Requests for your data

Eva stores your cycle, your symptoms, your appointments and — if you use Pregnancy mode — your pregnancy and its outcome. Records like these have been sought in criminal investigations. This page says what Eva does when someone other than you asks for them, and how often that has happened.

What Eva holds

Your email address and which sign-in methods you use. Your profile, if you completed it: your age, weight, height, goals, conditions, medications, lifestyle and sports. Every calendar entry you logged, with its date, time and note. Nothing else that identifies you: no name, no date of birth, no location, no advertising or analytics record of what you did in the app. An entry you delete can be restored for 30 days and is then removed for good — unless you log that day again, which replaces it and ends the window early; a deleted account is removed straight away. Eva keeps no backup copies today, so once an account is deleted there is nothing left for anyone to ask for. If that changes, a copy would persist for up to 30 days, and this page will say so before it does.

What Eva does with a request

• Only legal process. Eva answers a subpoena, court order or warrant that is valid, served on Eva, and names the account it concerns. An email, a letter or a phone call — from the police, from a lawyer, from a partner, a relative, an employer or an insurer — receives a copy of this policy and nothing else, not even confirmation that an account exists.
• Nothing voluntary. Eva does not hand over data because a request is described as urgent.
• Non-US authorities go through the treaty route. A request from outside the United States has to come through mutual legal assistance, which produces US legal process. Eva does not answer foreign process served directly.
• As little as the process allows. Eva produces what is named and nothing more, and challenges process that asks for more than it should.
• You are told. Before Eva answers, it tells you what was asked, by whom, and what it intends to produce, so you can challenge it yourself. The one exception is an order from a court forbidding Eva to tell you — and when that order ends, Eva tells you then.
• What Eva cannot promise. A US company cannot refuse valid US process. What Eva controls is how narrowly it answers, whether it challenges, and whether you know. Where a state law forbids cooperating with an out-of-state inquiry about care that is legal where it was provided, Eva relies on it.

Transparency report

No requests received as of September 2026.

This report is updated every January and July and covers the preceding six months. It counts requests by kind — law enforcement in the US, law enforcement outside the US, civil process, informal requests refused, and demands to preserve data — with how many were answered in full, in part or refused, how many accounts they concerned, and how many people were told before, after, or not yet because an order still stands. A report is published even when every number is zero. Next update: January 2027.

Serving process

Eva accepts service only at the registered address of the company that operates it. That company's name and address will be published here when it is registered. Eva does not accept service by email.

The full policy, including the legal positions it rests on and which of them still need a lawyer's confirmation, is kept alongside Eva's other documents and is reflected here whenever it changes. Questions about it go through the contact route on this site.