Legal

Our privacy promise

What we collect, how we protect it, and what we never do.

What we collect. An email address, a password (stored as an irreversible argon2 hash), the words you write in your diary, your answers to questions, your personality profile, and any uploads you choose to add. We do not collect contact lists, location, device fingerprints, or any advertising identifiers.

Encryption architecture. Content is encrypted at rest using a layered scheme. A per-account key, derived from your password, protects the bulk of your content. Your most private items are additionally encrypted with a family passphrase that you hold separately — Evermore's own infrastructure cannot decrypt those items without it. Even if our database is stolen, the most sensitive content remains unreadable without the passphrase.

Data retention. Account data is kept while your account is active. Memorials remain live after death verification unless removed. You can request full deletion at any time — including encrypted content, account credentials, and AI persona state — and we complete it within 30 days.

Your rights. If you are in the EU/UK you have the right of access, correction, deletion, portability, and to object to processing. If you are in California you have rights under the CCPA, including the right to know what we collect and to opt out of “sale” — we do not sell your data, full stop. To exercise either, email [email protected].

AI training. Your diary and answers are used only to train your own persona. They are never used to train any other person's AI, never shared with third-party model providers, and never sold.