Privacy Policy

Who we are

Eterni is built by ETERNI DIGITAL S.R.L., a company registered in Romania (Trade Register J2026047042001, EUID ROONRC.J2026047042001, Tax ID 55324616), with its registered office at Șos. Chitilei 242D, Corp 3, Et. 2, Ap. 99, Sector 1, București, Romania. We are the data controller for the personal data described in this policy. You can reach us at hello@eterni.eu.

What Eterni does

Eterni lets you store a Legacy (encrypted messages, memories, and records) and set up one or more Beneficiaries who receive it after you die, through a release ceremony. This policy explains what we collect to run that service, who we share it with, and what happens to your data over time.

What we collect

• Account data. Your email address, and the fact that you signed in with it, or with Sign in with Apple or Google where you choose to.
• Your Legacy content. The messages, memories, and records you add. This content is encrypted on your device before it ever reaches our servers. We store the encrypted bytes. We do not hold the key that unlocks them, and we cannot read what is inside.
• Beneficiary information. The contact details you give us for the people you invite as Beneficiaries, so we can reach them at the right time.
• Check-in timestamps. Eterni asks you to check in periodically so it knows you are still with us. We store when you last checked in.
• Support correspondence. If you email us, we keep that conversation to help you and to have a record of what we agreed.

We do not run analytics or advertising trackers, in the app or on this website.

Why we process it, and on what basis

• Running your account and delivering your Legacy to your Beneficiaries: performance of our contract with you (GDPR Article 6(1)(b)).
• Keeping the service secure and working: our legitimate interest in operating Eterni reliably (Article 6(1)(f)).
• Bookkeeping and responding to legal requests: our legal obligations as a Romanian company (Article 6(1)(c)).

The zero-knowledge part, plainly stated

Your Legacy content is encrypted on your device, before it leaves your phone, with a key that is generated on the device and never sent to us. Your passphrase and your Legacy Key each lock a copy of that key, so either one can open your content and neither one is the key itself. We store the encrypted result. Eterni cannot read your content, and we cannot recover it for you if you lose both your passphrase and your Legacy Key, not even with a copy of our database. This is a real limit, not a marketing claim: if those two things are gone, so is the content.

Who we share data with

We use a small number of processors to run Eterni, all instructed to only use your data to provide the service to us:

• Supabase (database, authentication). Hosted in the EU, Frankfurt (eu-central-1).
• Resend (delivery of account emails: verification codes, check-in reminders, Beneficiary invitations). EU sending infrastructure.
• Cloudflare (DNS, content delivery, and encrypted blob storage). Cloudflare, Inc. is a US company. Where it processes EU personal data it does so under Standard Contractual Clauses, and we keep our storage bucket set to EU jurisdiction.

If you sign in with Apple or Google, those companies process the sign-in itself as independent controllers, under their own privacy policies. Apple also independently processes your subscription payment as the seller of record for the App Store. We do not see or store your payment details.

We do not sell your data, and we do not share it with anyone for advertising.

International transfers

Our processors either store your data in the EU or, where the company is based outside the EU (Cloudflare), rely on Standard Contractual Clauses or an equivalent safeguard recognised under GDPR Chapter V.

How long we keep it

• While your account is active, we keep your account data and encrypted Legacy content for as long as you use Eterni.
• If you delete your account in the app, we start a 7-day grace period, then permanently delete your wrapped keys and encrypted content. Deletion after that point is not reversible.
• If your subscription lapses and stays unpaid, your vault becomes read-only from day one, and you can still export your data for free. We send reminders at 30, 60, and 90 days, and a final warning at day 113. On day 120, if nothing has changed, we permanently delete the encrypted content and keep only a minimal record that the account existed, for support and audit purposes. This clock pauses automatically if there is an open Beneficiary claim or a death report on your account. We do not delete anything while that is being worked out.

Your rights

Under GDPR, you can ask us to:

• give you a copy of your personal data (access),
• correct it if it is wrong (rectification),
• delete it, subject to the retention rules above (erasure),
• limit how we use it (restriction),
• give you your data in a portable format (portability),
• stop using it for a particular purpose (objection).

Write to hello@eterni.eu for any of these. If you think we have got it wrong, you can complain to Romania's data protection authority, ANSPDCP (www.dataprotection.ro), or the authority in your own EU country.

Data protection officer

We have not appointed a Data Protection Officer. Under GDPR Article 37, one is only mandatory for organisations whose core activity involves large-scale systematic monitoring or large-scale processing of special-category data. Eterni, at its current size, does neither. We will revisit this as the service grows.

Children

Eterni is built for adults planning what happens to their digital Legacy. It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If we change how we handle your data, we will update this page and, for anything material, tell you directly at the email address on your account.

Contact

ETERNI DIGITAL S.R.L. · hello@eterni.eu · Șos. Chitilei 242D, Corp 3, Et. 2, Ap. 99, Sector 1, București, Romania.