Privacy Policy

1.Introduction

Every Era Moments, LLC ("Every Era Moments," "Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you use our website, applications, services, and related offerings (collectively, the "Services").

This Privacy Policy forms part of, and should be read together with, our Terms of Service and Future Delivery & Data Retention Policy.

By using the Services, you acknowledge the practices described in this Privacy Policy.

2.Information We Collect

We may collect the following categories of information:

(a)Account Information

• Name

• Email address

• Subscription information

• Billing information

(b)Subscription and Purchase Identifiers

When you purchase or manage a subscription through Apple, Google, or another third-party application marketplace or payment provider, we may receive transaction, purchase, receipt, subscription, or account identifiers generated by that provider.

Depending on the provider, these identifiers may be pseudonymous or otherwise not directly associated with information that identifies you to Every Era Moments. We may use these identifiers to verify purchases, determine subscription status and entitlements, provide customer support, prevent fraud, and administer the Services.

We may not receive your complete payment information from third-party application marketplaces, and we do not control the information those providers independently collect or maintain.

(c)User Content

Users may create, upload, store, organize, schedule, or share content through the Services, including:

• Photographs

• Videos

• Voice recordings

• Stories

• Letters

• Journals

• Documents

• Family histories

• Biographical information

• Milestone memories

• Future-delivery content

• AI-assisted content and related materials

(d)Family, Relationship, and Shared Content

The Services enable users to create, upload, store, organize, schedule, generate, and share content relating to themselves and the people who matter most to them, including children, parents, spouses, partners, relatives, friends, mentors, loved ones, and, where applicable, individuals who have passed away.

Such content may include photographs, videos, voice recordings, stories, letters, journals, documents, biographies, family histories, milestone memories, future-delivery content, AI-assisted content, and other personal materials submitted by users.

Users are solely responsible for ensuring they have the legal right, authority, and any necessary permissions to upload, store, share, or schedule content relating to other individuals.

Users remain solely responsible for the accuracy, completeness, appropriateness, and legality of any content submitted through the Services.

Every Era Moments does not independently verify permissions, relationships, ownership rights, consent, familial relationships, historical accuracy, or other information relating to content submitted by users.

(e)Recipient Information

Users may provide information relating to intended recipients, including:

• Names

• Email addresses

• Relationships

• Delivery preferences

• Other information voluntarily provided by users

(f)Continuity Contact Information

Users may designate trusted contacts, beneficiaries, Continuity Contacts, or account representatives.

We may collect information relating to such individuals as provided by the user.

(g)Technical Information

We may automatically collect:

• Device information (including mobile device identifiers)

• Browser information

• IP address

• Operating system

• Mobile application version

• App permissions you grant (camera, microphone, photo library)

• Log data

• Usage information

• Diagnostic information

• Cookies and similar technologies

• Referral and marketing attribution information

3.How We Use Information

We use information to:

(a)provide the Services;

(b)create and manage accounts;

(c)process subscriptions and payments;

(d)store and maintain User Content;

(e)generate AI-assisted content and related materials;

(f)facilitate future-delivery services;

(g)communicate with users;

(h)verify account ownership and identity;

(i)maintain security and prevent fraud;

(j)comply with legal obligations; and

(k)improve, develop, analyze, and support the Services, including identifying aggregate trends and topics that may inform new prompts, features, and functionality.

4. Artificial Intelligence Processing

Optional AI Features

Generative AI-powered features are optional and turned off by default. User Content is processed by generative AI systems only when a user chooses to enable or use an AI-powered feature. Users may use the Services without enabling these optional AI features.

When enabled or requested by a user, Every Era Moments uses artificial intelligence and related technologies to assist users in creating stories, biographies, summaries, timelines, images, AI-assisted content, and other content.

User Content may be processed by artificial intelligence systems as necessary to provide the AI-powered functionality requested by the user and to maintain, secure, support, and operate that functionality.

Users retain ownership of their User Content and AI-assisted content created from their User Content.

Voice Transcription and AI Processing

Voice transcription is separate from the optional generative AI features described above. When a user records or uploads a voice recording, the audio is automatically and securely transmitted to a trusted third-party transcription provider for the sole purpose of converting the recording into text. The resulting transcript is returned to Every Era Moments so that users may view, edit, organize, or use the transcript within the Services. The original audio recording is preserved unless the user chooses to delete it.

When a user deletes a voice recording from the Services, Every Era Moments also communicates the deletion to its transcription provider in accordance with the provider's applicable deletion procedures.

Voice recordings and transcripts are processed solely to provide the functionality requested by the user. Every Era Moments does not use voice recordings or transcripts to train artificial intelligence or machine learning models, and we require our service providers to process such information only as necessary to provide the requested transcription services and in accordance with applicable law and our contractual obligations.

We have disabled model training on our account with our transcription provider, as permitted by their terms, and we re-verify that setting whenever our account, plan or credentials change.

AI Training and Model Development

Except as expressly authorized by the user, Every Era Moments does not use User Content—including photographs, videos, voice recordings, stories, letters, documents, future-delivery content, family content, or AI-assisted content—to train, fine-tune, or improve artificial intelligence or machine learning models, whether public, private, proprietary, or internal.

Every Era Moments does not sell, license, or provide User Content to third parties for the purpose of training or improving artificial intelligence or machine learning models.

Where AI-powered features are made available and a user chooses to enable or use them, User Content may be securely processed by trusted third-party artificial intelligence service providers solely for the purpose of providing the requested functionality, such as generating summaries, biographies, timelines, writing assistance, organization, or other AI-assisted content. These providers are contractually prohibited from using User Content to train their own artificial intelligence models except as expressly disclosed to and authorized by the user.

The Company may use anonymized, aggregated, and de-identified information that cannot reasonably be used to identify an individual or reconstruct User Content to improve the performance, reliability, security, analytics, functionality, and operation of the Services.

Every Era Moments does not use voice recordings, photographs, videos, or other biometric information for biometric identification, facial recognition, voice recognition, identity verification, profiling, or similar biometric processing purposes unless expressly disclosed to and authorized by the user.

Artificial intelligence systems may generate content that contains inaccuracies, omissions, interpretations, assumptions, or unintended results. Users are encouraged to review AI-assisted content before sharing, publishing, relying upon, or scheduling such content for future delivery.

5.Future Delivery Storage

Future-delivery content may be stored for extended periods of time in order to facilitate scheduled future deliveries.

The retention, storage, maintenance, preservation, verification, and delivery of such content are governed by the Company's Future Delivery & Data Retention Policy.

Users are responsible for maintaining accurate account and recipient information.

This Privacy Policy should be read together with the Future Delivery & Data Retention Policy.

6.Continuity Contact and Authorized Representatives

Users may designate a Continuity Contact to assist with certain account and future-delivery matters in the event of the user's death, incapacity, or other circumstances, as described in our Future Delivery & Data Retention Policy (available on request at hello@everyera.com).

We may collect and process information about a Continuity Contact that is provided by the user, including the contact's name, contact information, relationship to the user, and any permissions or instructions associated with the designation.

Designation as a Continuity Contact does not, by itself, make that person a legally authorized representative or authorize that person to exercise privacy rights on behalf of the user. We may require appropriate verification or legal documentation before allowing any person to exercise rights or take actions on behalf of another individual.

For additional information about the role, authority, and limitations of a Continuity Contact, please see our Future Delivery & Data Retention Policy (available on request at hello@everyera.com).

7. Sharing of Information

We may share personal information and User Content only as reasonably necessary to provide, operate, secure, maintain, improve, and support the Services.

We may share information with the following categories of third parties:

(a)cloud infrastructure and storage providers;

(b)payment processors and subscription management providers;

(c)email delivery and communications providers;

(d)artificial intelligence and machine learning service providers, where a user chooses to enable or use applicable AI-powered features;

(e)analytics and product improvement providers;

(f)security, fraud prevention, authentication, and identity verification providers;

(g)customer support and technical service providers;

(h)professional advisors, including legal, accounting, insurance, and consulting professionals;

(i)governmental authorities, regulators, law enforcement, or courts when required by applicable law or legal process; and

(j)successor entities in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction.

Service Providers and Subprocessors

Every Era Moments uses third-party service providers and subprocessors to help operate, maintain, secure, and improve the Services. A current list of the service providers and subprocessors that may process personal information or User Content on our behalf is available on our Subprocessors page.

Our service providers and subprocessors process information only as necessary to provide services on our behalf and in accordance with applicable law, our contractual obligations, and this Privacy Policy. We require them to implement appropriate administrative, technical, and organizational safeguards designed to protect personal information and User Content.

Our service providers and subprocessors are not authorized to sell User Content or use User Content to train artificial intelligence or machine learning models except as expressly disclosed in this Privacy Policy or expressly authorized by the user.

The service providers and subprocessors used by Every Era Moments may change from time to time as our Services evolve. We may add, replace, or discontinue providers and will maintain our Subprocessors page to reflect the providers currently used in connection with the Services.

We do not sell users' personal information.

We do not sell User Content, including photographs, videos, voice recordings, stories, letters, future-delivery content, family content, AI-assisted content, or other personal or family content submitted through the Services.

We do not share personal information for cross-context behavioral advertising.

Additional Privacy Rights

Depending on where you live, you may have additional rights regarding your personal information under applicable privacy laws, including the right to know what personal information we collect, request access to or correction of your information, request deletion of your information, obtain a copy of certain personal information, or appeal certain privacy decisions where applicable.

To exercise applicable privacy rights, please contact us at legal@everyera.com. We will respond in accordance with applicable law and may request additional information to verify your identity before processing your request.

Authorized agents may submit requests on behalf of users where permitted by applicable law, subject to verification of both the user's identity and the agent's authority.

8.Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, loss, or destruction. These safeguards include, where appropriate, encryption of data in transit using industry-standard transport security protocols (such as HTTPS/TLS), encryption of data at rest, access controls, authentication measures, and ongoing security monitoring designed to protect personal information and User Content.

No method of transmission, storage, or security system is completely secure, and we cannot guarantee absolute security.

In the event of a security incident involving personal information, the Company will provide notifications as required by applicable law.

9. Data Retention

We retain personal information and User Content for as long as reasonably necessary to provide the Services, fulfill future-delivery obligations, comply with applicable law, maintain security, prevent fraud, resolve disputes, enforce our agreements, and support legitimate business operations.

Retention periods may vary depending on the type of information, account activity, subscription status, future-delivery schedules, preservation services, legal requirements, and other operational needs.

Certain records may be retained after account deletion where reasonably necessary or required for legal compliance, security, fraud prevention, dispute resolution, enforcement of agreements, future-delivery administration, or other legitimate business purposes.

Specific retention periods and additional information regarding the retention, storage, preservation, deletion, and administration of User Content and future-delivery content are described in our Future Delivery & Data Retention Policy (available on request at hello@everyera.com).

10.User Rights and Choices

Subject to applicable law, users may have the right to:

(a)access personal information;

(b)correct inaccurate information;

(c)update account information;

(d)delete certain information;

(e)export certain information;

(f)object to certain processing activities; and

(g)withdraw consent where applicable.

To exercise your privacy rights, users may contact Every Era Moments at legal@everyera.com. To protect the privacy and security of our users, we may request additional information necessary to verify the identity of the requester before processing or fulfilling a request. We will respond to verified requests in accordance with applicable law.

The exercise of certain rights may be limited where retention of information is necessary to comply with applicable law, maintain security, prevent fraud, fulfill future-delivery obligations, enforce agreements, or protect the rights of the Company, users, recipients, or third parties.

(h) Account Deletion and Future Delivery Content

Users may request deletion of their accounts and associated content, subject to applicable law and the terms of our Future Delivery & Data Retention Policy.

If an account contains content scheduled for future delivery, the user will be asked to choose whether to preserve the scheduled content for future delivery or cancel the scheduled delivery and delete the associated content before account deletion is completed.

If the user chooses to preserve scheduled future deliveries, Every Era Moments may retain the content, recipient information, delivery instructions, and other information reasonably necessary to preserve and fulfill those deliveries after the user's account has otherwise been deleted. Such information will be retained and processed in accordance with our Future Delivery & Data Retention Policy (available on request at hello@everyera.com).

If the user chooses to cancel scheduled future deliveries, those deliveries will be cancelled and the associated content will be deleted in accordance with our Future Delivery & Data Retention Policy (available on request at hello@everyera.com), subject to applicable legal, security, backup, and other permitted retention requirements.

Every Era Moments may require additional identity verification or confirmation before deleting an account, cancelling a scheduled future delivery, or permanently deleting associated content in order to prevent unauthorized or accidental loss.

An account's inactive or archived status does not, by itself, constitute a request to delete the account or cancel pending future deliveries. Pending future deliveries associated with inactive or archived accounts are handled as described in our Future Delivery & Data Retention Policy.

Provider-Generated Identifiers

Certain information we receive from third-party application marketplaces, payment providers, or other service providers may be associated only with a pseudonymous or provider-generated identifier and may not be reasonably capable of being linked by Every Era Moments to a particular user.

Where we cannot reasonably identify a particular record as belonging to the person making a privacy request, we may be unable to access, correct, delete, or otherwise act upon that record in response to the request. We will not attempt to re-identify pseudonymous information solely for the purpose of responding to a privacy request unless required by applicable law.

Privacy requests relating to information maintained independently by Apple, Google, payment providers, or other third parties may need to be submitted directly to the applicable provider.

11.Marketing Communications

The Company may send newsletters, product updates, promotional communications, educational content, service announcements, feature announcements, surveys, and marketing messages to users who have elected to receive such communications.

Users may opt out of marketing communications at any time by following the unsubscribe instructions contained in such communications, adjusting account preferences, or contacting the Company.

Opting out of marketing communications will not affect the Company's ability to send transactional, account-related, security, billing, verification, legal, future-delivery, service-related, or other non-marketing communications necessary to provide and administer the Services.

The Company will honor applicable marketing communication preferences in accordance with applicable law.

> 12. Cookies and Similar Technologies

We may use cookies, analytics tools, and similar technologies to improve functionality, security, user experience, and service performance.

Users may manage cookie preferences through browser settings and in-app where available.

We also use a first-party cookie to record referral and marketing sources at signup. This cookie is optional: it is subject to your analytics choices, is not set if you opt out of usage analytics, is not shared with advertising networks or used for cross-site tracking, and is not used on the pages where recipients read delivered content.

Analytics Services

The Company may use third-party analytics providers, including PostHog and similar services, to better understand how users interact with the Services, improve functionality, monitor performance, and enhance user experience.

These providers may collect information regarding device characteristics, browser activity, usage patterns, referral sources, and interactions with the Services.

Users may be able to limit certain analytics tracking through browser settings, device settings, cookie preferences, or tools made available by the applicable analytics provider.

The information collected through analytics services is used to help us understand usage trends, improve the Services, identify technical issues, enhance security, and support product development.

> 13. Mobile Applications

Every Era Moments offers native mobile applications to access and use the Services. During Closed Beta, our mobile application is initially distributed through Apple TestFlight, with broader mobile availability planned in the future.

With your permission, the mobile application may access your device's camera and microphone to capture photographs, videos, and voice recordings, as well as your photo library to upload existing media. These permissions are requested only when you first attempt to use the corresponding functionality and may be managed through your device settings. On iOS, you may grant access to all photos or only to selected photos; either choice works with the Services. Every Era Moments does not use photo-library access to add to or modify your photo library.

The mobile application securely stores authentication credentials using your device's secure storage mechanisms where supported by the operating system.

The mobile application uses the same trusted service providers described in this Privacy Policy, including Supabase for authentication and storage, PostHog for product analytics, Sentry for diagnostics and application performance monitoring, and AssemblyAI for voice transcription. Voice recordings are processed as described in the Artificial Intelligence Processing section of this Privacy Policy.

Our mobile applications are distributed through Apple and, in the future, may also be distributed through other application marketplaces, including Google Play. These platform providers may process limited information, such as your beta tester email address, download information, crash reports, or other platform-related information, in accordance with their own privacy policies and terms.

Every Era Moments does not use advertising identifiers for targeted advertising and does not track users across other companies' applications or websites for cross-context behavioral advertising.

> 14. International Users

The Services are currently offered only to users located in the United States. Every Era Moments does not currently market or provide the Services to individuals located outside the United States.

While the Services are currently offered only to users located in the United States, Every Era Moments and its service providers may process or store information in the United States or other jurisdictions as described in this Privacy Policy.

If you choose to use the Services from outside the United States, you acknowledge that your information may be transferred to, processed, and stored in the United States, where privacy and data protection laws may differ from those in your jurisdiction.

If Every Era Moments expands the availability of the Services to additional countries or regions in the future, we will update this Privacy Policy as necessary to reflect applicable legal and regulatory requirements.

> 15. Children's Privacy

The Services are intended for account holders who are eighteen (18) years of age or older. Individuals under age 18 may not create or maintain an Every Era Moments account. We do not direct any marketing to children.

Parents, legal guardians, and other authorized adult users may upload, store, manage, and schedule content relating to their children or other minors. By submitting such information, you represent and warrant that you have the legal authority to provide it and to authorize its use in connection with the Services.

Minor Recipients. An adult user may designate a minor as the recipient of content. Delivery to a minor occurs only when the adult who created the content has authorized it, either when scheduling the content or by confirming the delivery. When content is delivered, the minor may view it through a recipient-facing page reached by a private link that we send to an email address the authorizing adult supplied. Viewing content through that page does not create an Every Era Moments account for the minor, does not require the minor to provide any information, and does not permit the minor to use account-holder features.

To provide the recipient-facing experience we process only: the minor's name, date of birth (or, before birth, expected due date) and time zone, as supplied by the adult user; the date the minor reaches adulthood, which we calculate from the date of birth; the delivery email address supplied by the adult user; a private link identifier and the security information needed to operate it; whether and when the delivered content was opened, which we show to the authorizing adult; and the technical logs described in Section 3. We do not build a profile of a minor recipient, do not use analytics or advertising technology on recipient-facing pages, and do not use this information for any purpose other than delivering the content and keeping it secure. The authorizing adult may disable or reissue the private link at any time.

Children Under 13. Every Era Moments does not permit children under thirteen (13) to create accounts. Where a child under 13 is a recipient, the recipient-facing page is made available only on the authorization of a parent or legal guardian, who supplies the delivery address and controls the private link; we treat that authorization as the parent's or guardian's consent to the limited processing described above.

We do not knowingly collect personal information directly from a child under age 13 without the consent or authorization of a parent, legal guardian, or other person legally authorized to provide such consent. If we become aware that we have collected personal information directly from a child under age 13 without required parental or legal authorization, we will take reasonable steps to delete such information as required by applicable law.

When a recipient becomes an adult. A recipient who reaches eighteen may create their own account and, with the process described in the Future Delivery & Data Retention Policy, take ownership of content delivered to them.

> 16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, by email, or by other reasonable means, as appropriate and as required by applicable law.

Continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.

> 17. Contact Information

Every Era Moments, LLC

Email: legal@everyera.com

Website: www.EveryEra.com