you can declare them outside app directory. But to use env variables, if its not a public env key, you cant/shouldnt use it outside app directory (better to use it on API routes, server actions).