDPR or similar laws apply, our legal bases are: your consent (newsletter, waitlist, community stories — which you may withdraw at any time); our legitimate interests (site security, improvement, and responding to your messages), balanced against your rights; and compliance with legal obligations.

We never sell your personal data and we do not share it with third parties for their own marketing. We share personal data only:

With service providers who process it on our behalf under contractual confidentiality and security obligations — currently our database provider (Supabase), our email delivery provider (Resend), our scheduling provider, and our website hosting provider — and only to the extent needed to provide those services.

For legal reasons — if required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, safety, or property of Evolve, our users, or the public.

In a business transfer — if Evolve is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy’s commitments.

Publicly, at your direction — community stories you submit for publication are displayed on our community page with the name and location you provided.

This website does not collect health, posture, or biometric data. When the Evolve device and app launch, the posture and movement data they collect will be governed by a dedicated privacy notice presented to you before you begin, built on the same principles: no selling of personal data, deletion on request, and full access to your own data. We will never share identifiable health data with insurers, employers, or advertisers.

Email: every marketing email we send includes an unsubscribe link, and unsubscribing takes effect promptly. Transactional emails (for example, confirming a request you made) may still be sent.

Community stories: you may ask us to edit or remove your published story at any time.

Cookies: you can manage cookies in your browser settings as described in Section 4.

We use technical and organizational measures appropriate to the risk, including encryption in transit (TLS), access controls, and the principle of least privilege for our team and providers. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

We keep personal data only as long as needed for the purposes described above: waitlist and newsletter data until you unsubscribe or request deletion; community stories until you ask us to remove them; correspondence for as long as needed to resolve your request and for a reasonable period afterward; and technical logs for a short, rolling window. When data is no longer needed, we delete or anonymize it.

Our service providers may store and process data in the United States and other countries. Where personal data of European residents is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

The Services are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Depending on where you live, you may have the right to: access the personal data we hold about you and receive a copy in a portable format; correct inaccurate data; delete your data; object to or restrict certain processing; withdraw consent at any time (without affecting processing that already happened); and not be discriminated against for exercising any of these rights.

To exercise any right, email sayhi@healwithevolve.com. We will verify your request (usually by confirming control of the email address on file) and respond within the time required by applicable law. You may also use an authorized agent where the law allows.

If you live in California or another U.S. state with a comprehensive privacy law (including the CCPA/CPRA, and similar laws in Colorado, Connecticut, Virginia, Utah, and others), this section applies to you. In the last 12 months we have collected the categories of personal information described in Section 3 (identifiers, customer records you provide, and internet activity), for the purposes in Section 5, and disclosed them only to the service providers in Section 6.

We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not collect the categories defined as sensitive personal information, and we do not use personal information for automated decision-making that produces legal or similarly significant effects. You have the rights to know, access, correct, delete, and to limit use of sensitive personal information, and the right not to receive discriminatory treatment for exercising your rights. Exercise them as described in Section 13.

If you are in the European Economic Area, the United Kingdom, or Switzerland, Evolve is the controller of your personal data. We process it on the legal bases described in Section 5, transfer it under the safeguards in Section 11, and honor the rights in Section 13, including your rights under Articles 15–21 of the GDPR. You also have the right to lodge a complaint with your local data protection supervisory authority, though we would welcome the chance to address your concern directly first.

We may update this policy as Evolve grows. We will post the updated version here and revise the “Last updated” date above. For material changes, we will give you prominent notice — for subscribers, by email — before the changes take effect.

For anything in this policy, or any privacy question at all, write to sayhi@healwithevolve.com (click to copy). We read every message.