Storage & Access Technologies Notice

1. Cookies and Similar Technologies

EverRhythm may use cookies and other technologies that store information on, or access information from, a browser or device. Depending on the implementation, this can include cookies, local or session storage, SDKs, scripts, tags and comparable app or device technologies. This notice uses "storage and access technologies" as the wider term.

2. How We Use These Technologies

Technologies used by the deployed service can support purposes including:

• Strictly necessary operation: Security, authentication, session management and other functions necessary to provide a service you request. An exemption from consent is assessed against the actual technology and purpose; the label alone does not create an exemption.
• Preferences and functionality: Remembering choices or settings where the relevant legal requirements are satisfied.
• Product analytics: Optional measurement used to understand product use and improve the service. EverRhythm's current analytics control is default-denied and can be changed in Privacy & Data settings.
• Marketing measurement: A separate optional preference. It is not inferred from product-analytics consent and is default-denied.

3. Third-Party Technologies

EverRhythm uses external technical services, and some deployed integrations may involve storage or access technologies. A provider's presence in our technical estate does not by itself prove that it stores or accesses information on your device. We reconcile the actual deployed technology, purpose, provider and consent/exemption position before representing it as current in this notice.

4. Your Choices and Consent

Where consent is required for a storage or access technology, it must be obtained before that technology is used for the relevant purpose. Refusing optional analytics or marketing measurement does not prevent use of the core EverRhythm service.

You can manage EverRhythm's current optional product-analytics and marketing-measurement preferences in Settings → Privacy & Data. You can change or withdraw those choices later. Browser or device controls may provide additional controls, but they are not a substitute for EverRhythm obtaining consent where EverRhythm is required to do so.

As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

5. Duration

Storage duration depends on the specific technology and purpose. Session technologies may expire when a session ends; persistent technologies may remain until their configured expiry, withdrawal, replacement or deletion. Approved publication metadata should identify material technologies and durations where required rather than implying one universal period.

6. Policy Management and Updates

EverRhythm is reconciling this notice against deployed technology and its evidence register. A policy statement is not treated as proof that an exemption, consent mechanism or provider configuration is legally sufficient.

Our governance approach includes:

• Inventory: Reconcile deployed storage/access technologies against their purpose and provider.
• Legal classification: Record whether consent is required or a specific exemption is relied upon.
• Consent evidence: Keep optional analytics and marketing choices independently controllable and default-denied where required.
• Change control: Reassess disclosure and consent requirements when technologies or purposes materially change.

7. Contact Us

If you have any questions about our use of storage and access technologies, please contact us at privacy@everrhythm.health. For more details on our data practices, please see our Privacy Notice.