Privacy Policy
This policy explains what personal data Evidio collects, how we use it, and the third parties that process it on our behalf.
Privacy Policy Effective date: 17 July 2026 · Last updated: 26 August 2026
Latest change (26 August 2026): we now ask for your date of birth at sign-up to confirm you are at least 16, and we explain the identity check that will be required for commenting.
Evidio (“Evidio”, “we”, “us”) operates the Evidio science platform, a mobile app and website where creators post short-form, source-based posts that expert reviewers approve before they are published.
The data controller is Lara Emily Hopf, 80 John Street, M5V 3X4 Toronto, ON, Canada. For any privacy question or request, contact us at getevidio@gmail.com.
On this page
1. Data we collect
We only collect what the service needs to function, plus limited product analytics to improve the app (see below). We do not use advertising or cross-app tracking technologies, we do not sell your data, and we do not share it with data brokers.
| What | When | Why |
|---|---|---|
| Email address and password | When you create an account or sign in | Authentication and account security |
| Name and username | At sign-up and profile editing | Account identity and attribution of your posts |
| Date of birth | At sign-up | To confirm you meet our minimum age of 16. We store the date you enter so we can apply the age requirement; we do not use it for anything else. |
| Bio and area of expertise | If you fill in your profile | Displayed on your profile and posts |
| Verification details — a university email, a paper DOI, or a proof-of-study document (PDF) | If you apply to become a verified creator or expert | To verify academic credentials |
| Your posts: text, images, and videos, with their cited sources | When you submit content | The core purpose of the platform |
| Comments, votes, and reports you make | When you interact with content | To operate the feed, review, and moderation features |
| Block lists | When you block another user | To hide content you don’t want to see |
| Product-usage events tied to your account ID | As you use the app (if analytics is enabled) | Understanding how features are used, to improve the app |
We do not collect location data, and we do not access your camera, microphone, contacts, health, or financial information. The app requests photo-library access only so you can attach media you choose to a post.
Identity verification for commenting
Posting a comment on Evidio requires a one-time identity check. This keeps public discussion free of spam and impersonation.
This check is not active yet. Evidio does not currently collect government ID or biometric data of any kind. When the check launches, the ID document and selfie will be handled by a specialist identity-verification provider acting as our processor — Evidio will never receive or store the document image or the biometric data itself, only a pass/fail result, the legal name returned by the provider, and the date of the check. We will update this policy, name the provider, and ask for your explicit consent before any of that begins.
2. How we use your data
- To provide and operate the service (accounts, posting, review, notifications).
- To verify creator and expert credentials.
- To keep the platform safe (moderation, reporting, blocking).
- To run an automated AI fact-check on new submissions that gives expert reviewers an initial rating and notes. This assists human review; it does not replace it — every published post still requires expert approval.
- To send you transactional messages, such as reviewer invitations and status updates about your submissions.
- To understand how the app is used, through privacy-preserving product analytics. We do not use this data for advertising, and we do not combine it with third-party data to track you across other apps or websites.
We rely on your consent and on the performance of our terms of service as the legal bases for this processing.
3. Third-party sub-processors
We use a small number of trusted service providers (“sub-processors”) to run the platform. They process personal data only on our instructions and only for the purposes below. We do not use any advertising providers.
| Sub-processor | What they process | Purpose | Their privacy policy |
|---|---|---|---|
| Supabase (Supabase, Inc.) | Account data (email, name, username, profile), all user content (posts, comments, sources, images), verification documents, and moderation data. This is our primary database, authentication, and file storage. | Backend database, sign-in, file storage, and realtime features | supabase.com/privacy |
| Mux (Mux, Inc.) | Video files that creators upload, and the technical data (including IP address) exchanged when a video is streamed to a viewer’s device. | Hosting, encoding, and streaming of post videos | mux.com/legal/privacy |
| Resend (Plus Five Five, Inc.) | The recipient email address and the contents of the message. | Delivery of transactional email (e.g. reviewer invitations and notifications) | resend.com/legal/privacy-policy |
| PostHog (PostHog, Inc.) | Product-usage events, associated with your Evidio account identifier only. We do not send your name, email, or precise location, and we disable IP-based geolocation. | First-party product analytics to understand feature usage and improve the app. Not used for advertising or cross-app tracking. | posthog.com/privacy |
| Third-party AI provider | The content of a submission (its title, text, transcript, and cited sources), sent to perform an automated fact-check. No name, email, or account identifier is attached to the request. | Generate an initial rating and notes to help expert reviewers assess a submission before they accept or reject it. | Governed by the provider’s own privacy policy. |
Each sub-processor may store data on cloud infrastructure in the United States and/or other regions. Where personal data is transferred internationally, it is protected by appropriate safeguards such as Standard Contractual Clauses.
We do not send your personal data to any party other than the sub-processors listed above, except where required by law.
4. Data retention
We keep your account data and content for as long as your account is active. Content you post may remain visible to others until you delete it or your account is removed. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.
Your date of birth is kept alongside your account for as long as the account exists, so the age requirement stays enforceable, and is deleted with the rest of your data when you delete your account.
5. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
- To delete your account and associated data, use the “Delete account” option in the app (on your Account tab), or contact us at the address below.
- For any other request, contact us at getevidio@gmail.com. We will respond within the timeframe required by applicable law.
6. Children
Evidio is not directed to children under 16, and we do not knowingly collect personal data from them. You must be at least 16 to create an account. We ask for your date of birth when you sign up and refuse registration if it shows you are under 16.
If you believe a child has provided us data, contact us at getevidio@gmail.com and we will delete it.
7. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. Material changes will be communicated in the app or by email where appropriate.
8. Contact
Get in touch
We are happy to help with privacy questions or data requests.
Lara Emily Hopf
80 John Street, M5V 3X4, Toronto, ON, Canada
Email: getevidio@gmail.com