Privacy Policy

Who we are

Eterni is built by ETERNI DIGITAL S.R.L., a company registered in Romania (Trade Register J2026047042001, EUID ROONRC.J2026047042001, Tax ID 55324616), with its registered office at Șos. Chitilei 242D, Corp 3, Et. 2, Ap. 99, Sector 1, București, Romania. We are the data controller for the personal data described in this policy. You can reach us at hello@eterni.eu.

What Eterni does

Eterni lets you store a Legacy (encrypted messages, memories, and records) and set up one or more Beneficiaries who can ask for access to it. If you do not deny a request within your response window, access opens on the Beneficiary's own device. This policy explains what we collect to run that service, who we share it with, and what happens to your data over time.

What we collect

• Account data. Your email address, and the fact that you signed in with it, or with Sign in with Apple or Google where you choose to.
• Your Legacy content. The messages, memories, and records you add. This content is encrypted on your device before it ever reaches our servers. We store the encrypted bytes. We do not hold the key that unlocks them, and we cannot read what is inside.
• Beneficiary information. The contact details you give us for the people you invite as Beneficiaries, so we can reach them at the right time.
• Check-in timestamps. You can set a check-in schedule in the app. We store when you last checked in.
• Support correspondence. If you email us, we keep that conversation to help you and to have a record of what we agreed.
• Launch list. If you enter your address in the form on this website, we store that address, the date it arrived, and which page it came from. Nothing else: no name, no country, and not your IP address. It is kept apart from the app's database entirely, so being on the launch list does not give you an Eterni account and does not tell us anything about you beyond the address itself.

We do not run advertising trackers and we do not track your behaviour across apps or websites, in the app or on this site. The subscription and referral records described below are operational metrics we need to run your membership and to report affiliate conversions.

Why we process it, and on what basis

• Running your account and giving your Beneficiaries access to your Legacy when you do not deny their request: performance of our contract with you (GDPR Article 6(1)(b)).
• Keeping the service secure and working: our legitimate interest in operating Eterni reliably (Article 6(1)(f)).
• Bookkeeping and responding to legal requests: our legal obligations as a Romanian company (Article 6(1)(c)).
• Telling you when Eterni reaches the App Store: your consent, given by entering your address in the form (Article 6(1)(a)). You can withdraw it at any time, and withdrawing it does not affect anything we did before you did.

The zero-knowledge part, plainly stated

Your Legacy content is encrypted on your device, before it leaves your phone, with a key that is generated on the device and never sent to us. Your passphrase and your Recovery Key each lock a copy of that key, so either one can open your content and neither one is the key itself. We store the encrypted result. Eterni cannot read your content, and we cannot recover it for you if you lose both your passphrase and your Recovery Key, not even with a copy of our database. This is a real limit, not a marketing claim: if those two things are gone, so is the content.

Who we share data with

We use a small number of processors to run Eterni, all instructed to only use your data to provide the service to us:

• Supabase (database, authentication). Hosted in the EU, Frankfurt (eu-central-1).
• Resend (delivery of account emails: verification codes, access-request notices, and Beneficiary invitations). EU sending infrastructure.
• Cloudflare (DNS, content delivery, and encrypted blob storage). Cloudflare, Inc. is a US company. Where it processes EU personal data it does so under Standard Contractual Clauses, and we keep our storage bucket set to EU jurisdiction.
• RevenueCat (subscription management). RevenueCat, Inc. is a US company and processes subscription data on our behalf as our processor, under its published Data Processing Addendum (revenuecat.com/dpa), which RevenueCat incorporates by reference into its terms for its customers. For your subscription it receives your pseudonymous Eterni account identifier (a random UUID, not your email), your subscription status and purchase metadata (product, period type, start and expiry dates, trial and cancellation state, store environment), and the standard device and SDK technical data the RevenueCat SDK processes to deliver purchase receipts. Your encrypted Legacy content, your encryption keys, and your passphrase are never sent to RevenueCat.

If you sign in with Apple or Google, those companies process the sign-in itself as independent controllers, under their own privacy policies. Apple also independently processes your subscription payment as the seller of record for the App Store. Your card and payment details go to Apple, never to us or to RevenueCat. We see and store only the subscription state Apple reports about your purchase (for example that your membership is active and when it renews).

We do not sell your data, and we do not share it with anyone for advertising.

International transfers

Our processors either store your data in the EU or, where the company is based outside the EU (Cloudflare and RevenueCat), rely on the safeguards in their published processor terms, such as Standard Contractual Clauses, or on an equivalent safeguard recognised under GDPR Chapter V.

How long we keep it

• While your account is active, we keep your account data and encrypted Legacy content for as long as you use Eterni.
• If you delete your account in the app, we start a 7-day grace period, then permanently delete your wrapped keys and encrypted content. Deletion after that point is not reversible.
• If your subscription lapses and stays unpaid, your vault goes read-only, and you can still export your data for free. With no Beneficiary, we send notices on day 0, day 14, day 30, and day 53. On day 60 we permanently delete the encrypted content and keep only a minimal record that the account existed, for support and audit purposes. With a Beneficiary, the vault stays read-only and we never auto-purge it. A Beneficiary access window does not decide whether the vault is kept.
• The launch list exists for one message. We send it on the day Eterni reaches the App Store, and then we delete the whole list. Ask us sooner and we take your address off it the same week.

Your rights

Under GDPR, you can ask us to:

• give you a copy of your personal data (access),
• correct it if it is wrong (rectification),
• delete it, subject to the retention rules above (erasure),
• limit how we use it (restriction),
• give you your data in a portable format (portability),
• stop using it for a particular purpose (objection).

Write to hello@eterni.eu for any of these. If you think we have got it wrong, you can complain to Romania's data protection authority, ANSPDCP (www.dataprotection.ro), or the authority in your own EU country.

Data protection officer

We have not appointed a Data Protection Officer. Under GDPR Article 37, one is only mandatory for organisations whose core activity involves large-scale systematic monitoring or large-scale processing of special-category data. Eterni, at its current size, does neither. We will revisit this as the service grows.

Children

Eterni is built for adults planning what happens to their digital Legacy. It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If we change how we handle your data, we will update this page and, for anything material, tell you directly at the email address on your account.

Contact

ETERNI DIGITAL S.R.L. · hello@eterni.eu · Șos. Chitilei 242D, Corp 3, Et. 2, Ap. 99, Sector 1, București, Romania.