Legal

Privacy Policy

Last updated September 21, 2026

Last Updated: 21 September 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES FOR COLLECTING, PROCESSING, STORING, USING, AND DISCLOSING YOUR DATA. BY ACCESSING OR USING ANY PORTION OF THE PLATFORM, THE INDIVIDUAL ACCESSING OR USING THE PLATFORM (“USER”, “YOU”, “YOUR”) ACKNOWLEDGES THAT THEY HAVE READ THIS POLICY, UNDERSTAND IT, AND PROVIDE EXPRESS CONSENT TO THE POLICIES AND PRACTICES STATED HEREIN EFFECTIVE THE DATE YOU FIRST USED THE PLATFORM.IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, YOUR ONLY CHOICE IS TO NOT USE THE PLATFORM, LEAVE IMMEDIATELY, AND STOP INTERACTING WITH US. PLEASE KEEP A COPY OF THIS POLICY FOR YOUR RECORDS.

01 INTRODUCTION

Aeternum Corp. (“Company”, “we”, “us”, “our”, “Aeternum”) is a company from Alberta, Canada that offers a private digital space to connect families, share cherished memories, and deliver loving messages, even after our passing. We provide the website and platform found at aeternumproject.com and as found on the Apple App Store and Google Play Store (the “Platform”). This Privacy Policy interacts with and User additionally agrees to our Terms of Service and User License Agreement. Please review those documents together with this Privacy Policy.

By accessing or using the Platform or in any other interactions with Aeternum you state that you clearly and irrevocably understand, accept, and consent to the practices described in this Privacy Policy. For greater clarity, User acknowledges and agrees that any of the following actions shall clearly evidence, constitute, and denote User’s express consent and agreement to this Privacy Policy, and any applicable agreement listed above, including when User interacts with any interactive function of the Platform, User enters into a written agreement with Aeternum, User submits any data to Aeternum or the Platform, User submits any user submission to the Platform, User publishes any user content on the Platform, User interacts with any other user on the Platform, or User engages in continued use of the Platform.

This Privacy Policy may change from time to time. Your continued use of the Platform after we make changes denotes your acceptance and consent to those changes. It is your responsibility to check this Privacy Policy periodically for updates.

By using or accessing the Platform, User expressly agrees and provides consent to Aeternum to send, distribute, or otherwise transmit to you any commercial electronic message or other communications or notifications, including for commercial and other promotional purposes; and you agree to be added to our mail list until and when you provide us written notice that you wish to unsubscribe in accordance with the notice provision at the end of this Privacy Policy.

04 AGE RESTRICTIONS

Use of and access to the Platform is not intended for individuals under 18 years of age. No one under 18 may provide any information to the Platform. We do not knowingly collect information from individuals under 18. If you are under 18, do not register for the Platform, submit any information to the Platform, use any of the interactive functions of the Platform, or submit any user submission or user content to the Platform. If you believe the information is submitted to the Platform by someone that is under 18, or that we might have information about individuals under 18 that is not provided with express consent by an authorized parents or guardian of the individual, please contact us. Any User that provides information to the Platform on behalf of an individual under the age of 18 is responsible for such information and such User acknowledges that they provide consent on behalf of such individual under the age of 18.

05 GEOGRAPHIC RESTRICTIONS

The Platform is offered only for access and use in the United States of America and limited areas of Canada. The Platform is not intended for use in any jurisdiction where its use is not permitted, including in Quebec, Europe, or United Kingdom. Such users must leave the Platform immediately. Aeternum does not have sufficient capabilities to determine where a user is located, including to block a user based on its geographic location, prevent a user’s access to the Platform or certain features or functionality of the Platform, manage a user’s interactions with other users of the Platform, or prevent a user from completing a transaction on the Platform. If you access the Platform from outside the permitted regions, you do so at your own risk and you are responsible for compliance with local laws and regulations of your jurisdiction. You must immediately stop using the Platform if your use of it, as it is offered by Aeternum, is prohibited under your local laws or regulations and in no way shall Aeternum be responsible or liable for your unauthorized or unlawful use of the Platform. Data may be transferred across regions and User expressly authorizes such data transfer in accordance with this Policy.

06 INFORMATION WE COLLECT ABOUT YOU

We collect and use several types of information from and about you (“data”), including: personal information, that we can reasonably use to directly or indirectly identify you, including demographic and psychographic information, your name, age, gender, location, mailing address, e-mail address, telephone number, IP address, username, billing and account information, or any other identifier we may use to contact you, or any personal information contained in any user submissions or user content uploaded to or submitted to the Platform by User;non-personal information, that does not directly or indirectly reveal your identity or directly relate to an identifiable individual, such as statistical or aggregated data; technical information, including your login information, browser type and version, device and device settings, time zone setting, browser plug-in types and versions, operating system and platform, advertising identifiers and trackers, and information about your internet connection, hardware, software, and your usage and interactions with the Platform; non-personal details about your Platform interactions, including URLs, clickstream to, through, and from our Platform (including date and time), products or services you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs); and usage information, including as pertaining to User’s submission of user submissions, posting of user content, User’s interactions with content, features, functionality, products, services, and other users on the Platform, and User’s back-end information and settings as set by User.

07 HOW WE COLLECT DATA

We use different methods to collect your information, including through: direct interactions with you when you provide it to us, for example, by submitting or publishing a user submission or user content, through interactive functions on the Platform, or when corresponding with us by phone, email, social media, mail, or otherwise;automated technologies or interactions, for example, information may be collected automatically as you use the Platform, including through cookies; third party software, including the use of third party plugins, applications, or APIs that enhance the Platform which may collect information on you; and third party tracking technologies, which may include usage details, demographic or psychographic information, IP addresses, advertising data, tracking information, identifiers, and information collected through cookies and other tracking technologies.

08 DATA YOU PROVIDE TO US

The information we collect directly from you on or through the Platform or through other means may include:

Information that you provide in a user submission or user content, including by interacting with interactive functions on the Platform.
Technical information embedded in the files you upload by the device or software that created them, including the date and time of capture, the make and model of the capturing device, the name of an author or editor, and the geographic coordinates of the place of capture. Where a file contains coordinates, we resolve them into a civic or postal address and store that address alongside the file. The place of capture recorded in a photograph or video is frequently a private residence.
Information provided to us during the registration process, subscribing to our services or products, or mailing list, or as uploaded to your user profile.
Information and copies of your correspondence and details if you contact us.
Details of transactions you carry out through our Platform and of the fulfillment of your orders.
Interactions with other users on the Platform.
Contract details if you enter into a contract with us.
Your search queries on the Platform and through usage of the Platform.

09 DATA WE COLLECT THROUGH AUTOMATIC MEANS

As you navigate through and interact with our Platform, we may use cookies or other automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns.

This may include details of your visits to our Platform, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Platform; usage information about your use of the Platform; and information about your device and internet connection, including your device make and model, IP address, operating system, and browser type.

We may also use these technologies to collect information about your online activities over time and across third-party websites or other online services.

The information we collect through automatic means allows us to improve our Platform and to deliver a better and more personalized service, including by enabling us to estimate our audience size and usage patterns; store information about your preferences; customize our Platform according to your interests; speed up your searches and load times; personalize your user experience; recognize you when you return to our Platform and allow you to pick up where you left off; and save your payment preferences and information to make future orders easier.

The technologies we use for automatic data collection may include Cookies (small files placed on the hard drive of your device or your internet browser), Flash Cookies (that collect and store information about your preferences and navigation to, from, and on our Platform), and Beacons/Pixels (small electronic files that permit us to monitor usage and gather aggregate statistics). We do not use any of these technologies for advertising, and we do not sell or share the data they produce.

10 THIRD PARTIES ON THE PLATFORM

Certain services on the Platform including content, functions, features, links, plugins, or APIs may be operated or provided by third parties. They may collect and use your data when you use the Platform. The Platform may also include outbound links to third-party sites and pages off the Platform. These third parties have their own privacy and data policies and practices, and we do not accept any responsibility or liability for such policies and practices.

This list covers the whole Platform, not only the forms on our website. It includes the systems that host and store your content, take your payments, deliver your email and notifications, monitor for faults, measure product usage, handle your support requests, and power our AI features Memoria and Aela.

Two things to understand about how this list is maintained:

A provider remains listed for as long as it may still hold your data, not only for as long as we actively send it more. When we stop using a service, the data already transferred to it remains in that provider’s hands until it is deleted under their own retention terms. Removing the name on the day we stop using it would misrepresent where your data actually is, so retired providers are listed in §10.9 rather than deleted from this policy.
This list describes categories as well as named vendors. Where a type of provider is structurally part of how the Platform works, we tell you what it receives and name who we currently use, so that a routine change of vendor within a category does not leave you relying on a document that has silently gone stale. Where we name alternatives, treat them as disclosed even if a given feature is not yet enabled for you.

We do not sell your data. We do not use any provider below for advertising, ad targeting, or profiling, and none of them is permitted to use your content for their own purposes.

10.1 Hosting, storage and infrastructure

Amazon Web Services (AWS) operates all of our infrastructure and is therefore able, in principle, to access everything you store with us. This covers compute, our databases, object storage for your photos, videos, audio and documents, our content delivery network, message queues, logging and DNS. Your data is held in AWS regions in Canada and the United States — see §12.

10.2 Payments

Stripe processes all subscription payments. When you subscribe, your name, email address, billing address and payment card details are collected and processed by Stripe. We never receive or store your full card number. We retain only Stripe’s customer and subscription identifiers and the status of your plan.

10.3 Email and messaging

Amazon SES sends transactional email — account, security, billing and notification messages. Delivery metadata, including your email address and whether a message was delivered, opened or bounced, is processed by AWS.
Brevo holds our marketing and newsletter contact list and sends those messages. You are added to it only if you ask to be, and every message carries an unsubscribe link. Brevo also receives aggregate reporting on whether marketing email was delivered and opened.
Google Workspace hosts our own company email, so if you write to us directly your message and your address are processed by Google.

10.4 Notifications and push delivery

Notifications may include a short preview of whatever caused them, such as a person’s name or the opening words of a comment. To reach your device, that preview necessarily passes through the push infrastructure of your device or browser vendor:

Amazon SNS, which relays our notifications onward to:
Apple Push Notification service for iOS and macOS devices;
Google Firebase Cloud Messaging for Android devices;
the push service of your browser vendor for web notifications, which may be operated by Google, Mozilla, Microsoft or Apple depending on which browser you use.

Turning notifications off in your settings, or in your device’s own permissions, stops this entirely.

10.5 Mobile applications

Apple App Store and Google Play distribute our mobile apps and handle their own account, download and, where applicable, in-app purchase data under their own policies.
Expo provides our mobile build and over-the-air update infrastructure. When your app checks for an update it transmits technical information such as the app version, the platform, and a device or installation identifier.

10.6 Memoria and Aela — our AI features

This part of the Platform works differently from the rest, so we would rather be precise than reassuring.

What stays with us. The search index that lets Memoria find the right memories is built by a model running on our own infrastructure. Your memories are not sent anywhere in order to be indexed or searched. Similarly, working out who you meant when you mention someone by name or nickname happens entirely inside our own systems: our AI service never receives your list of connections, your relationships, or the nicknames you use for people.

What leaves us. To write an answer or draft a story, the following is sent to a third-party AI provider over an encrypted connection: your question or dictated text, together with excerpts of the memories relevant to it. Those excerpts are real content — the words you or your connections wrote.

The providers we currently use for this are Anthropic and Google. We may add or change AI providers as the technology changes.

The terms we hold them to. We use these providers under commercial agreements which do not permit your content to be used to train their models, and which limit how long they may retain it. They act only on our instruction, for the single purpose of producing the response you asked for.

If you would rather not. Memoria and Aela are optional. Choosing not to use them means no part of your content is sent to any AI provider.

10.7 Analytics, monitoring and diagnostics

Google Analytics 4 measures how the Platform is used. It is sent from our own servers rather than from tracking scripts in your browser, and it includes a persistent identifier tied to your account, so that usage can be understood across sessions and devices. We use it to understand and improve the product, never for advertising.
Sentry records errors and performance problems. A report contains technical detail about the fault, the request that caused it, and identifiers for the account and session involved. Personal data can appear incidentally in a report where it formed part of whatever the system was handling when the fault occurred.
Google Search Console and Bing Webmaster Tools report on how our public pages appear in search results. They receive aggregate search data only, and have no access to your account or your content.

10.8 Support and feedback

Atlassian (Jira) receives the feedback and support requests you submit through the Platform. A submission creates a ticket in our issue tracker containing your message, an identifier for your account, technical context about your session, and any file or screenshot you chose to attach.

10.9 Providers we have retired, which may still hold data

Our previous website was built on WordPress and carried a number of analytics, advertising and form-handling services. That website has been replaced. The site you are reading now carries no advertising or social pixels and no tracking cookies, and every page but one loads no third-party scripts at all — the exception is our tester application page, described in §10.12.

Data those services collected before the change, however, remains with them under their own retention terms, and is not within our power to erase retrospectively. We therefore continue to disclose them rather than quietly drop them from this list: WordPress, Google Tag Manager, Google Site Kit, Google Ads, Meta (Facebook) Pixel, LinkedIn Pixel, JotForm, Contact Form 7, WPForms, and Vercel.

If you want to know whether any of them holds data relating to you, or you want it erased, write to us at info@aeternumproject.com and we will tell you what we know and help you make the request. Each of those providers also has its own privacy policy and its own process for access and deletion.

If you choose to sign in using a third-party account, that provider — currently Google, and potentially Apple on our mobile apps — will tell us your name and email address, and will know that you use Aeternum. Signing in with an email address and password instead avoids this entirely.

10.11 Links off the Platform

The Platform may link to third-party websites and pages that we do not operate. Those sites have their own privacy practices, and we accept no responsibility or liability for them.

10.12 Our public website

Our marketing website serves its own fonts and runs no analytics, so browsing it involves no third party at all. One page is different, and we would rather name it than describe the site in general terms that are not quite true.

Our tester application page, used to recruit a small number of people to try our mobile app before general release, loads two things from outside our own infrastructure:

Cloudflare Turnstile checks that the person submitting the form is not an automated script. To do that, Cloudflare receives your IP address, your browser’s user-agent string, and signals about how the page behaved in your browser. It is a privacy-preserving alternative to a conventional captcha: it does not ask you to identify photographs, it is not used to build an advertising profile, and Cloudflare states that it does not use the data for cross-site tracking. It runs only on that one page, and only when the form is submitted or displayed.
YouTube, to show an embedded video introducing Aeternum. We use YouTube’s youtube-nocookie.com privacy-enhanced host, which does not set advertising or tracking cookies when the page loads. Once you play the video, YouTube receives your IP address and playback information under Google’s own privacy policy. Not playing it avoids that.

Applying to be a tester also sends your name, email address, device type and referral answer to Amazon SES so that we can email you a confirmation and notify our support team, and — only if you tick the optional box — adds your address to our Brevo marketing list (§10.3).

11 HOW WE USE YOUR DATA

We use information that we collect on users or that is provided to us in order to:

Offer our Platform and its content and functionality to our users; provide users information and fulfill their requests; add users to our mailing list and send marketing communications; and provide users with notices about their account.
Carry out our obligations and enforce our rights arising from any contracts with a user, including for billing and collection purposes or to comply with legal requirements.
Verify the accuracy or appropriateness of any user submission or user content; monitor our Platform and enforce our standards; notify users about changes to our Platform or any products or services we provide.
Allow users to register for the Platform; participate in interactive functions; publish user content or submit user submissions; manage our relationship with users; and contact users about Aeternum goods and services that may be of interest to them.
Collect and measure data used to make the Platform and Aeternum and our products and services more effective; create recommendations, legacy summaries, and emotional analyses; or in any other way we may describe when a user provides the information or for any other purpose with their consent.

12 DISCLOSURE OF YOUR DATA

We may disclose your information that we collect or you provide:

Directly on the Platform when you submit a user submission or user content or interact with an interactive function of the Platform; to other users of the Platform for the purposes of facilitating the Platform’s digital inheritance functionality; or to third parties authorized to receive such information by User.
Together with any user content you choose to share, the technical information embedded in that content and any address derived from it, to each user, circle, or other recipient you share it with, and to a digital inheritor on a digital inheritance. Sharing user content is a deliberate act and discloses that information to every such recipient.
To our subsidiaries, assigns, and affiliates; to contractors, service providers, and other third parties we use to support our business or deliver our products and services.
To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law; to enforce our Terms of Service and User License Agreement including for compliance and billing and collection purposes; or if we believe disclosure is necessary to protect the rights, property, or safety of Aeternum, our customers, other users, or the public.

13 STORAGE OF YOUR DATA

We currently use Amazon Web Services to host our servers and data, which stores your information in the USA and Canada. In instances where your data is held outside of Canada, different privacy laws may apply that may not be as comprehensive as Canadian standards. In these circumstances, the governments, courts, law enforcement, regulatory agencies, and other third parties in that country may be able to obtain access to your data through the laws of the foreign country.

14 CHOICES ABOUT YOUR DATA

You can control the collection and use of your data including with:

Browser and device choices, including by setting your browser to refuse cookies.
Opting out of marketing communications, by providing us written notice in accordance with the notice provision at the end of this Privacy Policy.
Choices about information embedded in your files, including by removing that information from a file before you upload it, or by choosing not to share a file whose embedded information you do not wish disclosed to others.
By opting out of any feature, you may be unable to access or use some or all of the Platform.
To withdraw your consent to the practices stated in this Privacy Policy, please provide us notice in accordance with the notice provision at the end of this Privacy Policy.

15 DATA SECURITY

We use physical, electronic, and administrative measures to help secure your data from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your data also depends on you. You are responsible for your profile on the Platform and for keeping your login and password confidential. The transmission of data via the internet is not completely secure and we cannot guarantee the security of your data on the Platform. Any transmission of data is at your own risk.

16 DATA RETENTION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize your data so that it can no longer be associated with you. We reserve the right to use and retain such anonymous data indefinitely for any legitimate business purpose without further notice to you.

17 ACCESSING AND CORRECTING YOUR DATA

It is important that the data we hold about you is accurate and current. Please keep us informed if your data changes. By law you have the right to request access to it and to correct the data that we hold about you. By withdrawing your consent, you will not be able to access and use the Platform or our products or services. If you want to otherwise review, verify, correct, or withdraw consent to the use of your data, you may send us written notice in accordance with the notice provision at the end of this Privacy Policy. We may not accommodate a request to change data if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may request specific information from you to help us confirm your identity and your right to access the data, and to provide you with the data that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all the data that we hold about you, or we may have destroyed, erased, or made your data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your data, we will inform you, subject to any legal or regulatory restrictions.

18 CHANGES TO OUR PRIVACY POLICY

It is our policy at Aeternum to post any changes we make to our Privacy Policy on this page. We include the date the Privacy Policy was last modified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Platform and this Privacy Policy to check for any changes.

19 HYPERLINKS

Any hyperlink in this Privacy Policy is provided for convenience only and is subject to change from time to time as the server, data, or destination changes, or as posts or pages are taken down or moved. You understand that a wrong or missing hyperlink shall not affect the interpretation of this Privacy Policy.

20 NOTICES

All notices and communications to Aeternum shall be delivered in writing via email to:

Aeternum Corp. Attention: Privacy Officer legal@aeternumproject.com

All notices and communications to User shall be delivered to User by email to the email address User used to contact Aeternum and/or the email address we have on file for User.

We welcome your questions, comments, complaints, and requests regarding this Privacy Policy and our privacy and digital practices.

If submitting a notice, complaint, or request to withdraw consent or remove your account, content, data, or information from the Platform, please particularize and substantiate all information and evidence Aeternum needs to comply with such notice, complaint, or request, including to comply with all relevant rules, regulations, and this Privacy Policy, within TEN (10) days of the circumstances of such notice, complaint, or request was made known to User.