Your trust is everything to us
Privacy Policy
At Everheart, we believe your memories and personal data belong to you, and only you. This policy explains clearly what we collect, how we use it, and how we protect it.
Last updated
June 1, 2026
We built Everheart to preserve what matters most
Your voice recordings, video messages, and personal memories are among the most intimate things you will ever share. We take that responsibility seriously, and we have designed every aspect of Everheart with your privacy as the foundation.
This Privacy Policy applies to all Everheart services, including our website, mobile applications, and any related services. By using Everheart, you agree to the practices described in this document.
Information we collect, and why
Category 1: Information you provide directly
Information you provide directly
When you create an account, record messages, or use Everheart features, you may provide: your name and email address; voice and video recordings; written notes and messages; delivery instructions and recipient information; payment details (processed securely by our payment provider).
Category 2: Information collected automatically
Information collected automatically
When you use Everheart, we automatically collect: device type and operating system; browser type and version; IP address and approximate location; pages visited and features used; session duration and interaction data.
Note: We collect only what we need to operate and improve the platform. We do not sell this data.
Category 3: Information from third parties
Information from third parties
If you choose to sign in using a third-party service (such as Google or Apple), we receive basic profile information, typically your name and email address, as permitted by that service.
We use your information to serve you, nothing more
Use cases
• To operate and deliver the Everheart service, including storing and delivering your messages.
• To personalize your experience and provide milestone prompts and suggestions.
• To communicate with you about your account, updates, and support requests.
• To improve the platform through anonymized usage analysis.
• To comply with legal obligations and protect the security of the platform.
• To send you service-related notifications (you can manage these in settings).
What we do NOT do
• We do not sell your personal data to third parties.
• We do not use your recordings or messages for advertising.
• We do not train AI models on the content of your private messages.
• We do not share your data with advertisers.
Your memories are protected at every step
Security point 1: Encryption
Encrypted in transit and at rest
All recordings are encrypted in transit and stored encrypted on AWS infrastructure. Your messages are accessible only to you, your designated recipients, and the transcription processing required to operate the service.
Security point 2: Storage
Secure, long-term storage
Your data is stored on infrastructure with institutional-grade reliability and redundancy. We are built to preserve your legacy for decades, not just years.
Security point 3: Access controls
Strict internal access controls
Access to user data by Everheart staff is strictly limited, logged, and governed by internal access-control policies.
Security point 4: Compliance
GDPR & international privacy standards
We comply with the General Data Protection Regulation (GDPR) and applicable international privacy laws. Users in the EU, UK, and other regions have specific rights described below.
We share only what is necessary, and always on your terms
We may share your information with trusted service providers who help us operate the platform (such as cloud storage, privacy management platform and payment processors). These providers are contractually required to protect your data and may not use it for their own purposes. We may also disclose information if required by law, court order, or to protect the safety and rights of our users.
We will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
You are in control. Always
Rights list
• Access: You can request a copy of all personal data we hold about you.
• Correction: You can update or correct your information at any time in your account settings.
• Deletion: You can request deletion of your account and all associated data. We will process this within 30 business days.
• Portability: You can request an export of your data in a standard format.
• Restriction: You can ask us to limit how we use your data in certain circumstances.
• Objection: You can object to certain types of data processing, including direct marketing.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, contact us at: privacy@everheart.com
Everheart is designed for adults
Our platform is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at privacy@everheart.com and we will take immediate action to remove it.
We will always let you know when things change
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a notice on the platform. The date of the most recent update is always shown at the top of this page.
Questions? We are here for you
If you have any questions about this Privacy Policy or how we handle your data, please reach out to our privacy team. We are committed to responding within 5 business days.
Contact details
Email: privacy@myeverheart.com
Support: support@myeverheart.com
Hours: Monday – Friday, 9am – 5pm (EST)
Retention
Except as otherwise permitted or required by applicable law or regulation, we will keep your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or for purposes that are compatible with the purposes that we have previously disclosed.
Verifying your request
Before fulfilling your request, we take steps to verify you are who you say you are or that you have authority to act upon someone else's behalf. One way we verify you is through your account. If you do not provide your account number, we may request additional information that we need to verify you and, if you are submitting a request on behalf of someone else, to verify that you are permitted to act on that person's behalf. When we contact you to request verification information, please respond and provide the information that we have requested. Depending on the nature of the request you make, we may require you to verify your identity to either a "reasonable degree of certainty" or "high degree of certainty". This means that we need to match two or three pieces of information that we hold about you with information that you provide to us. In addition, we may ask for knowledge-based qualifiers during the verification process. This data we need to match or ask for you to provide could include, but is not limited to, email address, mailing address, phone number, date of last billing and the amount.
In some cases, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request or that you are authorized to make the request on behalf of someone else.
In addition to providing the information we need to verify you or your authority, you must provide us with enough information so that we can understand, evaluate, and respond to your request. We cannot respond to your request or provide you with personal information if we cannot confirm the personal information relates to you.
We will only use personal information provided in the request to verify your identity or authority to make a request on behalf of someone else.
Notice to our international users
Everheart is based in the United States. If you are using our website or app outside the United States, please be aware that the personal information we collect about you is being processed in the United States or other jurisdictions outside your own. By continuing to use our website and mobile application and providing your personal information, you acknowledge that your personal information may be processed in and further transferred to jurisdictions other than your own. The data protection laws and regulations that may apply to your personal information processed in United States or other countries are likely different from the laws in your home country.