Privacy policy
Last updated 21 August 2026
Evernua exists to hold information that matters a great deal to you. This page explains exactly what we keep, why, for how long, and who can ever see it.
Who is responsible
The controller of your personal data is EVERNUA, [REGISTERED ADDRESS].
For any question about this policy, or to exercise your rights, write to [PRIVACY EMAIL].
What we collect
Account details: first name, last name, email address, and the password you choose — which we never store in readable form, only as a bcrypt hash.
Profile details you choose to add: telephone, city, country, date of birth.
The content of your plan: your funeral wishes, the people you would like informed, the people you trust, who is responsible for what, your important records, your belongings, and your instructions for online accounts.
Technical data strictly necessary to run the service: your session cookie, your language preference, and your cookie choices.
We do not collect browsing analytics, we run no advertising trackers, and we never ask for the passwords to your other accounts.
Why we hold it, and on what basis
To provide the service you asked for — recording your wishes and making them available to the people you designate. Legal basis: performance of the contract between us (GDPR Art. 6(1)(b)).
To keep your account secure, to prevent abuse and to keep an audit trail of sensitive actions. Legal basis: our legitimate interest in a trustworthy service (Art. 6(1)(f)).
Some of what you record — a religious ceremony, for instance — may reveal special category data within the meaning of Article 9. We process it solely on the basis of your explicit consent, given by entering it, and you may delete it at any time.
Who can see it
You, always.
The trusted people you designate, and only to the extent you allowed. Every item you record carries a visibility level: items marked "Only me" are never shared with anyone under any circumstances; items marked "My trusted people" are visible to those you granted that permission; items marked "After my death" remain sealed.
Content marked "After my death" is released only after a two-person procedure: one trusted person authorised to do so reports your death, and a different trusted person authorised to do so confirms it. A report alone releases nothing. The person who reports can never be the person who confirms.
You can reverse the procedure at any moment simply by signing in.
Our staff do not consult the content of your plan. Access to production systems is restricted to what is required for maintenance and is logged.
We never sell your data, and we never share it with advertisers.
Where it is stored
Your data is stored on servers located in Switzerland, operated by Infomaniak Network SA. Switzerland benefits from a European Commission adequacy decision, so no additional transfer safeguard is required. If a subprocessor elsewhere ever became necessary, we would rely on the European Commission's standard contractual clauses and say so on this page.
How long we keep it
For as long as your account exists. Evernua is designed to hold information for many years — that is the point of it.
If you delete your account, everything is erased immediately and permanently: your profile, your wishes, your lists, your records, your audit trail, and your standing as a trusted person in anyone else's plan. There is no grace period and no backup from which it can be restored on request.
After a death has been confirmed, the plan remains available to the designated trusted people for [RETENTION PERIOD] so that they can carry out what was asked, after which it is erased.
Your rights
You have the right to access, rectify, erase and port your data, and to restrict or object to its processing.
Two of these are built directly into the product: from Profile & privacy you can download everything in a single readable file, and you can delete your account outright. Neither requires you to write to us.
For anything else, write to [PRIVACY EMAIL]. We will reply within one month.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris — www.cnil.fr).
Security
Passwords are hashed with bcrypt and are never stored in readable form.
Your session lives in an httpOnly cookie, so a scripting flaw in the browser cannot read it.
Invitations sent to trusted people are stored only as a hash, expire after thirty days, can be used once, and can only be accepted by someone signed in with the invited email address.
Requesting a plan you have no access to returns the same response as a plan that does not exist, so Evernua cannot be used to discover who holds an account.
No system is perfect. If we ever suffer a breach affecting your data, we will notify the CNIL within 72 hours and inform you directly where the law requires it.