Privacy Policy

We respect your privacy and we keep this policy short and plain. If anything below is unclear, write to us — the address is at the bottom of the page.

1. Who is the data controller

The controller of your personal data is:

Valmart di Romanciuc Larisa Via Venezia 59/9, 35131 Padova, Italy Partita IVA: {IT_VAT_NUMBER} Email: privacy@neoevo.app

Valmart is the legal entity behind the NeoEvo product family.

2. What data we collect

We collect only what we need to run the service.

Email address. When you create an account or subscribe to the newsletter.
In-app data. The projects, goals, photos and notes you create inside the NeoEvo app. This data is stored locally on your device first. If you enable sync, an encrypted copy is held on our private VPS in the EU.
Payment data. Card payments are processed by Stripe. We never see or store your card details. We only receive a confirmation that the payment succeeded, plus the amount and currency.
Basic usage data. We use Plausible Analytics, which does not set cookies and does not collect personal identifiers. We see aggregated counts of page visits and referrers.

We do not collect location, contacts, biometric data, or any data from third-party services without your explicit action.

3. Why we collect it

To deliver the service you signed up for (account, sync, paid features).
To communicate with you about your account, support questions, and major service changes.
To meet our legal obligations under Italian and EU law (invoicing, tax records).
With your consent, to send marketing emails — you can withdraw consent at any time.

4. Legal basis (GDPR Article 6)

Contract performance for delivering the service you bought or signed up for.
Legal obligation for invoicing and tax records.
Legitimate interest for security, fraud prevention, and basic anonymous analytics.
Consent for marketing emails and any optional data we collect (e.g. photos for goal tracking).

5. Who we share data with

We share data only with the processors needed to operate the service.

Stripe — payment processing.
Brevo — transactional and marketing email delivery.
Cloudflare — hosting, CDN, basic security.

We do not share your data with advertisers, data brokers, or social networks. We do not sell your data. Ever.

6. How long we keep it

Account data — for as long as your account is active, plus up to 2 years after deletion to comply with Italian tax and accounting law (Article 2220 of the Civil Code).
Marketing list — until you unsubscribe.
Invoices — 10 years, as required by Italian tax law.
In-app sync data — deleted within 30 days of account deletion.

7. Your rights under GDPR

You have the following rights, granted by the EU General Data Protection Regulation:

Access (Article 15) — ask for a copy of the data we hold about you.
Rectification (Article 16) — correct inaccurate data.
Erasure (Article 17) — request deletion, subject to our legal retention obligations.
Restriction (Article 18) — pause processing while a question is resolved.
Portability (Article 20) — receive your data in a structured, machine-readable format.
Objection (Article 21) — object to processing based on legitimate interest.
Withdraw consent at any time, with no effect on prior lawful processing.

To exercise any of these rights, write to privacy@neoevo.app. We respond within 30 days, usually within 5 working days. If you believe we have mishandled your data, you can file a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. International transfers

Your data is stored within the European Union. We do not transfer data outside the EU. If this changes in the future, we will update this policy and provide the safeguards required by GDPR Chapter V (Standard Contractual Clauses or an adequacy decision).

9. Cookies

NeoEvo uses cookies sparingly:

Plausible Analytics — no cookies. Anonymous, aggregated only.
Stripe — sets essential cookies during the checkout flow to prevent fraud and complete payments.
Authentication — a single session cookie when you log in, deleted when you log out.

We do not use advertising cookies, retargeting pixels, or any third-party tracker not listed above.

10. Children

NeoEvo is not directed at users under 16. We do not knowingly collect data from anyone under 16. If you are a parent and believe a child has registered, write to us and we will delete the account.

The NeoEvo Family mode (used by parents to manage household tasks with their children) is operated by the parent, who is the data controller for their family's internal data within the app.

11. Changes to this policy

If we change this policy materially, we notify you by email at least 30 days before the change takes effect. Minor clarifications are published here with an updated effective date.

12. Contact

For any privacy question, write to privacy@neoevo.app.

For postal mail: Valmart di Romanciuc Larisa, Via Venezia 59/9, 35131 Padova, Italy.

Effective date: 10 May 2026.