The short version
- Your recordings, stories, photos, and the voices made from them belong to you, not to us.
- We never sell your data. No advertisers, no brokers, no exceptions.
- Your loved one trains nothing else. Their voice and words are used only to make their own remembrance, never to train our or anyone's AI models.
- Delete means delete. Remove a person or your account and the recordings, transcripts, and the synthesized voice are removed from our systems and from the voice provider within 30 days.
- Private by default. Only the people you explicitly invite can hear or add to a person.
What we collect
- Your account. Your email and the six-digit sign-in codes we use to verify it, and how you signed in (Apple, Google, or email).
- The material you choose to give. Voice recordings and interviews, uploaded audio and video, voicemails, photos, letters and messages, and the transcripts and memories built from them. This is the heart of a person, and you decide what to add.
- Your conversations with a person you have created.
- Consent records. The exact wording of each attestation you affirm when creating a person or adding material, kept as a durable log so we (and you) can show what was agreed and by whom.
- The basics to run the service. Membership and payment status (payments are handled by the App Store or our processor; we do not store your card number), plus device and usage diagnostics to keep things working.
We collect nothing about your loved ones from anywhere else. What you bring is all there is.
How we use it
To build and keep the remembrances you create, to let the family members you invite take part, to run and secure the service, and to answer you when you ask for help. We do not use your material or a person's voice to train our own models or to improve anything for anyone but you.
The AI services we share it with
Making a voice and a conversation possible means some of your material passes through trusted third-party processors. Each handles data only as needed to provide Neverending, under contract, and never for their own purposes:
- Deepgram transcribes your recordings into text.
- Anthropic and OpenAI power the conversation and help organize and understand memories.
- Cartesia (and, for a small number of legacy voices, ElevenLabs) creates the voice from your recordings. When you delete a person, we also ask the voice provider to delete that voice.
Where it is stored
Your account, memories, transcripts, and records live in our database (Supabase). Your media files (recordings, photos, video) are stored in encrypted object storage (Cloudflare R2). Access is restricted by security rules so that a person's material is reachable only by its owner and the people they have invited.
Who can see a person
A person is private by default. Only you, and the people you explicitly invite, can hear or add to them.
- There is no public gallery, no feed, and no way for a person to be discovered or go viral. Sharing is by private invitation only.
- When someone shares a person with you, it does not silently appear in your library. You get a gentle note and choose whether to accept, so no one is handed a grieving relative's remembrance unbidden.
- Your conversations are private to you and the circle you chose. No one at Neverending reviews them, except when you ask us for help or the law truly requires it.
How long we keep it, and deletion
We keep your material for as long as you keep your account and the people in it. You are always in control of removing it.
You can delete a single memory, a whole person, or your entire account, from inside the app or by writing to us. When you do, access stops right away, and within 30 days we remove the underlying media, transcripts, and memories, ask the voice provider (Cartesia or ElevenLabs) to delete the synthesized voice on their side, and cascade the deletion to anyone the person was shared with, so it disappears from their libraries too. This is true for the recordings and voice of someone who has passed, exactly as for a living person. Backups clear on their normal cycle shortly after.
One narrow exception: after a person is deleted we keep a small consent tombstone (who created the person, what was attested, and that it was deleted) for a bounded period, so we can answer a later dispute. The content itself (voice, recordings, memories) is gone; only this minimal record of consent remains.
Export
You can export what you have given us as a single archive: the person's details and consent records, the transcripts, and the raw media, for your own safekeeping. This is a personal backup, not a way to reuse a voice elsewhere.
Cookies
We use only the cookies and local storage needed to keep you signed in and to run the site. We do not use advertising or cross-site tracking cookies. (The final cookie inventory will be confirmed with counsel.)
Your rights
Wherever you live, you can reach us to exercise your privacy rights. Depending on your location, these include the right to access the data we hold about you, to correct or delete it, to export it, to object to or restrict certain processing, and to withdraw consent.
- If you are in the EU or UK (GDPR): we process your data to provide the service you asked for (contract), with your consent for the sensitive material you upload, and for our legitimate interest in running and securing Neverending. You may lodge a complaint with your local data protection authority.
- If you are in California (CCPA/CPRA) or a similar US state: you have the right to know, delete, correct, and opt out. We do not sell or share your personal information for advertising, so there is nothing to opt out of on that front, and we will never discriminate against you for exercising a right.
To exercise any of these, write to privacy@neverendingstories.app. We will verify your request and respond within the time the law allows.
Children
Neverending is an adults-only service for people 18 and older. We do not knowingly collect data from children, and there is no path to create a remembrance of a living child. If you believe a child has provided us data, write to us and we will remove it.
Security
We protect your material with encryption in transit and at rest, access controls, and least-privilege rules. No system is perfectly secure, but we treat this material as what it is: irreplaceable.
Changes, and how to reach us
If we change this policy we will post the new date here and, for meaningful changes, tell you in the app. Write to us any time at privacy@neverendingstories.app for privacy questions, or care@neverendingstories.app for anything else. A person will answer.