Privacy, by design.

Eternus is run by Sérgio Orlando Pereira Fernandes, a private individual established in Greece, who is the controller responsible for your personal data. Eternus is not run by a company.

Postal address: Kaponis 2, 845 00, Aladino, Greece. Email: support@myeternusapp.com.

The Eternus Android app, Eternus Web (app.myeternusapp.com), the website myeternusapp.com and Ask Eternus on our Support page.

• Account: your name, email address and sign-in details, and any profile details you add (for example date and place of birth, location, languages, a short bio, a photo).
• What you add: Moments (text, photos, video, audio, dates, places), who can see them, comments, hearts, Memorials and your My Tree connections.
• Messages you send and receive in Messenger.
• Talk to Eternus: what you write or dictate, and the replies.
• Technical: an identifier for each installation with the device model (to show your active sessions), your settings and timestamps.

We don't use advertising or analytics tools, and the app doesn't access your device's location.

Your Moments and Memorials may mention or show other people, and an invitation includes the invited person's email address. Only share what you have the right to share. Anyone can ask us about information concerning them at support@myeternusapp.com.

• Legal basis: the legitimate interest of our users in keeping and sharing their memories with the people they choose, and ours in providing that service — Art. 6(1)(f) GDPR.
• Share responsibly: add information, photos or recordings of other people only if you have the right to, and only for people who should see them.
• Sensitive information: memories can reveal someone’s health, beliefs or other sensitive details. Eternus does not ask for this kind of information and uses it only to store it and show it to the people the user chose. Share it about another person only where the law allows it; these rules do not replace the conditions the law sets for such information.
• Children: share photos of or information about a child only with the agreement of a parent or guardian. Requests about children are handled as a priority: we aim to reply for the first time within 7 days.
• People who have died: national law may give relatives or others specific rights over information about them.
• Requests: anyone who is mentioned, shown or invited can ask us to access, correct or remove information about them, or object, at support@myeternusapp.com, without sending identity documents. We assess each request and may ask the person who added the information to change or remove it.

• To provide Eternus: your account, your Moments, sharing with the people you choose, invitations, My Tree, Messenger and service emails. Legal basis: performance of our contract with you (the Terms of Use) — Art. 6(1)(b) GDPR.
• To keep Eternus safe and working: security, preventing abuse, server logs, backups and records of account deletions. Legal basis: our legitimate interest in keeping Eternus and its users secure, recovering from failures and making sure deleted accounts stay deleted — Art. 6(1)(f) GDPR. We keep only what these purposes need, for the periods in section 10, and you can object (section 12).
• To keep the messages, comments and hearts you left for other people after you delete your account, as part of their memories and without your name. Legal basis: the legitimate interest of the people you wrote to, or whose Moments you commented on, in keeping their conversations and memories complete — Art. 6(1)(f) GDPR. Your name is removed and you are told about this before you delete your account. You can object at support@myeternusapp.com (section 12); we assess each objection against the interests of those people.
• To answer your requests about your data. Legal basis: to comply with our obligations under data protection law — Art. 6(1)(c) GDPR.

We don't use your data for advertising or marketing.

Messenger works between people who share Circle or Legacy access. Each message is stored in your conversation and in the other person's. You can delete a message for yourself at any time; the sender can delete it for both people within 24 hours of sending. After that, a short record remains (who sent it and when), without the text. Blocking stops new messages in both directions.

During the beta, Talk to Eternus replies with guided prompts chosen on your device. It does not use generative AI, and your words are not sent to an AI provider. If you dictate instead of typing, your device's own speech service turns your voice into text; we only receive the text.

Eternus does not claim to recreate human consciousness, replace a real person or simulate a deceased person.

Google: Firebase and Google Cloud (sign-in, database, file storage, server functions, hosting, logs and backups), Google Workspace (sending service emails from hello@myeternusapp.com), Vertex AI and reCAPTCHA (Ask Eternus only), and Google Maps Platform (place suggestions).

When you type a place, for example in a Moment or in your profile, the text you type may be sent to Google Maps Platform to show suggestions.

We don't sell personal data and we don't show ads.

• Database (profiles, text of Moments, messages, comments, settings): Google Cloud, Europe.
• Photos, audio, video and profile images: Google Cloud Storage, United States.
• Server functions: Google Cloud, United States and Belgium (European Union).
• Sign-in accounts: Google Firebase Authentication.
• Database backups: Google Cloud Storage, European Union.

When data is processed outside the European Economic Area: photos and other files, most server functions and sign-in accounts are processed in the United States; logs, hosting, our email service, place suggestions and the abuse checks of Ask Eternus run on Google’s global infrastructure and may also be processed outside the European Economic Area. For the services Google provides on our behalf (Firebase, Google Cloud and Google Workspace), transfers to Google LLC in the United States rely on the EU-U.S. Data Privacy Framework, under which Google LLC is certified and which the European Commission has recognised as ensuring adequate protection; where it does not apply, Google’s data processing terms use the European Commission’s Standard Contractual Clauses. For place suggestions (Google Maps APIs), Google acts as a separate controller under its Controller-Controller Data Protection Terms, which also rely on the Data Privacy Framework or, where it does not apply, Standard Contractual Clauses.

• Your account and content: until you delete them or delete your account.
• Messages, comments and hearts you left for others: as long as those people keep them, without your name after you delete your account.
• Deleted photos, audio and video can be recovered by us for up to 7 days, then they are erased.
• Server logs: 30 days. Google keeps administrative audit logs for 400 days.
• Database backups: we make them by hand before changes to the service. We review each backup 30 days after it is made and delete it by hand once it is no longer needed. A deleted backup can still be recovered for up to 7 days, then it is erased.
• Copies of the automatic service emails we send from hello@myeternusapp.com (invitations, email verification and email change confirmations, and account security notices such as a password change): our aim is to delete them within 90 days of sending. Password reset emails are sent directly by Firebase Authentication, and we do not keep a copy. Support correspondence is not covered here; see the next item.
• A minimal record of each account deletion: kept for as long as it is needed to protect the deleted account, so that access to it cannot be restored. It contains only an internal identifier, whether the deletion was completed and, where available, the date of the request. It contains no name, email or profile.
• Records of requests sent to us:
  • Support messages sent to support@myeternusapp.com or hello@myeternusapp.com, and our replies, are kept in our email service (Google Workspace) while we need them to answer you and follow up on your request. We then delete them by hand, including from the email trash.
  • Requests about your personal data (for example to access, correct or delete it), and our replies, are kept while we need them to handle the request, to meet our legal obligations and to be able to show how we handled it.
  • For account deletion requests made by email, we keep a record of the request on the computer used to process it, including your email address and an internal account identifier, while they are needed to complete and check the deletion. We then remove that record by hand. A log of the steps taken, with no email address, name or account identifier, is kept to show how the request was handled.

None of these deletions happens automatically unless stated: we delete backups, service emails and records by hand.

In the Android app: Settings → Account & Security → Delete account. If you use Eternus Web, or can't use the app, you can ask us to delete your account by email: see how to delete your account.

• Deleted: your profile, Moments, photos, audio and video, Talk to Eternus conversations, sessions, your copy of each conversation, Memorials you created, your access to other people's Eternus and theirs to yours, pending invitations and your sign-in account. Comments others left on your Moments are deleted with them.
• Kept with other people: messages you sent stay in the recipients' conversations, shown as sent by "Deleted account". Comments you left on other people's Moments stay without your name. Hearts you gave stay in the count, with no link to you.
• What remains technically: an internal identifier of your former account stays attached to messages kept by others and to blocks others set; it is not linked to your name, email or profile. We keep a minimal record that the account was deleted, to stop access from being restored.
• Backups: your data stays in backups made before the deletion until those backups are deleted (section 10). If we ever restore a backup, we apply completed deletions again before the data is used.

You can ask to see, correct, delete or receive a copy of your data, to restrict or object to its use, and you can withdraw any consent.

In the app you can download a copy of your profile, the text of your Moments and your settings. Original photos, audio and video are not included yet.

Write to support@myeternusapp.com. We may need to confirm your identity and will reply within one month (up to two more months for complex requests, in which case we will tell you).

You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where you think the problem happened. The controller of Eternus is established in Greece, whose authority is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias Avenue 1-3, 115 23 Athens, Greece, www.dpa.gr. It explains how to lodge a complaint on its complaints page: complaints are normally made through its online portal, which needs Greek Taxisnet credentials; if you can't use the portal for that reason and the alleged infringement took place in Greece, it accepts complaints in English at complaints@dpa.gr. To complain in the EU country where you live or work, or where the alleged infringement took place, you can find its authority in the list published by the European Data Protection Board.

Eternus is for people aged 18 or over. We do not verify age. If we learn that an account belongs to someone under 18, we may close it. On Eternus Web, when you create an account you tick a box, not ticked in advance, to confirm that you are 18 or over and accept the Terms of Use; the Android app will do the same from its next version. We do not ask for proof of age. The date of birth you can add is optional, but one that shows you are under 18 stops sign-up.

Ask Eternus is an AI assistant on our Support page. It answers general questions about how Eternus works, using Eternus's help information. You can use it without an Eternus account. It is not connected to Eternus accounts and cannot see or change any account information.

When you ask a question, we process the question you type and your browser's language to generate an answer. Before a question is sent for answering, email addresses and long numbers are automatically removed from it. Please do not include passwords, verification codes or other personal details in your questions.

Answers are generated by Google Cloud's Vertex AI service, which processes questions in the European Union on our behalf. Ask Eternus runs on Google Cloud in the European Union. Google may also process questions for abuse-monitoring and security purposes, as described in its service terms.

Eternus does not intentionally store the text of your questions or of the answers. For each request we keep limited technical records, such as whether it succeeded, how long it took, the length range and language of the question and which help topics were used, without the question or answer text and without your IP address.

To protect the service from abuse, requests are checked with Google reCAPTCHA Enterprise through Firebase App Check, which uses information about your browser and device. To limit how many questions can be asked, we use a one-way code derived from your IP address that changes every day; the IP address itself is not stored, and these counters are set to expire after 48 hours and are then deleted automatically.

Answers are generated automatically from Eternus's help information and may be incomplete. They do not replace our support team, which you can contact at support@myeternusapp.com.

The website uses only what is needed to work. When you start using Ask Eternus, Google reCAPTCHA is loaded to check that requests are genuine; it may set a cookie and read information about your browser and device. The website loads fonts from Google Fonts.

We will update the date above and, for important changes, tell you in the app or by email.

This policy is available in English, Portuguese and Italian with the same content. The three versions are meant to say the same. If you find a difference, tell us at support@myeternusapp.com and we will correct it; until then, you can rely on the version that is clearer or more favourable to you.