Privacy policy

We collect three kinds of information:

• Account information. Your name, email address, password (stored only in hashed form), time zone, and notification preferences — what we need to run your account and reach you about it.
• Workspace content. The information your family chooses to put in its workspace: tasks, calendar events, updates and comments, documents, contacts, expenses, and profile details about the person your family supports. You and your workspace decide what this includes — we never require any particular detail.
• Usage information. Technical logs such as sign-in events, IP address, browser type, and which features are used. We use this to keep accounts secure, diagnose problems, and understand which parts of the product help families most.

Some commitments are easier to state as absolutes. We do not, and will not:

• sell personal information — not yours, and not the information your family keeps about the person it supports;
• show advertising in the product or share information with advertising networks;
• scan your family’s workspace content for marketing — the tasks, updates, and documents your family shares are used to provide the service to your workspace, and for nothing else.

If any of these commitments were ever to change, we would tell you clearly and in advance — not bury it in an update.

We use the information described above to:

• provide the service — sync your workspace, deliver notifications, and keep everyone’s view up to date;
• keep accounts and workspaces secure, including detecting suspicious sign-ins;
• process subscription payments and send billing receipts;
• respond when you contact support, using only what we need to help;
• improve the product, using aggregated usage patterns rather than the content of any family’s workspace;
• meet our legal obligations.

Where laws such as the GDPR apply, we rely on the following legal bases:

• Performance of a contract — providing the service you signed up for, including hosting your workspace content and processing payments.
• Legitimate interests — keeping the service secure, preventing abuse, and improving the product, always balanced against your rights.
• Consent — for optional things such as product analytics cookies (see the Cookie policy) and product news emails. You can withdraw consent at any time.
• Legal obligation — keeping records we are required to keep, such as invoices for tax purposes.

We share personal information only with service providers who help us run EverElder, under contracts that restrict how they may use it:

• Hosting and storage providers — the cloud infrastructure where the service and your workspace content run.
• Payment processing — subscription payments are handled by Stripe. Your full card details go directly to Stripe; we never see or store them.
• Email delivery providers — to send the notifications and account emails you have chosen to receive.

Beyond service providers, we disclose information only if the law requires it, to protect the safety of a person, or as part of a corporate transaction such as a merger — in which case this policy would continue to apply and we would notify you. We do not share information with data brokers or advertisers.

We keep information only as long as it is needed:

• Workspace content — for as long as the workspace exists. After a subscription ends, the workspace enters the export window described in the Subscription policy (60 days), after which its content is scheduled for deletion.
• Account information — for as long as your account exists, then deleted within 30 days of account deletion, except where the law requires longer retention.
• Usage logs — typically 12 months, with security-relevant logs kept up to 24 months.
• Billing records — for the period required by tax and accounting law.

Deleted content may persist briefly in encrypted backups until those backups rotate out on a fixed schedule.

Depending on where you live, you may have some or all of the following rights. We honor the spirit of them for everyone, wherever the law allows:

• Access — ask what personal information we hold about you.
• Export — receive a copy of your information in a portable format. Workspace owners can export workspace data from Settings.
• Correction — fix inaccurate information, either directly in the product or by asking us.
• Deletion — delete your account, or ask us to delete personal information we hold about you.
• Objection and restriction — object to or restrict certain processing, and withdraw consent where processing is based on it.

To exercise any of these rights, email privacy@everelder.org. We respond within 30 days. You also have the right to complain to your local data-protection authority.

It helps to understand a distinction EverElder is built around:

• Your account data is yours. You control your name, email, password, and preferences, and you can delete your account at any time.
• Workspace data is controlled by the workspace owner. Content you add to a workspace — a task, an update, a document — becomes part of that family’s shared record. The owner and administrators manage who can see it, and it remains in the workspace even if you later leave, much like a note you contributed to a shared family binder.

If you have concerns about information held in a workspace you belong to, start with its owner. If that is not possible or appropriate, contact us and we will help find the right path.

EverElder is not directed at children, and we do not knowingly collect personal information from anyone under 16. Accounts may only be created by adults (18+, per our Terms of service). If you believe a child has provided us personal information, contact privacy@everelder.org and we will delete it.

Our service providers may process information in countries other than your own. Where information moves across borders from a region that restricts such transfers, we rely on [Transfer mechanism — pending configuration] (for example, standard contractual clauses) to protect it. The locations of our primary hosting regions are listed at [Hosting regions — pending configuration].

We protect information with encryption in transit and at rest, role-based access controls inside each workspace, hashed passwords, and audit logging of sensitive operations. Access to production systems is limited to the small number of people who operate the service and is itself logged. Our Security overview describes our practices in more depth. No system is perfectly secure, so if we ever learn of a breach affecting your information, we will notify you and the relevant authorities as the law requires.

When we change this policy, we will update the date at the top. For material changes we will email workspace owners and show a notice in the product at least 30 days before the change takes effect. Earlier versions are available on request.

Privacy questions and requests: privacy@everelder.org. General support: support@everelder.org.

[Data controller — pending configuration]
[Registered address — pending configuration]