Coeval Privacy Policy

Last updated: September 27, 2026

Coeval is a personal timeline app made by Enliva LLC (“Enliva”, “we”). This policy explains what happens to your information when you use Coeval for iPhone and iPad and the Coeval website and web app at coeval.enliva.org.

The short version: your entries live on your devices. If you turn on sync, they are encrypted before they leave your device, and only your devices can read them. We use no analytics, advertising or tracking tools, and we do not sell or share your information.

What stays on your device

Everything you record — text, photos, videos, recordings, places, songs, workouts and the news you note — and your settings are stored in Coeval’s private storage on your device. We have no access to it. Your device’s own backups (iCloud or a computer) include it according to your device settings.

Permissions Coeval asks for

Camera and photo library: only when you take or choose a photo or video for an entry.
Microphone: only while you record audio or identify the song playing around you.
Location: only when you add a place to an entry.
Apple Health: only if you turn on workout import (see below).

You can change each permission at any time in your device’s Settings.

Sync (optional)

Sync keeps your devices and the web app in step. It is off until you turn it on.

When you turn it on, your device creates a random 256-bit key. The key travels only between your own devices, by QR code or a link you copy. It never reaches our server.
Entries, photos, videos and recordings are encrypted on your device with AES-256-GCM before upload.
Our sync server runs on Cloudflare’s infrastructure. It stores the encrypted data, a random identifier for your set of devices, entry identifiers, version stamps, deletion markers, file sizes, the times of changes, and a hash of an access code derived from your key. It cannot read the contents.
Cloudflare processes your IP address to deliver requests, as any web service does. We do not use it to identify you.

To delete everything on the server, choose Settings › Sync › Turn Off Sync › Turn Off and Erase the Synced Copy. Because we never have your key, we cannot recover your synced data if you lose all your devices and the link.

The web app

When you open a sync link at coeval.enliva.org/app, the key is kept in that browser’s local storage and your entries are decrypted in the browser. Nothing decrypted is sent to us. Choose “Forget This Browser” to remove the key.

Apple Health

If you turn on workout import, Coeval reads your workouts and their routes from Apple Health. It reads nothing else and never writes to Health.

Workouts are stored on your device and, if sync is on, as encrypted copies on the sync server.
Health information is never used for advertising, marketing or data mining, and is never sold or shared with anyone.
Coeval does not upload health information to iCloud. Your device’s own backup includes it along with your other entries.

You can stop access at any time in Settings › Privacy & Security › Health › Coeval.

Services provided by Apple

Song recognition uses Apple’s ShazamKit: a short audio signature is sent to Apple to find a match.
Maps and place names use Apple Maps: the coordinates involved are sent to Apple to draw maps and look up names.

Apple handles this information under Apple’s own privacy policy.

World news

The History layer is built into the app. When the Daily Top 10 becomes available, the app downloads it from our server; those requests contain no personal information.

What we do not do

No analytics, advertising, tracking or third-party SDKs in the app or on the website.
No accounts: Coeval does not ask for your name, email or phone number.
We do not sell, rent or share your information.

Children

Coeval is not directed to children under 13, and we do not knowingly collect information from them.

Your choices and deleting data

Delete any entry in the app; with sync on, the deletion reaches your other devices.
Export a full backup at any time in Settings › Your Data.
Turn off sync and erase the synced copy in Settings › Sync.
Deleting the app deletes the data stored on that device.

Because we cannot read synced content, we cannot look up or hand over your entries on request; the tools above put that control with you. For anything else, write to support@enliva.org.

Changes to this policy

If this policy changes, we will update the date above, and point out significant changes in the app or on this website.

Contact

Enliva LLC · support@enliva.org