Privacy Policy

Effective date: 21 August 2026
Last updated: 30 September 2026

Contents
  1. 1. Who we are
  2. 2. The short version
  3. 3. What we collect
  4. 4. Sensitive data — read this section
  5. 5. Why we use your data, and our legal basis
  6. 6. What your partner sees
  7. 7. What we do not do
  8. 8. Automated processing and AI
  9. 9. Who we share data with
  10. 10. International transfers
  11. 11. Security
  12. 12. Retention and deletion
  13. 13. Children
  14. 14. Your rights
  15. 15. Region-specific information
  16. 16. Changes to this policy
  17. 17. Contact

1. Who we are

Keep Trying, Inc. ("Eterna," "we," "us"), a Delaware corporation at 2110 Huran Drive, San Jose, CA 95122, is the controller of the personal data described in this policy.

Eterna is a private app for two people in a relationship. You will tell it things you would not tell most people. This policy explains exactly what happens to those things.

This policy covers the Eterna app and our website, heyeterna.com, including the "Work with us" form that creators can use to contact us.

Contact us any time at privacy@heyeterna.com.


2. The short version

Do you sell my data?No. Never, to anyone, for any price.
Do you show me ads?No. There is no advertising in Eterna and no ad tracking.
Who can read what I write?You, your paired partner, and a very small number of our staff — only when strictly necessary, and only under the conditions in §9.
Do you train AI on what I write?No. Two features send your answers to OpenAI to write a short reflection, and OpenAI does not train on it. Both are covered by one switch you can turn off. See §8.
Is my content end-to-end encrypted?No. It is encrypted in transit and at rest, and each couple's data is separated at the database level — but our servers can read it. See §11.
Can I delete everything?You can delete your account and your personal data from inside the app. Deleting your account also permanently deletes what you and your partner made together, for both of you — see §12.
Where is my data stored?The United States (AWS us-east-1), with the safeguards in §10.

This summary is for orientation only. The rest of the policy governs.


3. What we collect

3.1 Information you give us directly

CategoryExamples
AccountEmail address and/or phone number, sign-in method, authentication codes
ProfileFirst name, avatar photo, pronouns, birthdate
PairingYour invite key, who you are paired with, pairing and unpairing dates
Relationship contentYour answers to prompts, free-text responses, profile cluster ("My Manual") answers, agreements you propose or confirm, Reveal answers you choose to save, appreciations
SupportAnything you send us by email
PaymentSubscription status and transaction identifiers. We never receive your card number — Apple and Google handle payment.
Creator enquiriesIf you use the "Work with us" form on our website: your name, email address, where you post, how many people follow you there, and your handle or a link to your page, plus anything you choose to add — where you are based, whether you make content with your partner, and your idea

3.2 Information collected automatically

CategoryExamples
Device and appDevice model, OS version, app version, language, time zone, coarse region
UsageScreens opened, features used, session timing, prompt completion events
DiagnosticsAn error code when an action fails. No crash reporting SDK is installed in Eterna, and we collect no performance traces. Apple and Google may give us anonymous crash diagnostics for the app, but only where you have turned that sharing on in your device's own settings
Push tokensAn identifier issued by Apple or Google so we can send notifications you have enabled

We do not collect precise GPS location, contacts, camera roll beyond images you choose to upload, advertising identifiers (IDFA/AAID), or cross-app tracking data of any kind.

3.3 Information from others
Your partner's answers become visible to you through the Reveal, and yours to them. Apple and Google tell us your subscription status.


4. Sensitive data — read this section

Some of what Eterna asks about is legally sensitive, and we treat it that way.

4.1 What qualifies. Parts of the Service — in particular the questions about affection, physical intimacy, and desire, and questions about monogamy and relationship limits — collect data concerning your sex life. Under the GDPR and UK GDPR this is special category data (Article 9). Under California law it is sensitive personal information. Similar categories exist under other laws listed in §15.

4.2 Our legal basis is your explicit consent, and you give it by answering. We do not collect this data on the basis of legitimate interest or contract. Every question is shown to you in full before you answer it, so you can always see what is being asked. Nothing is recorded until you answer. We never pre-select an answer, fill one in for you, or infer one from anything else you have written.

4.3 You can decline any question. No question in Eterna has to be answered. Leaving one unanswered is always allowed, and it does not affect your account, your pairing, your subscription, or anything you have already unlocked. It has one effect, and we would rather state it than let you discover it: a Section only completes when both partners have answered every question in it, so an unanswered question leaves that Section open.

4.4 You can ask us to delete it. Email privacy@heyeterna.com and we will delete the sensitive answers we hold for you, subject to §12. Deletion is not retroactive to disclosures your partner has already received — we cannot un-show them something they have already read.

4.5 Free text. Free-text fields can contain anything, including information about health, religion, or other people. Please do not enter sensitive information you do not want stored. Where you volunteer such information, we process it under the same explicit-consent basis and delete it on request.


PurposeData usedLegal basis (GDPR/UK GDPR)
Create and run your accountAccount, profilePerformance of a contract
Pair you with your partner and operate the shared spacePairing, relationship contentPerformance of a contract
Deliver prompts, Reveals, Record, and Profile featuresRelationship contentPerformance of a contract
Collect and process intimacy-related answersSensitive data (§4)Explicit consent (Art. 9(2)(a))
Generate Section insightsRelationship content (§8)Consent
Send notifications you have enabledPush tokens, usageConsent
Process subscriptionsPayment statusPerformance of a contract
Keep the Service secure and prevent abuseDevice, usage, diagnosticsLegitimate interests
Fix bugs and improve reliabilityDiagnostics, aggregate usageLegitimate interests
Understand which features are usedAggregated/pseudonymised usageLegitimate interests
Respond to youSupport correspondenceLegitimate interests / contract
Consider working with creators, and reply to themCreator enquiriesLegitimate interests / steps you ask us to take before a contract
Meet legal obligationsAs requiredLegal obligation

Where we rely on legitimate interests, we have assessed that our interest does not override your rights, and you may object at any time (§14).


6. What your partner sees

This deserves its own section because it is the part people misunderstand.

Decide what to write on that basis.


7. What we do not do


8. Automated processing and AI

8.1 The two features that use AI. Eterna has two features that send your content to an AI provider:

Nothing else in the Service uses AI.

8.2 What leaves our systems. When a Section completes, the text of both partners' answers in that Section is sent to OpenAI, our AI provider, to generate the Section insight. When a My Manual cluster is finished by both partners, the text of both partners' answers in that cluster is sent to OpenAI to generate the Manual insight, including its private per-partner note. Both only happen if insights are enabled for your couple (on by default, and can be turned off together in Settings — see §8.4). Nothing else — names of Records or Agreements — is sent.

8.3 Training and retention. OpenAI does not use data submitted through its API to train its models, under its API data-usage terms. OpenAI keeps a copy of what is sent and returned in its own abuse monitoring logs for up to 30 days, after which it is deleted. Insights are generated once and stored in our database like your other shared content; a Manual insight's private note is stored so that only the partner it was written for can read it.

8.4 Turning it off. Section insights and Manual insights share one switch, which can be turned off for your couple in Settings. When it is off, your answers are never sent to OpenAI at all, for either feature — the check happens before anything is generated, not before it is displayed.

8.5 No automated decisions about you. Eterna does not make automated decisions producing legal or similarly significant effects about you. Nothing in the Service scores, grades, or evaluates you or your relationship, and both insight features are written under rules that permit facts, and — for a Manual insight's private note only — a single suggestion drawn from your own words, but never a judgment.


9. Who we share data with

We share only with service providers who process data on our instructions under written contracts, and only as needed to run the Service.

ProviderPurposeDataRegion
SupabaseDatabase, authentication, file storageAccount, profile, relationship contentUS
Apple / GoogleApp distribution, subscription billing, push deliverySubscription status, push tokensUS
RevenueCatSubscription managementSubscription status, transaction identifiersUS
OpenAIAI text generation for Section insights and Manual insightsSection answers, My Manual cluster answers, and first namesUS
PostHogProduct analytics, crash reportingDevice, usage, diagnosticsUS
ResendTransactional emailEmail addressUS
FormspreeReceives the website's "Work with us" form and emails each enquiry to usCreator enquiriesUS

Our own access. Staff access to relationship content is restricted to the minimum number of people, requires a specific operational reason (such as investigating a bug you reported or a safety report), is logged, and is never for general browsing.

Other disclosures. We may disclose data where legally required, to respond to valid legal process, to protect someone's life or safety, or in connection with a merger or acquisition — in which case we will notify you and the acquirer remains bound by this policy or gives you notice and a choice.

The table above is our current list of sub-processors. We will update it here and give notice before adding a new one.


10. International transfers

We are based in the United States and our infrastructure is located in the United States (AWS us-east-1). If you are in the EEA, the UK, or Switzerland, your data may be transferred outside your country.

For those transfers we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum / Swiss equivalent), together with supplementary technical and organisational measures. You may request a copy of the relevant safeguards at privacy@heyeterna.com.


11. Security

We protect your data with encryption in transit (TLS), encryption at rest, access controls and least-privilege permissions, row-level security separating each couple's data, audit logging of internal access, and optional device-level biometric lock.

Eterna is not end-to-end encrypted. Our servers can read your content, because they must in order to run the Service. We say so plainly rather than imply otherwise.

No system is perfectly secure. We cannot guarantee absolute security, and you should use a strong sign-in method and keep your device locked.

If a breach affects your personal data and creates a risk to you, we will notify you and the relevant supervisory authority within the timeframes the law requires (72 hours to the authority under GDPR).


12. Retention and deletion

12.1 While your account is active we keep your data so the Service works.

12.2 Deleting your account. You can delete your account from inside the app at Settings → Delete account. On deletion we unpair you, close your access, and delete your personal identity data — sign-in credentials, name, avatar, contact details, birthdate, and your individual profile answers — within 30 days.

12.3 What you made with your partner is deleted for both of you. If you delete your account while you are paired — or after unpairing, before you pair with anyone new — everything you and that partner made together in Eterna is permanently deleted, for your partner as well as for you: your answers, Reveals, saved moments, Agreements, and Our Story posts with their photos, voice notes and videos. Your partner is told that it has been removed. This cannot be undone. Deleting your account is the one action in Eterna meant to remove everything.

12.4 Earlier connections. If you paired with someone new after an earlier connection ended, what you made with the earlier partner stays in their Past connections, with your name, avatar, and other identity data removed. If you believe you have a right to erasure that covers that content too, contact privacy@heyeterna.com. We will assess the request under the law that applies to you and respond within the statutory period. We will not refuse a valid legal request on the basis of this policy alone.

12.5 Retention periods

DataKept for
Account and profileUntil deletion, then ≤30 days
Relationship content (individual)Until deletion, then ≤30 days
Relationship content (made with your current or most recent partner)Until either of you deletes your account, then ≤30 days (§12.3)
Relationship content (made with an earlier partner)Retained for that partner, with your identity data removed (§12.4)
Inactive shared space after unpairingRetained inactive, so you can reconnect, until it is deleted as in §12.3
Analytics and error events (event names, IDs and counts — never content)Up to 7 years, our analytics provider's retention on our plan
Section insight prompts held by OpenAI for abuse monitoringUp to 30 days
Transaction recordsAs required by tax and accounting law (typically 7 years)
Creator enquiries30 days in Formspree's archive. The emailed copy is kept while we consider working together, and deleted on request
Database backupsTaken daily, each one overwritten after 7 days

13. Children

Eterna is for adults. You must be 18 or older. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete the account and its data promptly. If you believe a minor is using Eterna, contact privacy@heyeterna.com.


14. Your rights

Depending on where you live, you may have the right to:

How to exercise them. Email privacy@heyeterna.com. We respond within 30 days (45 days in California, extendable once where permitted). We will verify your identity, usually through your registered email or phone.

An authorised agent may submit a request on your behalf with written proof of authorisation.

Complaints. You may complain to your local data protection authority. In the EEA, that is the authority where you live or work. In the UK, the Information Commissioner's Office (ico.org.uk). We would rather you came to us first.


15. Region-specific information

15.1 EEA and United Kingdom. Legal bases are set out in §5. Transfers are covered in §10.

15.2 California. In the past 12 months we collected identifiers, personal records, commercial information (subscription status), internet activity, and sensitive personal information (§4). We collected it for the purposes in §5, from you and from Apple/Google, and disclosed it to the service providers in §9. We do not sell or share personal information, and we have not in the preceding 12 months. We use sensitive personal information only to provide the Service you requested and for the purposes permitted by CPRA §7027(m) — never to infer characteristics about you. You have the rights in §14, including the right to limit use of sensitive personal information. We honour Global Privacy Control signals where technically feasible.

15.3 Other US states. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights substantially as described in §14, including the right to appeal a refused request — appeal to privacy@heyeterna.com with "Privacy Appeal" in the subject. We conduct data protection assessments where those laws require.

15.4 Canada. We handle personal information in accordance with PIPEDA and applicable provincial law, including Quebec's Law 25. You may complain to the Office of the Privacy Commissioner of Canada.

15.5 Australia. We comply with the Australian Privacy Principles. Complaints may be made to the Office of the Australian Information Commissioner.

15.6 Brazil. We comply with the LGPD. Data subject rights are as described in §14; our contact for LGPD matters is privacy@heyeterna.com.

15.7 Singapore. We comply with the Personal Data Protection Act 2012. Our data protection contact is privacy@heyeterna.com.

15.8 Switzerland. We comply with the revised Federal Act on Data Protection. Complaints may be made to the FDPIC.

15.9 Other countries. Where local law grants you greater rights than this policy describes, those rights apply.


16. Changes to this policy

We will post any updated policy here and update the date at the top. For material changes we will notify you in the app or by email at least 30 days before they take effect. Where a change affects how we process sensitive data, we will ask for fresh consent rather than relying on notice.


17. Contact

Keep Trying, Inc.
2110 Huran Drive, San Jose, CA 95122
Privacy: privacy@heyeterna.com