Your trust is everything to us
Privacy Policy
At MyEverheart, we believe your memories and personal data belong to you, and only you. This policy explains clearly what we collect, how we use it, and how we protect it.
Last updated
October 29, 2026
We built MyEverheart to preserve what matters most
Your voice recordings, video messages, and personal memories are among the most intimate things you will ever share. We take that responsibility seriously, and we have designed every aspect of MyEverheart with your privacy as the foundation.
This Privacy Policy applies to all MyEverheart services, including our website, mobile applications, and any related services. By using MyEverheart, you agree to the practices described in this document.
Information we collect, and why
Category 1: Information you provide directly
Information you provide directly
When you create an account, record messages, or use MyEverheart features, you may provide: your name and email address; voice and video recordings; written notes and messages; delivery instructions and recipient information; payment details (processed securely by our payment provider).
Category 2: Information collected automatically
Information collected automatically
When you use MyEverheart, we automatically collect: device type and operating system; browser type and version; IP address and approximate location; pages visited and features used; session duration and interaction data.
Note: We collect only what we need to operate and improve the platform. We do not sell this data.
Category 3: Information from third parties
Information from third parties
If you choose to sign in using a third-party service (such as Google or Apple), we receive basic profile information, typically your name and email address, as permitted by that service.
We use your information to serve you, nothing more
Use cases
• To operate and deliver the MyEverheart service, including storing and delivering your messages.
• To personalize your experience and provide milestone prompts and suggestions.
• To communicate with you about your account, updates, and support requests.
• To improve the platform through anonymized usage analysis.
• To comply with legal obligations and protect the security of the platform.
• To send you service-related notifications (you can manage these in settings).
What we do NOT do
• We do not sell your personal data to third parties.
• We do not use your recordings or messages for advertising.
• We do not train AI models on the content of your private messages.
• We do not share your data with advertisers.
Your memories are protected at every step
Security point 1: Encryption
Encrypted in transit and at rest
All recordings are encrypted in transit and stored encrypted on AWS infrastructure. Your messages are accessible only to you, your designated recipients, and the transcription processing required to operate the service.
Security point 2: Storage
Secure, long-term storage
Your data is stored on infrastructure with institutional-grade reliability and redundancy. We are built to preserve your legacy for decades, not just years.
Security point 3: Access controls
Strict internal access controls
Access to user data by MyEverheart staff is strictly limited, logged, and governed by internal access-control policies.
Security point 4: Compliance
GDPR & international privacy standards
We comply with the General Data Protection Regulation (GDPR) and applicable international privacy laws. Users in the EU, UK, and other regions have specific rights described below.
We share only what is necessary, and always on your terms
We may share your information with trusted service providers who help us operate the platform (such as cloud storage, privacy management platform and payment processors). These providers are contractually required to protect your data and may not use it for their own purposes. We may also disclose information if required by law, court order, or to protect the safety and rights of our users.
We will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
You are in control. Always
Rights list
• Access: You can request a copy of all personal data we hold about you.
• Correction: You can update or correct your information at any time in your account settings.
• Deletion: You can request deletion of your account and all associated data. We will process this within 30 business days.
• Portability: You can request an export of your data in a standard format.
• Restriction: You can ask us to limit how we use your data in certain circumstances.
• Objection: You can object to certain types of data processing, including direct marketing.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, contact us at: privacy@myeverheart.com
Your California privacy rights
If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you the rights below. This section adds to the rest of this policy.
Personal information we collect
In the last 12 months we have collected the following categories of personal information, from the sources and for the purposes described in “Information we collect, and why” and “We use your information to serve you” above:
• Identifiers, such as your name, email address and IP address.
• Customer records, such as your account details, and for a gift, the name and email address of the person receiving it. Card details are handled by our payment processors and are not stored by us.
• Commercial information, such as the plans and gift certificates you have bought.
• Internet or other electronic network activity, such as the features you use on our website and app.
• Approximate location, based on your IP address.
• Audio, electronic and visual information, such as the voice recordings, videos and photos you upload.
• Sensitive personal information: your account login (email address and password). We use it only to provide the service and keep your account secure.
Who we disclose it to
We disclose personal information for business purposes to service providers that help us run MyEverheart, such as cloud hosting and storage, email delivery, payment processing, subscription management, transcription and AI features, push notifications and customer support. They may use it only to provide their services to us.
We do not sell or share your personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as the CCPA defines those terms. We have not done either in the last 12 months. We do not knowingly sell or share the personal information of anyone under 16.
Your rights
• Right to know: what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to, and a copy of it.
• Right to delete: ask us to delete the personal information we hold about you, subject to exceptions the law allows.
• Right to correct: ask us to correct personal information that is inaccurate.
• Right to opt out of sale or sharing: we do neither, so there is nothing you need to opt out of.
• Right to limit the use of sensitive personal information: we use it only for purposes the CCPA allows without this right, such as providing the service and keeping it secure.
• Right not to be discriminated against: we will not deny you the service, charge you a different price or give you a lower quality of service because you used any of these rights.
How to make a request
Email privacy@myeverheart.com with “California privacy request” in the subject. We verify requests as described in “Verifying your request” below. We respond within 45 days, and if we need up to 45 more days we will tell you why. You can ask to know twice in any 12-month period.
You can also have an authorized agent make a request for you. We may ask the agent for your signed permission, and ask you to verify your identity with us directly.
Shine the Light
California Civil Code Section 1798.83 lets California residents ask whether we disclose personal information to third parties for their own direct marketing. We do not.
MyEverheart is designed for adults
Our platform is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at privacy@myeverheart.com and we will take immediate action to remove it.
We will always let you know when things change
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or through a notice on the platform. The date of the most recent update is always shown at the top of this page.
Questions? We are here for you
If you have any questions about this Privacy Policy or how we handle your data, please reach out to our privacy team. We are committed to responding within 5 business days.
Contact details
Email: privacy@myeverheart.com
Support: support@myeverheart.com
Hours: Monday – Friday, 9am – 5pm (EST)
Retention
Except as otherwise permitted or required by applicable law or regulation, we will keep your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or for purposes that are compatible with the purposes that we have previously disclosed.
Verifying your request
Before fulfilling your request, we take steps to verify you are who you say you are or that you have authority to act upon someone else's behalf. One way we verify you is through your account. If you do not provide your account number, we may request additional information that we need to verify you and, if you are submitting a request on behalf of someone else, to verify that you are permitted to act on that person's behalf. When we contact you to request verification information, please respond and provide the information that we have requested. Depending on the nature of the request you make, we may require you to verify your identity to either a "reasonable degree of certainty" or "high degree of certainty". This means that we need to match two or three pieces of information that we hold about you with information that you provide to us. In addition, we may ask for knowledge-based qualifiers during the verification process. This data we need to match or ask for you to provide could include, but is not limited to, email address, mailing address, phone number, date of last billing and the amount.
In some cases, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request or that you are authorized to make the request on behalf of someone else.
In addition to providing the information we need to verify you or your authority, you must provide us with enough information so that we can understand, evaluate, and respond to your request. We cannot respond to your request or provide you with personal information if we cannot confirm the personal information relates to you.
We will only use personal information provided in the request to verify your identity or authority to make a request on behalf of someone else.
Notice to our international users
MyEverheart is based in the United States. If you are using our website or app outside the United States, please be aware that the personal information we collect about you is being processed in the United States or other jurisdictions outside your own. By continuing to use our website and mobile application and providing your personal information, you acknowledge that your personal information may be processed in and further transferred to jurisdictions other than your own. The data protection laws and regulations that may apply to your personal information processed in United States or other countries are likely different from the laws in your home country.