Privacy Policy

1. Scope

This Privacy Policy explains how ForeverAfter Technologies LLC processes personal information when you use ForEverAfter. It describes the current memory, profile, family, account, analytics, verification, and related service functions. Future AI, biometric, immersive, or research features are not treated as active data practices merely because they are discussed elsewhere in our legal architecture.

When a future feature materially changes what data we collect or how sensitive data is used, we will update this notice and obtain separate consent where required.

2. Information you provide

• Account information such as name, email address, account identifiers, authentication information, and communication preferences.
• Profile and legacy information such as names, dates, biographies, relationships, family-tree links, life events, memorial instructions, Legacy Contact selections, and death-status information.
• Content you choose to preserve or share, including text, photographs, audio, video, captions, documents, recordings, comments, and associated metadata.
• Information in forms you submit to us, including support, legal, privacy, copyright, security, or participation requests.
• Verification information when needed for sensitive actions, such as evidence of death, identity, authority, or a rights claim.

3. Information collected through use

We may process device type, browser or app information, IP address, approximate location derived from IP, timestamps, session and authentication events, referral information, feature usage, diagnostics, error information, and security events needed to operate, secure, and understand the Service.

ForEverAfter currently uses Supabase for core database, authentication, and storage functions and Vercel infrastructure and analytics for website hosting, performance, and product analytics. Those providers process information according to their roles in providing the Service.

4. Information about other people

Memories and family archives naturally include relatives, friends, coworkers, and other people who may not have ForEverAfter accounts. We process information about those people when a user submits it for the selected memory, profile, relationship, or sharing feature.

The uploading user remains responsible for the rights and permissions required for the selected use. A non-user or represented person may contact us to raise a privacy, identity, copyright, publicity, relationship, or other rights concern.

5. How we use information

• Provide, maintain, personalize, and secure the Service.
• Store, organize, retrieve, and display memories, media, profiles, relationships, and family archives according to selected permissions.
• Authenticate users, prevent fraud, investigate abuse, and protect accounts and the Service.
• Process legacy and memorial functions, including death verification and custodial handoff when requested.
• Provide support and respond to legal, privacy, security, copyright, and rights requests.
• Measure reliability and product use, debug software, monitor performance, and improve the Service.
• Process subscriptions and payment status if paid billing is enabled.
• Comply with law, legal process, enforceable rights requests, and our agreements.

6. AI training and sensitive future uses

ForEverAfter does not use Personal or Family content for generalized public or third-party AI model training merely because you accepted the general Terms. A future generalized-training use of private or family-restricted content would require a separate disclosure and opt-in where applicable.

ForEverAfter does not currently represent that it is collecting regulated biometric identifiers for a live biometric or digital-persona product. If such a feature is introduced, it will receive a separate legal and product review and, where required, a feature-specific notice, consent, retention schedule, and destruction process.

7. When information is disclosed

We disclose content to the people or audiences you select, including yourself, family groups, collaborators, invitees, or the public, depending on the feature and settings you choose.

We may provide information to service providers that perform hosting, storage, authentication, analytics, security, communications, payment processing, or similar functions for us. They receive information only as reasonably necessary for those services and subject to applicable contractual and legal obligations.

We may disclose information when reasonably necessary to comply with valid legal process, enforce rights, investigate fraud or abuse, respond to intellectual-property or privacy claims, protect the Service or people from harm, or defend legal claims.

If ForEverAfter is involved in a merger, financing, acquisition, bankruptcy, reorganization, or asset sale, information may be transferred subject to applicable law and the commitments that apply to the information.

8. Sale and advertising

ForEverAfter does not intend to sell personal memories, private family archives, or identity data as a commodity. We do not currently use private memorial or family content for targeted advertising.

If future practices fall within a legal definition of sale, sharing, or targeted advertising, we will provide the notice, choices, preference-signal recognition, and consent or opt-out mechanisms required before beginning that practice.

9. Cookies, local storage, and analytics

ForEverAfter may use cookies, browser storage, authentication tokens, and similar technologies for sign-in, security, session continuity, preferences, and core operation. Product analytics may measure page and feature use, referral paths, performance, and reliability.

We aim to keep private memory content and sensitive information out of analytics events unless it is genuinely necessary for a requested feature or security investigation.

10. Retention and deletion

We retain information for as long as reasonably necessary to provide the Service, honor user-selected family and legacy functions, maintain security and backups, comply with law, resolve disputes, document transactions and consent, and preserve material users intentionally choose to retain.

For a living paid account that stops paying, the recovery period may last up to one year after the end of the last paid billing period. After that period, unmaintained account content may be deleted if it is not preserved through an applicable shared, linked, memorial, legal, or other qualifying retention state.

A deceased or memorialized canonical profile may remain as a lightweight identity and graph record and its media may be moved to archival, offline, or other cold storage. Content that a paying family branch is authorized to display may remain available through that branch. Archival storage can require restoration and is not a promise of permanent availability.

Deleted material may remain temporarily in backups until normal backup rotation removes it. Minimal transaction, consent, fraud-prevention, security, and legal records may be retained when reasonably necessary or legally required.

11. Death and authority verification records

For death verification we may request a certified death certificate or image of one, an official government or coroner record, funeral-home statement, probate or court record, established obituary, public memorial notice, or other evidence appropriate to the requested action.

We encourage redaction of unnecessary Social Security numbers, medical details, cause of death, home addresses, and other information that is not needed for verification. Raw verification documents are retained only as long as reasonably necessary to complete verification or resolve a related dispute or legal hold. A limited verification record—such as verification status, method, date, and reviewer—may remain with the profile while the profile exists.

12. Security

We use administrative and technical measures reasonably designed for the nature of the information we process, including authentication controls, row-level access controls, logging, backups, and vendor security features. No system can guarantee absolute confidentiality, integrity, or availability.

Protect your credentials and devices and report suspected unauthorized access through the Legal Contact page under Security.

13. Your privacy choices and rights

Depending on where you live and which law applies to ForEverAfter, you may have rights to request access, confirmation, correction, deletion, portability, restriction, withdrawal of consent, or information about certain disclosures or processing. You may also have rights concerning sale, sharing, targeted advertising, sensitive data, or profiling if ForEverAfter ever engages in a regulated practice.

We may verify your identity and authority before acting on a request. A privacy-access response may include information beyond the ordinary product download when applicable law requires it. We will not unlawfully discriminate against you for exercising a privacy right.

14. Adults only

Independent ForEverAfter accounts are limited to people 18 or older unless we later launch a specifically designed youth experience. Adults may preserve appropriate family memories involving minors when they have lawful authority, but ForEverAfter may restrict high-risk public, identity, location, biometric, or synthetic uses involving minors.

If we learn that an underage person created an independent account contrary to this policy, we may suspend the account and take appropriate steps to delete or transition the information consistent with law and legitimate family-record interests.

15. International use

ForEverAfter may become available in multiple languages or countries. Availability in a language does not automatically mean every feature is offered in every jurisdiction. We may limit features while evaluating local privacy, consumer, memorial, biometric, data-transfer, and other requirements.

16. Changes to this Policy

We may update this Policy as the Service, vendors, law, or data practices change. Material changes will be communicated through the Service, email, or another reasonable method where required. Materially new sensitive uses will not rely solely on a silent Privacy Policy update when separate consent is required.

17. Contact

Submit privacy, access, deletion, correction, security, or other rights requests through the Legal Contact page. ForeverAfter Technologies LLC does not publish a private residential address as a general public contact address.