Google sign-in and beta access
Everward uses Google sign-in through Supabase. The requested permissions are identity, email and basic profile: openid, email and profile. Google may provide your account identifier, email address, name and profile picture to Supabase. Everward checks your verified email and account identifier to identify your account and confirm beta access. Your Life Plan profile name is the name you enter in Everward.
This sign-in does not request access to your Gmail messages, Google Drive files, contacts or calendar. Google account data is used for sign-in, identity verification and beta access, not for sale, advertising or AI model training.
A read-only invitation check sends your verified email to the Lightward family access directory. Everward keeps a hashed-email and account-identity record to prevent account reassignment. This does not give Everward access to a Lightward study library or combine the apps’ private content.
Your encrypted Life Plan
Your purpose, goals, tasks, To-dos, notes, Journal and other Life Plan writing are encrypted on your device before they are saved to the browser’s encrypted storage or sent to Everward’s cloud storage. A separate Life Plan passphrase unlocks the content on your device. The app does not send that passphrase to the server or save it in the browser.
Cloud storage holds encrypted records and a protected encryption-key envelope. The service also processes account, device and record identifiers, revision history, timestamps, request sizes and access information. Those operational details are not all end-to-end encrypted. Appearance and disclosure preferences use ordinary browser storage.
Content is readable in an unlocked tab. Someone with access to that tab or a compromised device may be able to read it. Lock Everward or sign out when you finish on a shared device.
The browser Life Plan is separate from Windows desktop profiles. Signing in does not automatically upload, replace or synchronize a desktop profile. Everward syncs when you unlock, after saved changes and periodically while the connected app is open. Reconnecting or returning to the app resumes sync. Incoming changes wait while an editor or unresolved Journal draft is open. Sync now remains available; automatic sync is not a guarantee of background operation when a phone or browser suspends the app.
Cookies and browser storage
Everward uses necessary, opaque sign-in and one-time sign-in-attempt cookies. They are sent over HTTPS and marked HttpOnly, so application JavaScript cannot read them. Provider session tokens are encrypted in server storage; they are not included in Life Plan records or exposed to browser JavaScript.
If you choose Remember this device, Everward saves an encrypted unlock capability and a nonextractable browser key in IndexedDB. It does not save your passphrase. Reopening requires an online check of the same account, Life Plan and existing device before using that capability. Each browser or installed web app may have separate storage and need its own setup. Sign-in sessions still expire and access can be revoked.
This protection belongs to the browser profile, not an operating-system or hardware keychain. Same-origin app code, someone controlling the unlocked browser, or a compromised device may use it. Only remember a browser you control. Lock, Sign out and Forget this device disable remembered access without deleting the encrypted Life Plan. Ordinary sign-in expiry stops access; after verified sign-in with the same account, a still-valid remembered capability can be used again.
The encrypted browser copy can remain after locking or signing out. Clearing browser site data can remove that copy and lose changes that have not synced. The current app does not add advertising cookies or third-party analytics scripts.
Services that process information
Google provides account sign-in. Supabase processes authentication and account information. Cloudflare serves the website, handles network and security requests and stores Everward’s encrypted cloud records and session information. These services process network information such as IP addresses and request details as part of operating their services. A support message you choose to send is handled through Gmail and is outside Life Plan encryption.
Their own processing is described in the Google Privacy Policy, Supabase Privacy Policy and Cloudflare Privacy Policy.
Retention and removal requests
This beta does not provide automatic account deletion or a fixed deletion deadline. Encrypted cloud records and history are retained by the service; deleting an item in the app does not necessarily erase earlier encrypted versions. Access-approval and identity records may remain after beta access is removed. Session information is subject to session-expiry and cleanup rules; that cleanup is not Life Plan deletion.
To request removal of your browser account or cloud data, email lightwardlibrary.support@gmail.com. Requests are reviewed manually and may require verification of account ownership. This page does not promise an automatic purge or a specific erasure schedule, including for service-provider logs and backups.
Signing out, removing beta access or revoking Google access does not itself erase your Life Plan, local copies or exported files. Use Everward’s lock and sign-out controls to end use of the current browser session; revoking Google access is not a substitute for those controls.
Exports, backups and recovery
Files you export or download are under your control. Readable reports may contain unencrypted private writing; protect them and any copies you share. An encrypted backup remains a file you must store securely and delete yourself when appropriate.
Google sign-in and support cannot recover a forgotten Life Plan passphrase. The browser can show a recovery code and download an encrypted backup, but recovery-code unlock and backup restore screens are not yet available. Keep your passphrase and recovery code privately; use test writing until these workflows are complete.
Questions and contact
This notice covers the Everward browser beta provided through Lightward Library. For privacy questions or removal requests, contact lightwardlibrary.support@gmail.com. Do not email your passphrase, recovery code or private Life Plan content.
As the beta changes, this page may be updated. The date above identifies this version.