Privacy

Evermii stores private conversations and personal memories. That is the whole product, and it means the way we handle your data matters more here than in most software. This page describes what we actually do.

What we store

Information you give us:

• Your email address and password, the password stored only as a scrypt hash.
• Your display name, time zone, and settings.
• Your companion’s configuration — name, relationship, personality.
• Your conversations.
• The memories extracted from those conversations.

Information collected automatically when you use Evermii:

• Your IP address, recorded against your sign-in session and used to rate-limit sign-up and sign-in so the service cannot be abused.
• Your browser and device description, recorded against your session.
• Usage records for each AI request — model, token counts, cost, latency, and whether it succeeded. These contain no conversation content.

Cookies

Evermii sets one cookie: the one that keeps you signed in. It is httpOnly, so no JavaScript on the page can read it, and it is not readable by any other site.

We use no advertising cookies, no analytics cookies, and no third-party trackers of any kind. There is nothing here to opt out of.

Your conversations are not used to train AI models

We do not train any model on your conversations or memories, and we never will without asking you first.

Our AI provider, OpenAI, states that data sent to its API is not used to train or improve its models unless the customer explicitly opts in. We have not opted in. OpenAI retains API requests for up to 30 days for abuse monitoring, then deletes them.

Who else sees it

To generate a reply, your message, the memories relevant to it, and your companion’s personality are sent to OpenAI, our AI provider. This is unavoidable for the product to work, and it is the only third party that receives conversation content.

Email is delivered by Resend, which receives your email address for verification and password-reset messages only.

Evermii runs on Amazon Web Services in the United States. If you are outside the US, your data is processed there.

We do not sell your data. We do not use your conversations for advertising. We do not show one user’s memories to another — access is scoped to your account in every database query.

When we would have to share it

Two situations would compel us, and we would rather say so plainly than imply they do not exist:

• Legal process. If served with a valid subpoena, court order, or equivalent legal demand, we would be required to comply. Where we are permitted to tell you that this has happened, we will.
• A sale of the business. If Evermii were acquired or merged, user data would transfer to the new owner, who would be bound by this policy until they told you otherwise. We would notify you before that took effect.

What you control

• Every memory is visible at What Evermii Remembers, and you can edit or delete any of it.
• You can turn memory off entirely in settings. Existing memories stay until you delete them.
• You can delete your account from settings. That removes your companion, conversations, memories, and settings immediately.
• You can ask us for a copy of your data, or for it to be corrected, by emailing the address below.

Retention

Data is kept while your account exists. Deleting your account removes it immediately. Encrypted database backups may retain deleted content for up to 30 days before they expire, after which it is gone.

Anonymous AI usage records are kept for billing reconciliation. They are unlinked from your account when you delete it and contain no conversation content.

Security

Traffic is encrypted with TLS. The database volume and backups are encrypted at rest. The database is not reachable from the internet. Passwords, tokens, and conversation content are never written to application logs.

No system is perfect. If we discover a breach affecting your data, we will tell you and the relevant authorities as promptly as we can, and describe what happened.

Children

Evermii is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete the account and its data. If you believe a child has created an account, please tell us at the address below.

Changes to this policy

If we change this policy in a way that materially affects how your data is handled, we will tell you by email before it takes effect. The date at the top of this page always reflects the current version.

Contact

Evermii is operated by JD Lumen.
hello@evermii.com