EVERVOICE PRIVACY POLICY
Effective Date: February 2, 2026 • Last Updated: February 2, 2026

Our Promise: Your stories are sacred. We will never sell your personal data, voice recordings,
or memories. Your legacy belongs to you and those you choose to share it with—not
advertisers, data brokers, or anyone else. Trust is the foundation of everything we do.

1. Introduction
   Evervoice, Inc. ("Evervoice," "we," "us," or "our") provides a digital legacy and memory
   preservation platform that enables individuals to capture, preserve, and share their life stories,
   wisdom, and memories with family and future generations. Our Services include voice-based
   storytelling, AI-powered story refinement, family sharing features, and interactive legacy
   experiences.
   This Privacy Policy describes how we collect, use, disclose, and protect your
   information—including your voice recordings, life stories, and biometric data—when you use our
   consumer applications, family sharing features, and memory care facility programs (collectively,
   the "Services").
   We recognize that the information you share with Evervoice is deeply personal. Many of our
   users are seniors preserving their legacy, families honoring loved ones, or memory care
   residents capturing precious memories. We treat this responsibility with the utmost care.

2. Definitions
   "Legacy Creator" means the individual whose life stories, voice, and memories are being
   captured and preserved through our Services.
   "Legacy Content" means all voice recordings, written stories, photographs, documents, and
   other content created by or about a Legacy Creator through our Services.
   "Legacy Beneficiary" means any individual designated by a Legacy Creator to access, interact
   with, or inherit their Legacy Content, including family members and loved ones.
   "Legacy Custodian" means the individual designated to manage a Legacy Creator's account
   and content after they become incapacitated or pass away.
   "Voice Data" means audio recordings of speech captured through our Services, including voice
   samples used to create your personalized voice profile and story recordings.
   "Voiceprint" means biometric data derived from Voice Data that captures the unique
   characteristics of an individual's voice, including tone, cadence, and acoustic features, used to
   create authentic-sounding AI interactions.
   "Interactive Legacy" means the AI-powered feature that enables Legacy Beneficiaries to have
   conversational interactions with a Legacy Creator's preserved stories and wisdom.

"Care Facility Partner" means memory care facilities, assisted living communities, nursing
homes, and similar organizations that offer Evervoice to their residents.
3. Information We Collect
3.1 Information Provided by Legacy Creators
Account Information
• Name, email address, phone number, and date of birth
• Profile photograph (optional)
• Payment and subscription information (processed by secure third-party providers)
• Legacy Beneficiary and Legacy Custodian designations
Voice Data and Recordings
• Voice samples used to create your personalized voice profile
• Story recordings and conversational responses to guided prompts
• Voice notes and audio messages
Life Stories and Memories
• Personal narratives, anecdotes, and life lessons shared through voice or text
• Responses to story prompts about family, career, values, and experiences
• Photographs, documents, and other materials you upload
• Wisdom, advice, and messages for future generations
3.2 Information About Legacy Beneficiaries
• Names and relationships to the Legacy Creator
• Email addresses for sharing invitations
• Account information if they create their own Evervoice account
• Interaction history with Legacy Content (e.g., stories viewed, questions asked)
3.3 Information from Care Facility Programs
When Evervoice is offered through a Care Facility Partner, we may receive:
• Resident name and basic contact information
• Family member contact information (with appropriate consent)
• Caregiver observations about session engagement (no health information)
• Facility program participation records
Important: Evervoice is not a healthcare provider. We do not collect, store, or process
protected health information (PHI) as defined by HIPAA. Our Services are designed for memory
preservation and family connection, not medical treatment or diagnosis.
3.4 Automatically Collected Information
• Device type, operating system, and app version
• Usage patterns (features used, session duration, story completion rates)
• IP address and approximate location (city/region level)
• Error logs and performance data

4. Biometric Information Notice
   This section provides disclosures required under state biometric privacy laws, including
   the Illinois Biometric Information Privacy Act (BIPA), Texas Capture or Use of Biometric
   Identifier Act (CUBI), and Washington's biometric privacy law.
   4.1 What Biometric Information We Collect
   To create your personalized voice profile and enable Interactive Legacy features, we collect and
   process Voiceprints—biometric identifiers derived from your voice recordings that capture your
   unique vocal characteristics, including tone, cadence, pitch, and speech patterns.
   4.2 Purpose of Collection
   • Creating AI-generated responses that authentically reflect your voice and personality
   • Enabling your Legacy Beneficiaries to hear stories in your authentic voice
   • Powering Interactive Legacy conversations that feel personal and genuine
   • Improving voice quality and naturalness over time
   4.3 Consent
   We obtain your informed, written consent before collecting any biometric information. This
   consent is obtained through a clear, standalone consent flow when you first record your voice,
   which explains: (a) that we are collecting biometric data; (b) the specific purpose; (c) how long
   we will retain it; and (d) your right to withdraw consent. You may withdraw consent at any time
   through your account settings.
   4.4 Retention and Destruction
   Because Evervoice is a legacy preservation service, Voiceprints may be retained for extended
   periods to fulfill our core purpose:
   • During your lifetime: Retained as long as your account is active
   • After you pass away: Retained for your Legacy Beneficiaries per your Legacy Plan
   settings, unless your Legacy Custodian requests deletion
   • Upon deletion request: Destroyed within thirty (30) days
   • Maximum retention: Unless otherwise specified in your Legacy Plan, biometric data will
   be retained for no longer than three (3) years after the later of: (i) account inactivity, or
   (ii) the death of the Legacy Creator, unless a Legacy Custodian extends this period
   4.5 No Sale or Unauthorized Disclosure
   We will never sell, lease, trade, or otherwise profit from your biometric information. We
   disclose Voiceprints only: (a) to your designated Legacy Beneficiaries as part of your legacy; (b)
   to service providers bound by strict contractual protections; (c) with your explicit consent; or (d)
   as required by law.
   4.6 Security
   Biometric data is encrypted using AES-256 at rest and TLS 1.3 in transit. Access is limited to
   essential personnel and systems. We maintain a written biometric data security policy that
   meets or exceeds industry standards.

5. How We Use Your Information
   5.1 Providing Our Core Services
   • Capturing and preserving your voice recordings and life stories
   • Using AI to refine and enhance your stories while preserving your authentic voice
   • Creating your personalized voice profile for Interactive Legacy features
   • Enabling family sharing and Legacy Beneficiary access
   • Generating guided prompts personalized to your life experiences
   5.2 AI and Machine Learning
   Transparency About AI Training: We may use de-identified, aggregated data to improve our
   general AI models for story refinement and voice synthesis. However, we do NOT use your
   individually identifiable Legacy Content, Voice Data, or Voiceprints to train AI models without
   your explicit, opt-in consent. Your stories remain yours.
   5.3 Service Improvement
   • Analyzing usage patterns to improve user experience (especially for seniors)
   • Developing new features based on user feedback
   • Troubleshooting technical issues
   5.4 Communications
   • Sending service updates, story prompts, and engagement reminders
   • Notifying Legacy Beneficiaries when new content is shared
   • Providing customer support
   5.5 Safety and Legal Compliance
   • Preventing fraud, abuse, and unauthorized access
   • Complying with legal obligations
   • Protecting the rights and safety of our users

6. Family Sharing and Legacy Access
   6.1 How Sharing Works
   Legacy Creators control who can access their Legacy Content. You can designate Legacy
   Beneficiaries (family members, friends, or others) and specify what content each person can
   access. Sharing is always at your discretion.
   6.2 Access by Minors
   We recognize that grandchildren and young family members may wish to interact with a loved
   one's legacy. Access by minors under 13 requires parental or guardian consent and
   supervision. We do not knowingly collect personal information from children under 13 who
   create their own accounts.

6.3 Interactive Legacy Conversations
Our Interactive Legacy feature allows Legacy Beneficiaries to have AI-powered conversations
with a Legacy Creator's preserved stories. These conversations are generated by AI based on
the Legacy Creator's actual recorded content and voice profile. We clearly indicate that
responses are AI-generated and based on preserved memories.
7. Posthumous Data Handling
7.1 What Happens to Your Legacy
Evervoice is designed to preserve your legacy beyond your lifetime. When you create your
account, you can establish a Legacy Plan that specifies:
• Who serves as your Legacy Custodian (the person who manages your account after you
pass)
• Which Legacy Beneficiaries can access your content
• What content becomes available and when
• How long your legacy should be preserved
• Any content that should remain private or be deleted
7.2 Legacy Custodian Rights
A designated Legacy Custodian may:
• Manage account settings and billing
• Add or remove Legacy Beneficiaries per the Legacy Creator's wishes
• Request data export or account deletion
• Extend or modify retention periods
Legacy Custodians cannot modify or delete individual stories or recordings without explicit
authorization in the Legacy Plan.
7.3 Incapacity
If a Legacy Creator becomes incapacitated (e.g., due to cognitive decline), the designated
Legacy Custodian may assume account management responsibilities with appropriate
documentation (e.g., power of attorney, healthcare directive, or court order).
7.4 No Legacy Plan
If a Legacy Creator passes away without establishing a Legacy Plan, we will: (a) maintain the
account for 12 months; (b) attempt to contact known family members; and (c) if no Legacy
Custodian is established, archive the account. Content will be retained for 3 years before
deletion unless claimed by a verified family member or legal representative.
8. Memory Care Facility Programs
8.1 How Facility Programs Work

Evervoice partners with memory care facilities to offer our Services to residents. In these
programs:
• Facilities provide program coordination and may assist residents with using the app
• Residents (or their authorized family members) provide consent for participation
• Caregivers may help facilitate storytelling sessions but do not access content
• Families are invited to participate and receive shared content
8.2 Consent for Residents with Cognitive Impairment
For residents who may have diminished capacity to consent, we require consent from an
authorized family member, legal guardian, or healthcare proxy. We design our consent process
to be clear and accessible, and we work with facilities to ensure appropriate consent is
obtained.
8.3 Data Relationship
Even when Evervoice is offered through a Care Facility Partner, the resident (or their authorized
representative) remains the owner of their Legacy Content. Care Facility Partners do not have
access to residents' story content or voice recordings. Facilities receive only aggregated, de-
identified engagement metrics.
8.4 Not a Healthcare Service
Evervoice is a memory preservation and family connection service. While research suggests
reminiscence activities can support emotional well-being, Evervoice is not a medical device,
therapeutic treatment, or healthcare service. We do not make health claims and do not collect
protected health information (PHI).
9. How We Share Your Information
9.1 With Your Legacy Beneficiaries
We share Legacy Content with the individuals you designate, according to your sharing
preferences.
9.2 Service Providers
We use trusted third-party providers for cloud hosting, payment processing, and technical
infrastructure. These providers are contractually prohibited from using your data for any purpose
other than providing services to Evervoice.
9.3 Legal Requirements
We may disclose information when required by law, court order, or government authority, or to
protect the safety of our users.
9.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We
will notify you before your data becomes subject to a different privacy policy and give you the
option to delete your data.
9.5 What We Never Do
We will never:
• Sell your personal information, Voice Data, or Legacy Content
• Share your data with advertisers or data brokers
• Use your stories for marketing without explicit consent
• Allow unauthorized third parties to access your legacy
10. Data Retention
Because Evervoice is a legacy preservation service, we retain data longer than typical
applications to fulfill your goal of preserving memories for future generations:
• Legacy Content (stories, recordings, photos): Retained per your Legacy Plan,
potentially indefinitely for Legacy Beneficiaries
• Voiceprints: Retained as long as Interactive Legacy features are active; deleted within
30 days of deletion request
• Account information: Duration of account plus 3 years, or as required by law
• Usage analytics: 2 years from collection (de-identified)
• Upon account deletion: All data deleted within 30 days, except as required for legal
compliance or active Legacy Beneficiary access
11. Your Privacy Rights
11.1 Rights for All Users
• Access: Request a copy of your personal information
• Correction: Correct inaccurate information
• Deletion: Request deletion of your data (subject to Legacy Beneficiary access rights)
• Portability: Export your Legacy Content in a standard format
• Withdraw Consent: Withdraw biometric consent at any time
• Opt-Out: Opt out of marketing communications
11.2 California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act and
California Privacy Rights Act:
• Right to Know: Request disclosure of categories and specific pieces of personal
information collected
• Right to Delete: Request deletion, subject to legal exceptions
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for
cross-context behavioral advertising

• Right to Limit Sensitive PI: Request limits on use of sensitive personal information
(including biometrics)
• Non-Discrimination: We will not discriminate against you for exercising these rights
11.3 Other State Laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states
with comprehensive privacy laws have similar rights. We honor all valid privacy requests.
11.4 How to Exercise Your Rights
Submit requests through: (a) your account settings; (b) email to privacy@evervoice.ai; or (c) our
Privacy Request Form at [URL]. We verify your identity before processing requests and respond
within legally required timeframes.
12. Data Security
We implement robust security measures to protect your precious memories:
• Encryption: AES-256 encryption at rest; TLS 1.3 in transit
• Access Controls: Role-based access, multi-factor authentication
• Infrastructure: SOC 2 compliant data centers with 24/7 monitoring
• Testing: Regular penetration testing and security audits
• Employee Training: All staff complete security and privacy training
13. Children's Privacy
Evervoice is designed for adults to preserve their legacies. We do not knowingly collect
personal information from children under 13 for account creation. Children may access Legacy
Content shared by family members with parental consent and supervision. If we learn that we
have collected personal information from a child under 13 without proper consent, we will delete
it promptly. Contact us at privacy@evervoice.ai if you believe a child has provided information
without consent.
14. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes affecting your
Legacy Content or biometric data, we will: (a) post the updated Policy with a new effective date;
(b) notify you by email; and (c) where required, obtain renewed consent. Your continued use
after notice constitutes acceptance.
15. Contact Us
For questions about this Privacy Policy or to exercise your rights:
Evervoice, Inc.
Attn: Privacy Team
1150 Byron St.
Palo Alto, CA 94301

Email: privacy@evervoice.ai
Support: support@evervoice.ai
Website: evervoice.ai
Appendix A: Categories of Personal Information (CCPA)
• Identifiers: Name, email, phone, IP address. Purpose: Account management, service
delivery. Disclosed to: Service providers, Legacy Beneficiaries (as designated).
• Biometric Information: Voiceprints, voice embeddings. Purpose: Voice cloning,
Interactive Legacy. Disclosed to: Service providers under strict contract. NOT SOLD.
• Audio/Visual Information: Voice recordings, photos. Purpose: Legacy preservation,
story creation. Disclosed to: Legacy Beneficiaries (as designated).
• Commercial Information: Subscription history, payment records. Purpose: Billing.
Disclosed to: Payment processors.
• Internet Activity: Usage logs, device info. Purpose: Analytics, improvement. Disclosed
to: Analytics providers (de-identified).
• Inferences: Story themes, engagement patterns. Purpose: Personalization. Internal use
only.
Appendix B: Quick Reference Glossary
• Legacy Creator: The person whose stories are being preserved
• Legacy Beneficiary: Family/friends who can access the legacy
• Legacy Custodian: Person who manages the account after incapacity/death
• Legacy Plan: Your settings for what happens to your content
• Interactive Legacy: AI feature that lets family "chat" with your preserved stories
• Voiceprint: Biometric data that captures your unique voice characteristics