Trust

Security and privacy, treated as features

Families keep important information in EverElder, and that deserves more than a page of buzzwords. Here is how we protect your data — in plain language, without claiming more than we have earned.

In practice

How your information is protected

Nine protections that apply to every workspace, on every plan.

Account security

Email verification, strong password requirements, secure session management, and session revocation from your settings.

Encryption in transit

All traffic between your devices and EverElder is encrypted with TLS. There is no unencrypted access to the product.

Private document storage

Files are stored in private buckets and served only through short-lived signed URLs. There are no publicly guessable file links.

Server-side permissions

Every read and write is authorized on the server against your workspace membership and role — client-side checks are never trusted.

Payments handled by Stripe

Card details go directly to Stripe, a certified PCI Service Provider. EverElder never sees or stores your card number.

Activity history

Meaningful actions — invitations, permission changes, document access — are recorded so your family has accountability.

Backups

Databases are backed up regularly with tested restore procedures, so a mistake on our side doesn't become your family's problem.

Responsible data handling

We collect what the product needs, nothing more. Analytics never include your notes, documents, or family content. You can export or delete your data at any time.

Incident contact

Security concerns reach a human at security@everelder.org. We investigate promptly and notify affected customers without games.

Our commitments

Four promises that shape every product decision — written down so you can hold us to them.

Your data belongs to your family

The notes, documents, and history you build in EverElder are your family’s — we are custodians, never owners.

Export or delete anytime

Take a complete export of your workspace whenever you like, or delete your account and its data permanently from Settings. No email chains required.

We never sell your data

Your information is never sold, rented, or shared with advertisers or data brokers. Our only business model is your subscription.

No ads, ever

EverElder is funded by subscriptions, not attention. There is no advertising in the product and no tracking for advertising purposes.

Certifications and disclosure

Where we are honest about what we have earned — and how to reach us if something looks wrong.

An honest note about certifications

SOC 2 and independent security audits are on our roadmap as EverElder grows. We do not claim certifications we have not earned — and we would rather tell you that plainly than decorate this page with badges. When an audit is complete, you will read about it here first.

Report a security concern

Security reports reach a human directly — not a ticket queue. We investigate promptly, keep you informed, and notify affected customers without games. We are grateful to everyone who reports responsibly.

security@everelder.org

Peace of mind, organized.

One private, permission-controlled home for the information your family relies on — always yours to export, always protected.

Designed for family coordination. EverElder does not provide medical care or emergency services.