1. Overview
Structure by Envoke ("Envoke", "we", "us") is a life-authoring and productivity system. This policy explains what data we collect, how we use it, where it is stored, and the choices you have. By using the app, you agree to the practices described here.
2. Data we collect
- Account data: your name and email address, used to create and authenticate your account.
- Content you create: agenda entries, journal entries, training logs, financial figures, nutrition logs, recovery check-ins, goals, notes, and any other content you enter into the modules you choose to use.
- Usage data: anonymous, aggregated analytics about feature use, which help us improve the app. We do not track your location or read your personal content for analytics.
3. How we use your data
- To provide and display your modules, agenda, and reviews across your devices.
- To authenticate you and keep your account secure.
- To sync your data so it is available when you sign back in.
- To generate the insights, summaries, and suggestions shown inside the app.
- To provide support if you contact us.
We do not sell your personal data to third parties, and we do not use your personal content to train external AI models.
4. Data storage and security
Your account and content are stored on secure, access-controlled servers operated by our platform provider (Base44). Data is transmitted over encrypted connections. Access to your content is restricted to you and authorised infrastructure systems. Sensitive fields are protected at rest where supported. Most of your content — agenda, journal, goals, training, finances and nutrition — is synced to your account so it survives reinstalling the app or switching devices, provided you sign in to the same account. Mental Health data is the exception. Daily check-ins, Five Pillars tracking (sleep, fuel, movement, connection, light) and the related history are stored on your device only. We do not upload, transmit or store this data on our servers, and no one else can see it. Because it is local, it is not backed up by us — if you delete the app or lose your device, that history cannot be recovered.
5. Third-party services
- Base44 — backend hosting, authentication, and database infrastructure.
- Apple / Google sign-in — optional authentication providers. We receive your name and email only.
- Stripe — processes subscription payments made on the web at envoke.online. We do not receive or store your full card details. Subscriptions purchased in the iOS app are processed by Apple, not Stripe.
- RevenueCat — manages subscription status for the iOS app. It receives a device identifier, your purchase history for this app, and your country as reported by the App Store.
Each provider operates under its own privacy policy. We share only the minimum data required to deliver the service.
6. Device permissions
Envoke may request access to the following device capabilities. Each is optional and only used when you trigger the related feature:
- Microphone — for voice-to-text input when you choose to dictate an entry.
- Notifications — to deliver optional reminders (if enabled).
- Camera / photo library — only if you choose to attach an image to an entry.
- Calendar — only if you choose to import events from an external calendar.
No permission is required to use the core app.
7. AI features
Some insights, suggestions, and plan generation use AI models that process your inputs to produce a response. Your content is sent to our AI provider to generate the response and is not retained by the provider beyond the needs of that request.
8. Data retention and deletion
Your data is retained for as long as your account is active. You can delete your account and associated data at any time from Settings → Delete account. App data is removed immediately; depending on backups, residual copies may persist for a limited period before being permanently purged. The app owner's login record may need to be removed separately via the Base44 dashboard.
9. Children's privacy
Envoke is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided personal data, contact us and we will delete it.
10. Your rights
You can access, correct, or delete your data at any time within the app or by contacting us. If you are in a region with data-protection rights (e.g. GDPR, Australian Privacy Principles), you may request a copy of your data or ask us to restrict certain processing.
11. Changes to this policy
We may update this policy as features change. We will note the updated date above. Continued use after changes means you accept the revised policy.