Everla
Privacy
What Everla keeps, who can see it, and what happens to it when you ask. Last revised 7 September 2026.
Everla is a private archive for one family at a time. Everything in an archive belongs to the family that put it there. This page says plainly what we hold, why, where, and how to have it removed.
What we keep
- Your account. Your name and email address, and — if you sign in with Apple or Google — the name and address that service shares with us. Apple may provide a private relay address when you choose Hide My Email. We use them to know who you are and to show your name to your own family. We do not sell them and we do not use them for advertising.
- What the family adds. The photographs, films, scans and documents a member uploads, and the answers the family gives about them: who is in a picture, when it was taken, how people are related, what a film is called. We also keep metadata in uploaded files, including dates and photo GPS coordinates when present, to place memories in time and on the family's map.
- What the archive works out. To place photographs in time and on the right person's page, Everla looks at each picture and film: it finds faces and compares them with faces the family has already named, estimates dates, writes a short caption, and transcribes the speech in home movies. These results are kept with the picture they describe and marked as the archive's guess until the family confirms or corrects them.
- Sign-ins. When each account last opened the archive, so whoever looks after it can see who is using it, and records of account and membership actions to protect access. Clerk also handles IP addresses, approximate sign-in location, device information and a client identifier for authentication and security. The app does not continuously collect your phone's GPS location or use advertising identifiers. There is no advertising or tracking across other companies' apps and websites. The site and the web app count page views with Cloudflare's analytics, which sets no cookie and does not identify you.
Who can see it
- Only members of your family's archive. An archive is opened by invitation, and the person who looks after it decides who is in it and can remove anyone.
- Each family's archive is kept separate from every other family's, in the database and in storage, and nothing in Everla shows one family's material to another.
- Everla's staff do not browse family archives. We look at a specific family's data only to fix a problem that family has asked us about.
Where it is, and who helps us process it
Everla runs on servers we rent. Some of the work above is done by other companies on our behalf, under their own privacy terms, and only for the purpose named here:
- Sign-in is handled by Clerk, which stores your account credentials and the sign-in security information described above. Everla never sees your password.
- Storage for photographs, films and documents is Cloudflare R2.
- The database (names, dates, relationships, captions) is hosted by Neon.
- Processing — finding faces, estimating dates, writing captions, transcribing films — runs on Modal. For captions, film titles and transcription, the picture or the audio is sent to OpenAI's API and, for some text work, Anthropic's API. Under the terms we use, those companies do not train their models on your family's material.
- The map is drawn from a map file we host ourselves; no map service sees where your family's photographs were taken.
Nothing about your family is shared with anyone else, for any other reason.
Faces
To tell one relative from another, Everla computes a mathematical description of each face it finds and compares it with faces the family has already named. That description is kept only inside your family's archive, is used only to suggest who someone might be, and is deleted with the picture it came from. The family can say "that isn't them" about any suggestion, and the archive remembers the correction.
Your choices
- See and correct. Everything the archive believes about a picture or a person is shown in the app and can be corrected there.
- Remove something. A member can remove what they added. The person looking after the archive can remove anything in it.
- Leave. Sign out and ask the person looking after the archive to remove your account, or write to us. Removing an account removes its name from the archive; the photographs the family has kept stay with the family.
- Delete the whole archive. The person who looks after an archive can ask us to delete it entirely — the pictures, the films, the database, the face descriptions, everything — and we will, within 30 days, and confirm when it is done.
Children
Family archives contain pictures of children; that is what family archives are. Accounts are for adults. Everla does not knowingly open an account for anyone under 13, and a parent who wants a child's pictures removed from an archive can ask the person looking after it, or us.
Changes
If this page changes in a way that matters, we will say so in the app before the change takes effect. The date at the top is the date of the last revision.