Privacy Policy

1. Who this covers

"Neverfar," "we," "us" and "our" refer, as applicable, to the Neverfar service or its operator. This policy explains what information Neverfar handles and why.

Privacy requests: privacy@neverfar.app · Deletion and account requests: delete@neverfar.app

2. Scope

This policy covers information handled when you visit the Neverfar website, create an account, upload conversations, create and chat with personas, and contact us. It does not cover third-party sites you reach from Neverfar.

3. Information you provide

Account information (email address, display name, and authentication details from a sign-in provider if you use one); conversation exports and other files you upload; text you enter, including messages you send to a persona; persona information such as names, descriptions and settings; content generated in your account, including persona responses; and your communications with us.

4. Information about other people

Conversation exports may contain messages and other information relating to people who are not Neverfar users and who may not have agreed to Neverfar's Terms. That material may include personal information and, depending on the conversation, sensitive information. When you upload it, we handle it in order to provide the Service to you. You are responsible for having the rights, permission, authority, consent or other lawful basis needed to provide it, as set out in the Terms. If you believe material about you has been uploaded improperly, write to privacy@neverfar.app.

5. Technical, operational and diagnostic information

To run the Service securely we handle device and browser information, approximate location derived from IP address, authentication and session information, page and request performance information, error and diagnostic information, and signals used to detect abuse, fraud and automated misuse.

6. Product analytics

Separately from the above, we use analytics to understand how the product is used: features used, navigation and page views, engagement, retention, conversion, behavioural usage patterns and product performance. This product analytics processing is described separately from the operational, security and diagnostic processing above.

7. No session recording

We do not use screen recording, session replay or automatic capture of form text. Event-based analytics includes page paths, navigation, feature use, account identifiers, selected relationship and purpose categories, and subscription activity. Analytics identification may include your email. Intentional analytics event payloads do not include conversation text or uploaded file contents; page URL and referrer metadata can contain identifiers.

8. Cookies and local storage

Browser storage maintains sign-in, language and measurement preferences. Analytics and advertising measurement are enabled by default and can start before you make a choice, including where a measurement notice is shown. The Cookies page saves your preference for this browser. Integrations that honor that preference restrict subsequent measurement; it does not erase data already sent, and some already-loaded third-party tools may continue collecting. Internal product, security and operational events are handled separately. Browser privacy settings can also restrict trackers and storage.

9. Advertising

Configured advertising providers receive page, sign-up and purchase signals, including plan, amount, currency, device information and matching identifiers such as a hashed email address. Uploaded file contents and conversation text are not intentionally included in those advertising payloads. A saved measurement preference does not guarantee that every already-loaded third-party tool stops collecting.

10. How information is used

To provide the Service and generate persona responses; to create and maintain your account and authenticate you; to process payments and manage subscriptions; to provide support and respond to requests; to keep the Service secure and investigate abuse, fraud or violations of the Terms; to diagnose problems and improve the product; to send service and, where permitted, product messages; and to comply with legal obligations.

11. Legal bases

Where a legal-basis framework such as the GDPR or UK GDPR applies to you, we rely on: performance of a contract, for providing the Service and processing payments; legitimate interests, for security, abuse prevention, diagnostics and product improvement; consent, where required for particular processing; and legal obligation, where the law requires it. Other jurisdictions use different frameworks; this section applies where it is relevant to you. Where uploaded conversations contain information about other people, you are responsible for the basis on which you provide it; this does not affect or eliminate any obligation that applies directly to Neverfar under applicable data-protection law.

12. Service providers and AI processing

We use third-party providers and partners in the following categories: AI and machine-learning technology; infrastructure and hosting; storage; analytics and product telemetry; security and abuse prevention; communications and email; payments; and other operational support. Depending on their role, these parties may process information on our behalf as processors or service providers, or in an independent role under their own terms — for example, Dodo Payments acts as Merchant of Record for purchases. The specific providers in each category may change over time.

Materially: content you upload and your conversations with a persona are sent to third-party AI technology providers in order to generate responses. Neverfar does not sell your content and does not use your content for Neverfar's own foundation-model training. Content processed by third-party AI technology providers is subject to the applicable provider arrangements and data-use terms.

13. International processing

Our providers may store and process information in countries other than yours, including countries whose data protection laws differ from those where you live. Where required, we rely on appropriate safeguards for those transfers.

14. Retention

Anonymous uploads, Echoes and conversations are scheduled for deletion 72 hours after the first upload unless you start a trial or secure the account by verifying your email or signing in with Google. Verified accounts and accounts with a started trial are not subject to that anonymous expiry. Other data is retained according to account status, deletion requests, operational needs and provider policies. Routine backups may remain until overwritten.

15. Deletion

Settings lets you delete the people you created, along with their chats and messages. This does not close your account or remove your profile record.

A deletion request to delete@neverfar.app covers your account and the personal data associated with it, not only uploaded files or personas. We process deletion requests in accordance with applicable law, subject to information that we or relevant service providers are required or permitted to retain. Backup copies may persist until overwritten in the normal course.

16. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, to portability, and to withdraw consent. Where a right applies to you, we will honour it in accordance with the law that applies. Some rights are not available in every country, and some are subject to exceptions. Write to privacy@neverfar.app, or delete@neverfar.app for deletion. If you are in the EEA or UK you may also complain to your local supervisory authority.

17. Age

Neverfar is for people aged 18 and over. You confirm your age when you create an account. If you believe a person under 18 has provided information to Neverfar, or that a persona of a person under 18 has been created, report it to privacy@neverfar.app and we will handle it in accordance with applicable law. Creating a persona of a minor is prohibited under the Terms.

18. Security

Data is stored with established cloud infrastructure and storage providers, and is encrypted in transit and at rest by those platforms. Your chats and account content are private to your account and protected by authentication and database-level access controls designed to prevent unauthorized access, so that other users cannot read them. Uploaded files are stored in non-public storage and served through short-lived signed links. No service can guarantee absolute security, and we do not promise it. To report a security issue, write to privacy@neverfar.app.

19. Changes and contact

We may update this policy; material changes take effect prospectively and the date above will change. Privacy: privacy@neverfar.app · Deletion: delete@neverfar.app · General: support@neverfar.app