EvalyMe ("we", "us", "our") helps founders evaluate the market value of their micro-SaaS, indie, or scaling businesses. We believe in radical data minimalism: we only collect what we genuinely need to run the product, and we never sell or rent your data to anyone.
What we collect
Account data
When you sign in with Apple or Google, we receive a stable user identifier, your name (only the first time, if you choose to share it), and your email address. We use this to identify your account, sync your portfolio across devices, and send transactional notifications (e.g. account deletion confirmation). We never email you marketing without explicit opt-in.
Business metrics you enter
Metrics entered in the public web calculator are processed in your browser and are not submitted to EvalyMe. We record only that a calculation completed and a broad MRR band, never the raw calculator inputs. In the signed-in apps, the metrics you submit during a valuation — MRR, churn, CAC, LTV, growth rate, niche, monetization model, etc. — are stored locally on your device. If you are signed in, an encrypted copy is also synced to our backend so you can access it from another device. You can delete any valuation (or your entire account) at any time.
Launch notifications
If you explicitly opt in on our public website, we store the email address you provide so we can tell you when EvalyMe is available on Android. We use it only for launch and closely related product-availability messages. You can ask us to remove it at any time by emailing [email protected].
Diagnostics
We collect minimal, aggregated crash reports and performance traces via Apple's built-in diagnostics. This data is not linked to your identity and you can disable it any time in iOS Settings → Privacy → Analytics.
Public landing analytics
The public website uses privacy-friendly Swetrix analytics to understand public page views, broad acquisition channels, and basic browser/device information. Anonymous events on the public site and authenticated web app measure assessment, saving, checkout and verified access steps. We send only fixed campaign codes, broad revenue bands, rounded completion time and account-entry categories — never raw financial inputs, account or report identifiers, full URLs or provider errors. First-touch campaign codes stay in this browser tab for up to 24 hours and travel with the calculator handoff to the web app. They are removed from the address before identity, billing or analytics code loads. Swetrix does not use advertising cookies; Do Not Track and Global Privacy Control suppress analytics and campaign storage.
What we do NOT collect
- No advertising identifiers (IDFA). We do not track you across apps or websites.
- No location data.
- No contacts, photos, microphone, or camera access.
- No Google Analytics, Mixpanel, Amplitude, advertising pixels, or cross-site tracking.
How we use your data
- Run the product — compute valuations, scores, archetypes, and AI Advisor responses.
- Sync — keep your portfolio consistent across your devices.
- Notify opted-in founders — send launch and product-availability messages.
- Improve the product — anonymous crash reports and aggregated public website analytics.
AI Advisor
When you ask the AI Advisor for guidance, the metrics from the selected valuation are sent to our backend AI provider proxy. We do not log the contents of these requests or responses. Anthropic processes the request ephemerally per their privacy policy and does not use it to train their models.
Where data is stored
Account, launch-signup, sync, and AI usage data is stored in the EvalyMe PostgreSQL database. Sign-in is handled by Clerk and Apple Sign-In. All transit is encrypted with TLS.
Email notifications
Clerk delivers sign-in and verification emails. EvalyMe uses Resend for account confirmations, service notices, and assessment or playbook reminders you request. Resend receives the destination address and email contents. We do not include raw financial inputs or valuation results in these emails; a saved-action confirmation and its calendar attachment can include the action you chose. Report links require you to sign in.
You can turn off requested reminders through the link in a reminder email or your account settings. Account confirmations and necessary service notices continue. We keep minimal event identifiers and suppression records to prevent duplicate or unwanted email. Queued email contents are removed after sending or within 30 days; the address retained for a final account-deletion confirmation is removed after sending or within seven days of the request. Provider delivery events are retained for up to 30 days.
Data retention & deletion
You can delete an individual valuation at any time from the dashboard. You can delete your entire account — including every valuation, share link, and usage record — from Account → Delete Account. Deletion is immediate and irreversible. We do not keep backups longer than 30 days.
Children
EvalyMe is not directed to children under 13 and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us personal data, please contact us and we will delete it.
Your rights
Depending on where you live (GDPR, CCPA, etc.) you may have the right to access, correct, port, or delete your personal data. The in-app account deletion satisfies all three. For anything else email [email protected] and we will respond within 30 days.
Changes
If we change this policy materially we will notify signed-in users via email and bump the "Last updated" date above. The current version is always available at this URL.
Contact
Questions? [email protected]