Legal
Privacy policy
Draft of 6 October 2026 · to be reviewed by counsel before publication
In short
- Everyy is not live yet. Today we collect only what you give us on this website: a waitlist sign-up or an ambassador application.
- When Everyy is live, we will handle the information needed to do what you ask through WhatsApp: who you are, what you tell us, your money and business records, and health, travel or other details if you use those services.
- We share information only with the partners and providers needed to deliver a service, keep it secure or meet the law. We never sell it.
- Marketing messages need your separate consent, and replying STOP ends them.
- You can ask what we hold, correct it, get a copy or ask us to delete it, in the chat or by email.
1. Who we are
Everyy is a technology service that lets people manage money, business and everyday life through conversation on WhatsApp. Everyy is not a bank, a medical provider or a travel agent. Regulated services are provided by licensed partners, and we tell you who they are before you use them.
Everyy decides why and how the information described here is used, which makes us the data controller, except where this policy says otherwise: a business that uses Everyy to serve its own customers is the controller of its customers' information, and a licensed partner that provides your account, card or care is also a controller of the records its licence requires it to keep.
Everyy's registered company details and the name of our data protection contact will be published here before the service goes live. Until then, write to us at [email protected].
2. What this policy covers
This policy covers the Everyy website, the waitlist, the Ambassadors programme, the Everyy service on WhatsApp, the Everyy web portal, and any other way we offer Everyy in future. It applies to visitors, people on the waitlist, ambassador applicants, Everyy users, personal and business, and people who are not Everyy users but whose details reach us through someone who is.
Everyy is not live yet. The parts about the website, the waitlist and ambassador applications describe what happens today. The rest describes how the service handles information once it is live in your country. We are still building the service, so some features described here will arrive after others. We will keep this page current and change the date at the top when it changes.
3. Information we collect
On this website, today
- Waitlist. Your name; whether you want Everyy for yourself, your business or both; your country; your WhatsApp number; your consent to be messaged and the wording you agreed to; the page you signed up from; the browser you used; and the date and time.
- Ambassador applications. Your name, country, WhatsApp number and email; whether you apply as a creator or a campus rep; your platforms, handles, audience and what you post about; your campus if relevant; what you tell us about yourself; your consent to be contacted; and the decision we make.
- Technical records. Our hosting provider records each request to the site, including IP address, date and time, page and browser. We hold your IP address briefly in memory to limit repeated form submissions. We do not store it with your sign-up.
- Cookie choice and analytics, only if we switch analytics on, as described under Cookies and analytics on this website.
When you use Everyy on WhatsApp
What we collect depends on what you use. The categories are:
- Identity and contact details. Your name, phone number, email address, date of birth, gender and address, and the identity numbers and documents our licensed partners require in your country, such as a BVN or NIN in Nigeria, a national ID, a passport or a driving licence. Where a partner requires it, a photo or short video of your face to confirm the document is yours. We also receive the results of these checks, including screening against sanctions and politically exposed persons lists.
- Messages and content. What you send to Everyy and what Everyy replies: text, voice notes and their transcripts, photos, screenshots, documents and videos, and the choices you make on the screens Everyy shows you.
- Money records. Accounts, balances, transfers, bills, airtime, currency conversions, card payments and any other transaction; the names and account details of the people and businesses you pay or are paid by; requests, invoices and receipts.
- Cards. A reference to each card, its last digits, limits and charges. Full card numbers and security codes stay with the card issuer.
- Accounts you link from other banks, if you choose to connect one: the bank, the account holder's name, part of the account number, the account type and currency, and, with your permission, that account's balance and transactions so that you can ask about them or pay from it.
- Business information, if you use Everyy Business: your business's name, sector, contact details, registration and owners; catalogue, prices and stock; orders, bookings, invoices and books; your customers' names, numbers and delivery addresses; your staff's names, accounts and pay; the social media accounts you connect and the posts and statistics that come with them; and, if you connect your WhatsApp Business number, the messages customers send to it, your contacts, and past chats if you choose to share them.
- Health information, if you use Everyy Health: what you tell us about how you feel, consultation notes, prescriptions, test results and reminders, for you or for a family member you book for.
- Travel, deliveries and purchases. Passenger names, dates of birth, passport details and travel dates for bookings; pickup and drop-off addresses, what is being sent and the receiver's name and number for deliveries; eSIM orders; gift cards and who they were sent to; appointment requests.
- Support requests. Your name, what the request is about, what you tell us, and contact details you give.
- Groups. When Everyy is in a WhatsApp group it receives the messages posted there, acts only on messages addressed to it, and keeps only what a request in progress needs.
- Security and usage. Your WhatsApp profile name and account identifiers, language, the times you use the service, security events such as PIN attempts and identity re-checks, the browser and IP address used for the web portal, and technical logs of how the service handled your requests.
From others
Licensed partners send us the results of identity checks, payments that arrive for you, and card activity. Other Everyy users may name you in a request, a payment, a booking or a group. A business that uses Everyy may hold you as a customer or contact. Platforms you connect send us the statistics you asked for.
Some of this is treated by law as sensitive, such as health information, identity numbers and a face check. We handle it only with your explicit consent or where the law requires it, and with extra care.
4. How we use it, and our legal grounds
Tell you when Everyy is live in your country, or reply to an ambassador application
- Legal ground
- Your consent
Keep the website and its forms secure and working
- Legal ground
- Our legitimate interest in preventing abuse
Understand how the website is used, through analytics
- Legal ground
- Your consent
Open your accounts and do what you ask: send, pay, convert, issue a card, link a bank account, post, take orders, book, buy
- Legal ground
- Performing our agreement with you
Verify who you are, screen against sanctions lists, prevent fraud and money laundering, keep the records the law requires
- Legal ground
- Legal obligations on us and our licensed partners
Protect your account and other people's, through risk checks, PIN and identity re-checks and lost-phone recovery
- Legal ground
- Our legitimate interest in keeping accounts safe, and legal obligations
Arrange the health care you ask for
- Legal ground
- Your explicit consent, given separately
Show you where your money goes and keep your business's books
- Legal ground
- Performing our agreement with you
Answer a business's customers on its behalf
- Legal ground
- That business's instructions
Send you service messages, receipts, reminders and security notices, by WhatsApp or email
- Legal ground
- Performing our agreement with you
Send you offers, tips and news
- Legal ground
- Your separate, optional consent
Support you and handle complaints and disputes
- Legal ground
- Our agreement with you, legal obligations and legitimate interests
Measure, test and improve the service, using records with identifiers removed where possible
- Legal ground
- Our legitimate interest in running a reliable service
Comply with the law and defend legal claims
- Legal ground
- Legal obligations and legitimate interests
Where we rely on a legitimate interest, we weigh it against your interests and rights, and you can object. Where we rely on consent, you can withdraw it at any time; that does not undo what was done before.
We do not use your messages, voice notes, images or documents to train AI models, and we choose providers and settings intended to prevent them from doing so.
5. Automated processing
Everyy uses software, including language models and speech recognition, to understand what you ask and to prepare the action. Before anything moves money or changes a record, Everyy shows you what will happen and asks you to confirm with your PIN.
Automated checks also run for security and compliance, such as limits, unusual activity and sanctions screening. A check may hold a request or ask you to confirm your identity again. Decisions with a serious effect on you, such as refusing or closing an account, involve a person, and you can ask for a person at any time in the chat.
Everyy does not diagnose and does not suggest treatment. Health questions are a fixed set reviewed by clinicians, and care comes from the licensed professionals you choose.
7. If you are not an Everyy user
People who use Everyy sometimes give us details about people who do not: someone they are paying, a relative they are booking care for, members of a group, or customers of their business. We use those details only for the task they were given for. If Everyy messages you because of someone else's request, the message says who asked and why, links to this policy, and you can reply STOP. You receive nothing else from us, and you have the same rights as a user.
8. Businesses and their customers
When a business uses Everyy to answer its customers, take orders or bookings, send invoices or connect its WhatsApp Business number, the business decides what happens with its customers' information and Everyy acts on its instructions. Everyy answers customers only from that business's catalogue and policies. Contacts and chats a business shares with us are used only to serve that business's customers, never for Everyy's marketing or to train models, and are deleted after the connection ends, apart from order and payment records the law requires us to keep. A customer of such a business can use their rights through the business or through us.
9. Health information
Health information is collected only with your explicit consent, kept apart from your money and business information with tighter access, shared only with the professionals you choose and only for your care, never used for marketing or shared with financial partners, and stored in your country where the law requires it. If you book care for someone else, they are asked to agree before the consultation. Records the law requires a provider to keep stay with that provider.
10. Groups
You can add Everyy to a WhatsApp group or ask Everyy to start one. Everyy receives the messages posted in a group it is in, acts only on messages addressed to it, keeps the messages a request in progress needs and deletes other group messages within a short period, keeps as little as possible about members who are not Everyy users, and never contacts them privately unless they tap a link to reach Everyy themselves. Money never moves in a group: a payment happens in the payer's own chat with Everyy, with their PIN, and Everyy never tells one member another member's balance, history or contact details.
11. Messages from us, and your choices
- Service messages: confirmations, receipts, security notices, reminders you set, and messages about something you started and did not finish. These are part of the service. Security and legal notices cannot be switched off.
- The waitlist message: one message when Everyy is live in your country.
- Offers, tips and news: only with your separate consent, which you can give or withdraw at any time.
- Reply STOP to any non-essential message and it stops. You can also set which notifications you receive, in the chat or in the web portal.
13. Where your information is kept
Everyy runs on cloud services. Your information may be stored and processed in the United States and in other countries where we, our partners and our technology providers operate, which may be outside the country you live in. Where the law of your country requires particular records to be kept there, we keep them there.
When information leaves your country we rely on the safeguards your law provides, such as a finding that the destination protects information adequately, a contract binding the recipient to equivalent protection, or your consent. You can ask us which safeguard applies to your information.
14. How long we keep it
We keep information for as long as needed to provide the service you use, to meet legal and regulatory duties, and to handle disputes, then delete it or make it anonymous. In outline:
Waitlist and ambassador details
- How long
- Until we have contacted you and for up to 12 months after, or sooner if you ask us to remove you
Website records, analytics and technical logs
- How long
- Up to 14 months; most are kept for days or weeks
Transactions, receipts, account and consent records, identity documents and verification results
- How long
- While your account is open and for up to 7 years after, or longer where your country's law requires
Messages with Everyy, including voice notes, images and documents
- How long
- Up to 24 months; media is removed soon after it is processed unless it is a record you asked us to keep; message content in technical logs is kept for a short period
Group messages
- How long
- Days, unless part of an open request
Linked bank account details, and contacts and chats a business shares
- How long
- While connected, then deleted soon after disconnection
Support requests
- How long
- Up to 24 months after they are closed
Health records
- How long
- As your country's health law requires
Security and staff-access records
- How long
- Up to 7 years
A legal hold, such as an open dispute or investigation, can extend these periods. If you ask us to delete your account, we remove what we are free to remove and tell you what we must keep and why.
15. How we protect it
We use technical and organisational measures appropriate to the sensitivity of the information: encryption in transit and at rest, access to customer information limited to staff and systems that need it for their role, logging of access and changes, separation of health information, testing of our security, and contracts that bind partners and providers to protect what we share. Your PIN is used only to confirm actions, is never shown to staff, and is never requested in an ordinary message, by phone or by email. Full card numbers and security codes stay with the card issuer.
No system is perfectly secure. If a breach puts your information at risk, we will tell you and the regulator without undue delay and within any time the law sets, and say what happened and what to do. You can help by never sharing your PIN, turning on two-step verification and chat lock in WhatsApp, and contacting us from any device if your phone is lost so that we can pause your account.
16. Your rights
Wherever you live, you can ask us to tell you whether we hold information about you and give you a copy; correct it; delete it or close your account, subject to what the law requires us to keep; restrict or stop a use you object to; move it to another provider where that is possible; withdraw consent; have a person review a decision made by automated means; and you can complain to us and to your data protection regulator.
How to ask. Before launch, email [email protected] from the address or number you signed up with, or reply STOP to our WhatsApp message. Once Everyy is live, ask in the chat, use the privacy page of the web portal, or email us. We may need to confirm it is you. We reply within 30 days, or sooner where your country's law sets a shorter time, without charge unless a request is clearly excessive or repeated.
17. Country notes
Your rights come from the law of the country you live in. For the places Everyy expects to serve first:
Nigeria
- Law
- Nigeria Data Protection Act 2023
- Regulator
- Nigeria Data Protection Commission
Ghana
- Law
- Data Protection Act, 2012 (Act 843)
- Regulator
- Data Protection Commission
Kenya
- Law
- Data Protection Act, 2019
- Regulator
- Office of the Data Protection Commissioner
Uganda
- Law
- Data Protection and Privacy Act, 2019
- Regulator
- Personal Data Protection Office
South Africa
- Law
- Protection of Personal Information Act, 2013
- Regulator
- Information Regulator
United Kingdom
- Law
- UK GDPR and the Data Protection Act 2018
- Regulator
- Information Commissioner's Office
European Economic Area
- Law
- General Data Protection Regulation
- Regulator
- Your national data protection authority
United States
- Law
- The privacy law of your state, where one applies
- Regulator
- Your state's attorney general or privacy agency
Other countries Everyy serves
- Law
- Your national data protection law
- Regulator
- Your national data protection authority
If the law requires us to appoint a representative in the United Kingdom or the European Economic Area, their details will be listed here before we serve users there. For United States residents: we do not sell personal information or share it for cross-context behavioural advertising, and we will not treat you differently for using your privacy rights.
18. Children
Everyy is for people aged 18 and over. We do not knowingly collect information from anyone younger; tell us if you believe a child has given us information and we will delete it. A parent or guardian can book health care for a child through their own account, and the child's records are kept as health information under that account.
19. Changes to this policy
We will update this page as the service develops and change the date at the top. If a change affects how we use information you have already given us, we will tell you beforehand, by WhatsApp if you are a user or on the waitlist, and on this page. Earlier versions are available on request.
20. Contact and complaints
Send questions, requests and complaints about privacy to [email protected]. We acknowledge complaints promptly and aim to resolve them within 30 days. You can also complain to the regulator for your country at any time, without contacting us first.
