Privacy Policy

What we collect

We collect the following categories of information:

• Account information: name, email address, phone number (optional), date of birth (optional), country/locale, timezone, and a short bio, if you choose to add one.
• Authentication data: your login credentials are managed by Amazon Cognito, our identity provider — we never see or store your password ourselves. If you choose to sign in with Google, Apple, or Microsoft, we receive the basic profile information (name, email) those providers share as part of that sign-in. We also keep a record of sign-in sessions for your own account security (e.g. to support "sign out everywhere").
• Family relationships and invitations: who you've invited to your Family Circle or Guest Memory Collections, who has invited you, and the relationship labels you set between family members (e.g. parent, sibling).
• Memory content: the photos, videos, audio recordings, documents, and text you create or upload, including captions, album groupings, and AI-assisted edits you request (such as photo enhancement or caption suggestions).
• Echo content: time-locked messages you create to be delivered to a chosen family member at a future date or milestone, including their content and delivery/scheduling status.
• Device and push-notification information: if you enable push notifications, we store a device push token (issued by Apple or Google via the Expo push service) and basic platform information (iOS/Android) so we can deliver notifications to the right device. We do not collect precise device location, advertising identifiers, or contacts.
• Usage and security logs: operational information needed to run and secure the service — your storage usage, notification and app preferences, and records of account-affecting actions (such as guest-collection or Echo activity, and administrative actions on your account). Infrastructure-level request logs are kept only briefly for security and troubleshooting (see our Data Retention Policy).
• Billing information: which plan you're on, its status, and purchase history. Actual payment details (card numbers, etc.) are handled entirely by Stripe or the App Store/Play Store and never touch Evernest's own servers.

How we use it

Solely to provide the Evernest service: storing and displaying your memories, sharing them with the family members you choose, delivering Echoes you schedule, running your account and subscription, securing your account, and sending you service-related notifications. We don't sell your data. Optional AI features (such as AI search over your own memories, photo enhancement, or caption suggestions) process your content to serve your own request — not to train a shared or third-party model.

Who we share it with

Evernest uses a small number of service providers to operate the app — each only receives the data it needs to do its specific job:

• Amazon Web Services (AWS) — hosting, database, file storage, and the AI processing (Amazon Bedrock) behind optional AI features. All run under our AWS account; AWS does not use your data for its own purposes.
• Expo — relays push notifications to Apple and Google on our behalf.
• Stripe — payment processing for web subscriptions.
• RevenueCat, and the Apple App Store / Google Play Store — payment processing for mobile subscriptions.
• Zoho — sending transactional email (family invitations, support replies).
• Google, Apple, or Microsoft — only if you choose to sign in using one of them.

The family members you explicitly share a memory or Echo with see that content, exactly as you configured its visibility — that's the core feature of Evernest, not a third-party disclosure. We do not sell or rent your personal information to anyone, and we do not share it with advertisers.

Data retention and deletion

You can review and edit most of what we hold about you directly in the app, under Settings → Privacy & Account Control. From that same screen you can download a copy of your data, and delete your account yourself — we show you exactly what happens to your family, subscription, and memories before you confirm, since deleting an account can affect memories shared with family members. The full, itemized schedule for how long each kind of data is kept after deletion is in our Data Retention Policy.

Security

Your data is encrypted at rest in our database and file storage. We restrict internal access to production data to what's needed to operate the service, and administrative actions on an account are logged. No system is perfectly secure, and we can't guarantee absolute security — if you believe your account has been compromised, contact us immediately at support@evernestmemories.com.

Children's privacy

Evernest is not directed to, and is not intended for use by, children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at support@evernestmemories.com and we will take appropriate action.

International users

Evernest's infrastructure is currently hosted in a single AWS region in the United States. If you use Evernest from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home country.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by email before the change takes effect.

Contact us

Questions about this policy or your data can be sent to support@evernestmemories.com.