Privacy Policy

1.Introduction

Every Era Moments, LLC ("Every Era Moments," "Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you use our website, applications, services, and related offerings (collectively, the "Services").

This Privacy Policy forms part of, and should be read together with, our Terms of Service and Future Delivery & Data Retention Policy.

By using the Services, you acknowledge the practices described in this Privacy Policy.

2.Information We Collect

We may collect the following categories of information:

(a)Account Information

• Name

• Email address

• Subscription information

• Billing information

If you choose to add one, we also store a profile photo.

(b)Subscription and Purchase Identifiers

When you purchase or manage a subscription through Apple, Google, or another third-party application marketplace or payment provider, we may receive transaction, purchase, receipt, subscription, or account identifiers generated by that provider.

Depending on the provider, these identifiers may be pseudonymous or otherwise not directly associated with information that identifies you to Every Era Moments. We may use these identifiers to verify purchases, determine subscription status and entitlements, provide customer support, prevent fraud, and administer the Services.

We may not receive your complete payment information from third-party application marketplaces, and we do not control the information those providers independently collect or maintain.

(c)User Content

Users may create, upload, store, organize, schedule, or share content through the Services, including:

• Photographs

• Videos

• Voice recordings

• Stories

• Letters

• Journals

• Documents

• Family histories

• Biographical information

• Milestone memories

• Future-delivery content

• AI-assisted content and related materials

(d)Family, Relationship, and Shared Content

The Services enable users to create, upload, store, organize, schedule, generate, and share content relating to themselves and the people who matter most to them, including children, parents, spouses, partners, relatives, friends, mentors, loved ones, and, where applicable, individuals who have passed away.

Such content may include photographs, videos, voice recordings, stories, letters, journals, documents, biographies, family histories, milestone memories, future-delivery content, AI-assisted content, and other personal materials submitted by users.

Users are solely responsible for ensuring they have the legal right, authority, and any necessary permissions to upload, store, share, or schedule content relating to other individuals.

Users remain solely responsible for the accuracy, completeness, appropriateness, and legality of any content submitted through the Services.

Every Era Moments does not independently verify permissions, relationships, ownership rights, consent, familial relationships, historical accuracy, or other information relating to content submitted by users.

(e)Recipient Information

Users may provide information relating to intended recipients, including:

• Names

• Email addresses

• Relationships

• Delivery preferences

• Other information voluntarily provided by users

(f)Continuity Contact Information

Users may designate trusted contacts, beneficiaries, Continuity Contacts, or account representatives.

We may collect information relating to such individuals as provided by the user.

(g)Technical Information

We may automatically collect:

• Device information (including mobile device identifiers)

• Browser information

• IP address

• Operating system

• Mobile application version

• App permissions you grant (camera, microphone, photo library)

• Log data

• Usage information

• Diagnostic information

• Cookies and similar technologies

• Referral and marketing attribution information

3.How We Use Information

We use information to:

(a)provide the Services;

(b)create and manage accounts;

(c)process subscriptions and payments;

(d)store and maintain User Content;

(e)generate AI-assisted content and related materials;

(f)facilitate future-delivery services;

(g)communicate with users;

(h)verify account ownership and identity;

(i)maintain security and prevent fraud;

(j)comply with legal obligations; and

(k)improve, develop, analyze, and support the Services, including identifying aggregate trends and topics that may inform new prompts, features, and functionality.

What other people can see

If you add a profile photo, it is shown to you and to the people you share a family with on Every Era. When a letter or moment you wrote is delivered, your profile photo appears with it for the person who receives it.

4. Artificial Intelligence Processing

Optional AI Features

Generative AI-powered features are optional and turned off by default. User Content is processed by generative AI systems only when a user chooses to enable or use an AI-powered feature. Users may use the Services without enabling these optional AI features.

When enabled or requested by a user, Every Era Moments uses artificial intelligence and related technologies to assist users in creating stories, biographies, summaries, timelines, images, AI-assisted content, and other content.

User Content may be processed by artificial intelligence systems as necessary to provide the AI-powered functionality requested by the user and to maintain, secure, support, and operate that functionality.

Users retain ownership of their User Content and AI-assisted content created from their User Content.

Voice Transcription and AI Processing

Voice transcription is separate from the optional generative AI features described above. When a user records or uploads a voice recording, the audio is automatically and securely transmitted to a trusted third-party transcription provider for the sole purpose of converting the recording into text. The resulting transcript is returned to Every Era Moments so that users may view, edit, organize, or use the transcript within the Services. The original audio recording is preserved unless the user chooses to delete it.

When a user deletes a voice recording from the Services, Every Era Moments also communicates the deletion to its transcription provider in accordance with the provider's applicable deletion procedures.

Voice recordings and transcripts are processed solely to provide the functionality requested by the user. Every Era Moments does not use voice recordings or transcripts to train artificial intelligence or machine learning models, and we require our service providers to process such information only as necessary to provide the requested transcription services and in accordance with applicable law and our contractual obligations.

We have disabled model training on our account with our transcription provider, as permitted by their terms, and we re-verify that setting whenever our account, plan or credentials change.

AI Training and Model Development

Except as expressly authorized by the user, Every Era Moments does not use User Content, including photographs, videos, voice recordings, stories, letters, documents, future-delivery content, family content, or AI-assisted content, to train, fine-tune, or improve artificial intelligence or machine learning models, whether public, private, proprietary, or internal.

Every Era Moments does not sell, license, or provide User Content to third parties for the purpose of training or improving artificial intelligence or machine learning models.

Where AI-powered features are made available and a user chooses to enable or use them, User Content may be securely processed by trusted third-party artificial intelligence service providers solely for the purpose of providing the requested functionality, such as generating summaries, biographies, timelines, writing assistance, organization, or other AI-assisted content. These providers are contractually prohibited from using User Content to train their own artificial intelligence models except as expressly disclosed to and authorized by the user.

The Company may use anonymized, aggregated, and de-identified information that cannot reasonably be used to identify an individual or reconstruct User Content to improve the performance, reliability, security, analytics, functionality, and operation of the Services.

Every Era Moments does not use voice recordings, photographs, videos, or other biometric information for biometric identification, facial recognition, voice recognition, identity verification, profiling, or similar biometric processing purposes unless expressly disclosed to and authorized by the user.

Artificial intelligence systems may generate content that contains inaccuracies, omissions, interpretations, assumptions, or unintended results. Users are encouraged to review AI-assisted content before sharing, publishing, relying upon, or scheduling such content for future delivery.

5.Future Delivery Storage

Future-delivery content may be stored for extended periods of time in order to facilitate scheduled future deliveries.

The retention, storage, maintenance, preservation, verification, and delivery of such content are governed by the Company's Future Delivery & Data Retention Policy.

Users are responsible for maintaining accurate account and recipient information.

This Privacy Policy should be read together with the Future Delivery & Data Retention Policy.

6.Continuity Contact and Authorized Representatives

Users may designate a Continuity Contact to assist with certain account and future-delivery matters in the event of the user's death, incapacity, or other circumstances, as described in our Future Delivery & Data Retention Policy.

We may collect and process information about a Continuity Contact that is provided by the user, including the contact's name, contact information, relationship to the user, and any permissions or instructions associated with the designation.

Designation as a Continuity Contact does not, by itself, make that person a legally authorized representative or authorize that person to exercise privacy rights on behalf of the user. We may require appropriate verification or legal documentation before allowing any person to exercise rights or take actions on behalf of another individual.

For additional information about the role, authority, and limitations of a Continuity Contact, please see our Future Delivery & Data Retention Policy.

7. Sharing of Information

We may share personal information and User Content only as reasonably necessary to provide, operate, secure, maintain, improve, and support the Services.

We may share information with the following categories of third parties:

(a)cloud infrastructure and storage providers;

(b)payment processors and subscription management providers;

(c)email delivery and communications providers;

(d)artificial intelligence and machine learning service providers, where a user chooses to enable or use applicable AI-powered features;

(e)analytics and product improvement providers;

(f)security, fraud prevention, authentication, and identity verification providers;

(g)customer support and technical service providers;

(h)professional advisors, including legal, accounting, insurance, and consulting professionals;

(i)governmental authorities, regulators, law enforcement, or courts when required by applicable law or legal process; and

(j)successor entities in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction.

Service Providers and Subprocessors

Every Era Moments uses third-party service providers and subprocessors to help operate, maintain, secure, and improve the Services. A current list of the service providers and subprocessors that may process personal information or User Content on our behalf is available on our Subprocessors page.

Our service providers and subprocessors process information only as necessary to provide services on our behalf and in accordance with applicable law, our contractual obligations, and this Privacy Policy. We require them to implement appropriate administrative, technical, and organizational safeguards designed to protect personal information and User Content.

Our service providers and subprocessors are not authorized to sell User Content or use User Content to train artificial intelligence or machine learning models except as expressly disclosed in this Privacy Policy or expressly authorized by the user.

The service providers and subprocessors used by Every Era Moments may change from time to time as our Services evolve. We may add, replace, or discontinue providers and will maintain our Subprocessors page to reflect the providers currently used in connection with the Services.

We do not sell users' personal information.

We do not sell User Content, including photographs, videos, voice recordings, stories, letters, future-delivery content, family content, AI-assisted content, or other personal or family content submitted through the Services.

We do not share personal information for cross-context behavioral advertising.

Additional Privacy Rights

Depending on where you live, you may have additional rights regarding your personal information under applicable privacy laws, including the right to know what personal information we collect, request access to or correction of your information, request deletion of your information, obtain a copy of certain personal information, or appeal certain privacy decisions where applicable.

To exercise applicable privacy rights, please contact us at legal@everyera.com. We will respond in accordance with applicable law and may request additional information to verify your identity before processing your request.

Authorized agents may submit requests on behalf of users where permitted by applicable law, subject to verification of both the user's identity and the agent's authority.

8.Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, loss, or destruction. These safeguards include, where appropriate, encryption of data in transit using industry-standard transport security protocols (such as HTTPS/TLS), encryption of data at rest, access controls, authentication measures, and ongoing security monitoring designed to protect personal information and User Content.

No method of transmission, storage, or security system is completely secure, and we cannot guarantee absolute security.

In the event of a security incident involving personal information, the Company will provide notifications as required by applicable law.

Keeping sign-up safe.

We use Cloudflare Turnstile to stop automated programs from creating accounts. When you sign up, Cloudflare checks technical details from your browser or device, such as your IP address and browser type, to confirm you're a person. Cloudflare's handling of that information is described in its Turnstile Privacy Addendum.

9. Data Retention

We retain personal information and User Content for as long as reasonably necessary to provide the Services, fulfill future-delivery obligations, comply with applicable law, maintain security, prevent fraud, resolve disputes, enforce our agreements, and support legitimate business operations.

Retention periods may vary depending on the type of information, account activity, subscription status, future-delivery schedules, preservation services, legal requirements, and other operational needs.

Certain records may be retained after account deletion where reasonably necessary or required for legal compliance, security, fraud prevention, dispute resolution, enforcement of agreements, future-delivery administration, or other legitimate business purposes.

How long we keep each kind of information, including what happens to letters and Moments when an account is deleted, is set out in our Future Delivery & Data Retention Policy, published on our website. When we no longer need information for the purposes described in this policy, we delete it or make it no longer identify you.

10.User Rights and Choices

Subject to applicable law, users may have the right to:

(a)access personal information;

(b)correct inaccurate information;

(c)update account information;

(d)delete certain information;

(e)export certain information;

(f)object to certain processing activities; and

(g)withdraw consent where applicable.

To exercise your privacy rights, users may contact Every Era Moments at legal@everyera.com. To protect the privacy and security of our users, we may request additional information necessary to verify the identity of the requester before processing or fulfilling a request. We will respond to verified requests in accordance with applicable law.

The exercise of certain rights may be limited where retention of information is necessary to comply with applicable law, maintain security, prevent fraud, fulfill future-delivery obligations, enforce agreements, or protect the rights of the Company, users, recipients, or third parties.

(h) Deleting your account

You can delete your account at any time from Settings. We wait 30 days before deleting anything, in case you change your mind. If you change your mind within those 30 days, sign in and tap Restore my account. Your account, letters and Moments come back. Invitations you had sent are cancelled and need sending again, and a paid plan you cancelled needs restarting.

What is deleted. Deleting your account deletes what you created: your profile, your sign-in and payment details, your drafts, your letters to yourself, and any letters or Moments you choose to delete below.

What is not deleted. Deleting your account never deletes anything another person wrote, even when it was written for the same child. Letters and Moments a person has already received stay with them. This is their copy, as with a message you sent them.

Your choice for each person you wrote to. Before you confirm, you choose for each child or other person you wrote to:

• Keep: your sealed and scheduled letters for that person are kept and delivered on their dates, signed as you signed them.

• Delete: your letters and Moments for that person are deleted, including sealed and scheduled letters.

We show you how many of each will be kept or deleted before you confirm.

Before you confirm, you choose what happens to the letters you've written for each child: keep them, and we'll keep them and deliver them on their dates, or delete them with everything else. To delete everything, choose Delete for each child. If you keep them, we keep the letter, its photos, videos and voice notes, and the name you had when you wrote it (the child sees your first name or your sign-off), until the person who received it, or a parent in your family, deletes it. A letter for a child who isn't old enough yet is kept safe until they are. Letters already delivered stay in the accounts of the people who received them. Letters other people wrote stay in their accounts.

Children with another parent. If a child has another parent or legal guardian on Every Era, the child stays with them and they look after the child's page from then on. If you choose Keep, your Moments and undated letters for that child stay with them too.

Children with no other parent. If a child has no other parent or legal guardian on Every Era, and something is still waiting for the child, the child's page is paused rather than deleted. Section 15 explains paused pages.

Before you go. You can download a copy of everything you wrote before deleting your account (Section 10(e)).

After deletion. When your 30 days are up, we delete your account and what's in it: your profile, email address, password, drafts, letters to yourself and anything you chose to delete. Letters you chose to keep for a child stay, as described above. A bare sign-in record stays, without your name, email, password or sign-in id, because the letters and pages kept for your family are attached to it. To stop repeat free trials and repeat launch offers, we keep a coded form of your email address. It's only ever matched against that same address, and we keep it after you delete your account. Your photos, videos and voice notes, including every stored version, are destroyed within 14 days after that, so within 45 days of your request.

Backups. Our database backups age out within 8 days. Our separate media backup is normally cleared in the same daily run as the originals, and at most 31 days later, because it is locked against deletion for 30 days after a copy is saved. We use backups only to recover from a problem on our side, and to test that recovery works. If we ever restore one, our restore steps erase deleted accounts again before it is used.

Services we use. Some copies stay for a while under those services' own settings. The service that sends our email keeps sent emails for 30 days. Our error-reporting service keeps error reports for 90 days. We ask our analytics service to delete your record and activity the day your account is deleted, and it removes them in its own scheduled clean-up. Our hosting provider keeps its logs for up to 7 days, and our cloud provider keeps job logs for 30 days. Emails we've already sent, and letters already delivered, stay with the people who received them. Our payment processor (Stripe), the App Store and Google Play keep their own records of your purchases under their own policies. If you signed in with Google or Apple, you can remove Every Era from your Google or Apple account settings.

What we keep. A record of each charge, not linked to your account, for 7 years, for tax and accounting. A record that your account was deleted, without your name or email, for 24 months, so we can make sure your information stays deleted. Our security log for 12 months, with addresses and locations removed.

Feedback. Feedback you send us goes to our team's email, with anything you attached, the name and email you give us or sign in with, your account and your device, and a short summary without your contact details goes to our team's chat. Deleting your account doesn't remove these copies. Write to legal@everyera.com and we'll delete the email copy and any chat summary we can match to it.

When a letter or Moment you wrote has already been delivered, the profile photo shown with it stays with that delivered copy.

Provider-Generated Identifiers

Certain information we receive from third-party application marketplaces, payment providers, or other service providers may be associated only with a pseudonymous or provider-generated identifier and may not be reasonably capable of being linked by Every Era Moments to a particular user.

Where we cannot reasonably identify a particular record as belonging to the person making a privacy request, we may be unable to access, correct, delete, or otherwise act upon that record in response to the request. We will not attempt to re-identify pseudonymous information solely for the purpose of responding to a privacy request unless required by applicable law.

Privacy requests relating to information maintained independently by Apple, Google, payment providers, or other third parties may need to be submitted directly to the applicable provider.

11.Marketing Communications

The Company may send newsletters, product updates, promotional communications, educational content, service announcements, feature announcements, surveys, and marketing messages to users who have elected to receive such communications.

Users may opt out of marketing communications at any time by following the unsubscribe instructions contained in such communications, adjusting account preferences, or contacting the Company.

Opting out of marketing communications will not affect the Company's ability to send transactional, account-related, security, billing, verification, legal, future-delivery, service-related, or other non-marketing communications necessary to provide and administer the Services.

The Company will honor applicable marketing communication preferences in accordance with applicable law.

12.Cookies and Similar Technologies

We may use cookies, analytics tools, and similar technologies to improve functionality, security, user experience, and service performance.

Users may manage cookie preferences through browser settings and in-app where available.

We also use a first-party cookie to record referral and marketing sources at signup. This cookie is optional: it is subject to your analytics choices, is not set if you opt out of usage analytics, is not shared with advertising networks or used for cross-site tracking, and is not used on the pages where recipients read delivered content.

Analytics Services

The Company may use third-party analytics providers, including PostHog and similar services, to better understand how users interact with the Services, improve functionality, monitor performance, and enhance user experience.

These providers may collect information regarding device characteristics, browser activity, usage patterns, referral sources, and interactions with the Services.

Users may be able to limit certain analytics tracking through browser settings, device settings, cookie preferences, or tools made available by the applicable analytics provider.

The information collected through analytics services is used to help us understand usage trends, improve the Services, identify technical issues, enhance security, and support product development.

13.Mobile Applications

Every Era Moments offers native mobile applications to access and use the Services. During Closed Beta, our mobile application is initially distributed through Apple TestFlight, with broader mobile availability planned in the future.

With your permission, the mobile application may access your device's camera and microphone to capture photographs, videos, and voice recordings, as well as your photo library to upload existing media. These permissions are requested only when you first attempt to use the corresponding functionality and may be managed through your device settings. On iOS, you may grant access to all photos or only to selected photos; either choice works with the Services. Every Era Moments does not use photo-library access to add to or modify your photo library.

The mobile application securely stores authentication credentials using your device's secure storage mechanisms where supported by the operating system.

The mobile application uses the same trusted service providers described in this Privacy Policy, including Supabase for authentication and storage, PostHog for product analytics, Sentry for diagnostics and application performance monitoring, and AssemblyAI for voice transcription. Voice recordings are processed as described in the Artificial Intelligence Processing section of this Privacy Policy.

Our mobile applications are distributed through Apple and, in the future, may also be distributed through other application marketplaces, including Google Play. These platform providers may process limited information, such as your beta tester email address, download information, crash reports, or other platform-related information, in accordance with their own privacy policies and terms.

Every Era Moments does not use advertising identifiers for targeted advertising and does not track users across other companies' applications or websites for cross-context behavioral advertising.

14.International Users

The Services are currently offered only to users located in the United States. Every Era Moments does not currently market or provide the Services to individuals located outside the United States.

While the Services are currently offered only to users located in the United States, Every Era Moments and its service providers may process or store information in the United States or other jurisdictions as described in this Privacy Policy.

If you choose to use the Services from outside the United States, you acknowledge that your information may be transferred to, processed, and stored in the United States, where privacy and data protection laws may differ from those in your jurisdiction.

If Every Era Moments expands the availability of the Services to additional countries or regions in the future, we will update this Privacy Policy as necessary to reflect applicable legal and regulatory requirements.

15.Children's Privacy

The Services are intended for account holders who are eighteen (18) years of age or older. Individuals under age 18 may not create or maintain an Every Era Moments account. We do not direct any marketing to children.

Parents, legal guardians, and other authorized adult users may upload, store, manage, and schedule content relating to their children or other minors. By submitting such information, you represent and warrant that you have the legal authority to provide it and to authorize its use in connection with the Services.

Minor Recipients. An adult user may designate a minor as the recipient of content. Delivery to a minor occurs only when the adult who created the content has authorized it, either when scheduling the content or by confirming the delivery. When content is delivered, the minor may view it through a recipient-facing page reached by a private link that we send to an email address the authorizing adult supplied. Viewing content through that page does not create an Every Era Moments account for the minor, does not require the minor to provide any information, and does not permit the minor to use account-holder features.

To provide the recipient-facing experience we process only: the minor's name, date of birth (or, before birth, expected due date) and time zone, as supplied by the adult user; the date the minor reaches adulthood, which we calculate from the date of birth; the delivery email address supplied by the adult user; a private link identifier and the security information needed to operate it; whether and when the delivered content was opened, which we show to the authorizing adult; and the technical logs described in Section 3. We do not build a profile of a minor recipient, do not use analytics or advertising technology on recipient-facing pages, and do not use this information for any purpose other than delivering the content and keeping it secure. The authorizing adult may disable or reissue the private link at any time.

Children Under 13. Every Era Moments does not permit children under thirteen (13) to create accounts. Where a child under 13 is a recipient, the recipient-facing page is made available only on the authorization of a parent or legal guardian, who supplies the delivery address and controls the private link; we treat that authorization as the parent's or guardian's consent to the limited processing described above.

We do not knowingly collect personal information directly from a child under age 13 without the consent or authorization of a parent, legal guardian, or other person legally authorized to provide such consent. If we become aware that we have collected personal information directly from a child under age 13 without required parental or legal authorization, we will take reasonable steps to delete such information as required by applicable law.

A parent's choices about a child's information. A parent or legal guardian may ask to see the information we hold about their child, ask us to stop using it, or ask us to delete it, at any time, by writing to legal@everyera.com. We verify, to our satisfaction, that the person asking is the child's parent or legal guardian before we act.

Paused pages. When the last parent on a child's page deletes their account and no other parent or legal guardian is on Every Era, we pause the child's page instead of deleting what others wrote for the child. While a page is paused:

• we keep only the child's first name, date of birth, the date the child becomes an adult, and a delivery email address if one was given that is not the departing parent's own;

• we remove the child's private link and the record of which letters were opened;

• nothing is delivered to a child under 13;

• a child aged 13 to 17 with their own delivery email keeps receiving letters that were already scheduled for them by a parent, and can pause them or decline them at any time;

• no one can add new letters or Moments for the child, and each writer can still see, edit, download or delete their own;

• anything waiting for a parent's approval keeps waiting. Nothing is approved automatically.

Who can take over a paused page. A parent or legal guardian, after we verify their identity and their relationship to the child. Or the child, at 18 or later, with an account of their own. We invite the child by email when we have an address.

If no one takes over. We delete the paused page 24 months after the later of the child's handover date and the last scheduled delivery date. If we don't know the child's date of birth, we delete it 20 years after the page was paused. We tell everyone who wrote for the child at least 90 days before. Each writer keeps their own letters and Moments, but they can no longer reach the child.

When a recipient becomes an adult. A recipient who is 18 or older may create their own account and take over the letters and Moments kept for them, including a paused page, as described in our Future Delivery & Data Retention Policy.

16.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, by email, or by other reasonable means, as appropriate and as required by applicable law.

Continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.

17.Contact Information

Every Era Moments, LLC

Email: legal@everyera.com

Website: www.EveryEra.com