Privacy at Everwindow

Accounts and sign-in

We store your email address, account creation and verification dates, and protected sign-in records to let you return to your saved people. Email sign-in links expire after ten minutes and work once. We use Resend to deliver those messages.

If you choose Google sign-in, Google sends us a signed identity token containing your Google account identifier, verified email address and basic profile information. We use the identifier and email to sign you in and connect your account. We do not save your Google profile photograph or name, request access to Gmail, Drive or contacts, or receive your Google password. Google sign-in data is used for authentication, not advertising or AI generation.

Sign-in cookies keep you signed in for up to 30 days. You can sign out on this device or all devices from your account. A short-lived cookie protects the Google sign-in process. Google also processes your interaction with its sign-in service under its own privacy policy.

Photographs, details and illustrations

When you create a person, we store the photograph you upload, the details you enter, your style choices, generated illustrations, approvals and generation records. These keep their likeness and saved work together. Upload only photographs and details you have permission to use.

When you request artwork, the relevant photographs, reference images and prompts are sent through fal.ai to the image model. When you request help interpreting a story or planning a week, the relevant profile answers are sent to Anthropic. These providers process that information to fulfil your request. Signing in with Google does not send Google account information to these creative services.

Cloudflare hosts the website, private database and private image storage. Saved photographs and personal artwork are accessed through the browser session or account that owns them; they are not added to a public gallery.

Browser storage and service records

Cookies and browser storage remember guest setups, sign-in and unfinished journeys. We keep generation status, approvals, provider receipts and related service records so requests can be recovered without creating duplicate work. Temporary, protected network identifiers limit automated sign-in attempts. Hosting and email providers may also process technical logs to operate and secure their services.

If you separately join the launch-news list, we store your email, signup date and consent for those updates. Creating an account does not subscribe you to launch news. The signup confirmation includes a removal link.

Your choices and deletion

You can review saved people from My Everwindow. Each person’s data controls let you export or delete their saved information. Account settings explain what must be resolved before closing an account, including saved people, linked displays or unresolved requests. Closing an eligible account removes its sign-in sessions and connected Google identity.

We retain account and saved-person information while it is needed for your use of Everwindow, until you remove it through the available controls. A deletion in Everwindow does not erase files you have downloaded, copies on disconnected devices, or copies retained independently by service providers or in backups. Contact us for help with access, correction, deletion or retention questions.

Privacy contact: beggidan@gmail.com.