Privacy Policy

Information you provide

• Account information (name, email address, password)
• Senior profile information (name, birth year, personality traits, interests)
• Cognitive stage settings used to personalize conversation style
• Medication names and schedules (entered by family members or facility staff)
• Family relationship information and household context
• Companion preferences and settings (voice tone, topics, check-in schedules)
• Family moments, messages, and shared updates

Information generated by the Service

• Conversation transcripts between the senior and the AI companion
• AI-generated conversation summaries and wellness observations
• Cognitive and engagement pattern analysis
• Memory notes (facts and context learned during conversations for continuity)
• Call duration, frequency, and engagement metrics

Technical information

• Device type, operating system, and browser information
• IP address and general location (country/region level)
• Usage patterns and feature interactions

We use the information we collect to:

• Provide, operate, and personalize the companion experience
• Generate conversation summaries and wellness observations for family members
• Deliver medication and check-in reminders at scheduled times
• Improve the quality and relevance of AI-generated conversations
• Detect conversational patterns that may indicate changes in engagement or wellbeing
• Communicate with you about your account, billing, and Service updates
• Ensure the security and integrity of the Service and prevent abuse

We do NOT:

• Sell personal information to third parties
• Use health-related or wellness data for advertising or marketing purposes
• Share individual user data with insurance companies, employers, or government agencies (unless required by law)
• Use personal data for purposes unrelated to providing and improving the Service

Within the family circle: Family members linked to a senior's account can view conversation summaries, wellness observations, engagement data, and shared family moments. Access is limited to accounts you explicitly authorize.

Service providers: We use third-party cloud infrastructure and service providers to operate the Service, including Supabase (database and authentication), Vercel (hosting), OpenAI (AI language models), ElevenLabs (voice synthesis), and Vapi (voice communication). These providers process data on our behalf under their respective privacy policies and data processing agreements.

AI model providers: Conversation content is sent to AI language model providers (currently OpenAI) and voice synthesis providers (ElevenLabs) to generate companion responses. These providers process conversation data to generate responses but do not retain it beyond their stated retention policies. We do not authorize these providers to use your data for model training.

Facility accounts: For seniors enrolled through a care facility, authorized facility staff may view engagement summaries, check-in status, and follow-up suggestions. Facility staff do not have access to full conversation transcripts.

Legal requirements: We may disclose information if required by law, regulation, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the safety of any person or to prevent illegal activity.

We implement technical and organizational measures to protect your data, including:

• Encryption of all data in transit (TLS/HTTPS) and at rest
• Row-level security policies ensuring users can only access data they are authorized to view
• Access to production systems restricted to authorized personnel on a need-to-know basis
• Authentication handled through industry-standard protocols (Supabase Auth with secure password hashing)
• Webhook and API communications verified with cryptographic signatures
• Regular review of security practices and access controls

No method of data transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

• Active accounts: Data is retained as long as your account is active and the subscription is current.
• Conversation data: Conversation transcripts and generated summaries are retained for the duration of the subscription to enable continuity and family access.
• Account deletion: After account deletion or a deletion request, all personally identifiable data is permanently removed within 30 days.
• Anonymized data: Aggregated, anonymized data that cannot be linked to any individual may be retained indefinitely for service improvement and research purposes.

You have the following rights regarding your personal information:

• Access: You can request a copy of all personal data we hold about you by emailing support@everandnear.com.
• Deletion: You can request deletion of your account and all associated data at any time.
• Correction: You can update your information through the app settings or by contacting us.
• Portability: You can request your data in a standard, machine-readable format.
• Opt-out: You can disable specific features (such as wellness summaries or engagement tracking) through your notification and privacy settings.

To exercise any of these rights, email us at support@everandnear.com. We will respond to all requests within 30 days.

EverAndNear is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

Family accounts must be created by adults aged 18 or older. The senior using the companion service must also be an adult. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

We do not create, receive, maintain, or transmit protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

However, we take the security of all user data seriously and implement security measures that align with industry best practices, including encryption, access controls, and regular security reviews.

Medication names and schedules entered into EverAndNear are used solely for conversational reminder purposes. This information is not a medical record and should not be relied upon as a substitute for professional pharmacy or medical record-keeping systems.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale: We do not sell personal information. There is nothing to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, email us at support@everandnear.com with the subject line "CCPA Request."

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email at the address associated with your account before the changes take effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. Previous versions of this policy are available upon request.

If you have questions about this Privacy Policy or our data practices, please contact us:

EverAndNear Inc.
Privacy inquiries: support@everandnear.com

See also: Terms of Service · Safety & AI Disclosure