EverJoy Privacy Policy
Effective Date: July 1, 2026
Last Updated: July 2026
Version: 2026-07
Entity: EverJoy Memory LLC, a [TODO: State of incorporation — confirm with counsel] LLC ("EverJoy," "we," "us," or "our")
This Privacy Policy ("Policy") describes how EverJoy collects, uses, discloses, retains, and protects information when you access or use the EverJoy platform at myeverjoy.com and related websites, mobile experiences, APIs, and services (collectively, the "Service").
EverJoy is The AI-Powered Student Growth Cloud — a platform that helps parents and legal guardians preserve, organize, and celebrate childhood memories from Pre-K through graduation. The Service includes memory storage, growth timelines, digital Personalized Yearbooks, optional AI-powered insights and recommendations, Family Circle sharing, and—at participating schools—the Partner Capture Network for school-based scanning of student work using Student ID Booklets.
This Policy applies to:
EverJoy is designed as a parent-directed service. We do not knowingly provide accounts directly to children under 13, and children do not log into the Service independently. All Child Profile data is controlled by the Parent or legal guardian who created or authorized the profile.
By creating an account, using the Service, or providing consent during onboarding, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the Service.
We collect information in the categories below. The specific data collected depends on how you use the Service (parent uploads, partner school scanning, subscription tier, AI consent, etc.).
When you register, we collect:
We use Supabase Auth for identity management. Your email must be verified before accessing dashboard features.
When you create or activate a Child Profile, we collect information you provide or that is matched through school roster activation:
Important: At partner schools, roster matching uses date of birth server-side only. Parents cannot directly query or browse school roster records.
You may upload or have captured on your behalf:
For content captured through the Partner Capture Network, scanned artifacts may include images of student work with EverJoy Student ID labels. Student identity is determined exclusively through QR/barcode scan—not through handwriting recognition or OCR-based identity inference.
When you provide separate consent for AI processing (ai_processing consent, version 2026-07), we may generate and store:
AI outputs are stored as part of your Child Profile data and are subject to the same access controls as the underlying memories.
We maintain immutable records of consents you provide, including:
2026-07)Consent records are retained for compliance purposes and are not hard-deleted when you revoke consent; we record the revocation event instead.
Subscription billing is processed by Stripe. We receive and store:
For one-time purchases (professional Student ID Booklets at $9.99 initial / $4.99 replacement), Stripe processes payment; we store transaction references.
We do not store full credit or debit card numbers. Card data is handled directly by Stripe in accordance with PCI-DSS requirements.
When analytics are enabled, we use PostHog to collect:
We configure analytics to minimize collection of Child Profile content in analytics events. Analytics data is used to improve the Service, not to sell personal information.
When we send transactional emails (account verification, billing receipts, consent updates, security notices), our email providers Postmark (primary) and SendGrid (fallback) process recipient email addresses and delivery metadata.
If you contact support@myeverjoy.com or partners@myeverjoy.com, we collect the content of your communications and associated account identifiers to respond to your inquiry.
We use collected information for the following purposes:
When AI features are enabled and you have given the applicable consent, EverJoy uses a third-party AI provider, currently OpenAI, to help classify, extract text from, summarize, and organize your child's uploaded and captured content, and to prepare parent-facing growth and yearbook suggestions.
What AI may do, what it is not intended to do, and how consent works are described in the AI Usage & Transparency Policy.
When AI features are enabled for the Service, that consent is required before the family dashboard can be used. Confirming the consent checkbox records your choice in the product. The checkbox is not, by itself, a statement that every method of verifiable parental consent required by COPPA or another law has been completed.
If you are in the European Economic Area or United Kingdom, our legal bases include:
We do not sell your personal information. We share information only as described below.
We engage trusted third parties to help operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Account data, Child Profiles, Memories, metadata |
| Stripe | Payment processing | Billing identifiers, transaction metadata |
| OpenAI | AI classification, OCR, summaries, insights | Memory content, OCR text, child name, growth signals (with AI consent only) |
| PostHog | Product analytics | Usage events, device/browser data |
| Postmark / SendGrid | Transactional email | Email address, message content |
| Vercel | Application hosting | Request logs, IP addresses |
Each subprocessor is bound by contractual obligations requiring appropriate security and confidentiality. A current subprocessor list is available upon request at privacy@myeverjoy.com.
At partner schools, certified Capture Partners scan student work using Student ID labels. Partners access only:
Partners are independent contractors subject to certification, FERPA/COPPA training, and contractual confidentiality obligations. They do not receive parent contact information except as necessary for booklet delivery logistics.
When you invite family members to your Family Circle, they may view Memories and content you explicitly share, subject to Family Circle privacy rules. Invited members cannot modify Child Profiles or billing settings unless you grant additional permissions.
For partner schools with executed School Agreements:
District-level data processing is governed by the School District Data Processing Agreement (Volume 3).
We may disclose information if required by law, court order, or governmental request, or if we believe disclosure is necessary to:
We will notify affected users of government requests where legally permitted.
If EverJoy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
EverJoy is designed with awareness of the Family Educational Rights and Privacy Act (FERPA). Key principles:
Schools and districts requiring formal FERPA assurances should execute the School Agreement and District DPA in Volume 3.
EverJoy serves California schools and complies with the Student Online Personal Information Protection Act (SOPIPA), Cal. Bus. & Prof. Code §§ 22584–22584.6, by:
How EverJoy uses AI with information about a child is described in the AI Usage & Transparency Policy. This section states the privacy points that policy and this Privacy Policy share.
When AI features are enabled and you have given the applicable consent, EverJoy may transmit to its AI provider the categories listed in the AI Usage & Transparency Policy. Those categories include uploaded artifacts, text from those artifacts, titles and descriptions, relevant dates, and the limited child or school-year context a specific task needs. EverJoy seeks to send only what that task reasonably needs.
EverJoy does not intentionally provide children's information to its AI provider for the purpose of training that provider's general-purpose models, and it does not voluntarily opt that information into a provider training program. Provider terms can change. Review the provider's current terms and Section 9 of the AI Usage & Transparency Policy.
We use cookies and similar technologies as described in our Cookie Policy (Volume 2). Summary:
California residents may manage cookie preferences as described in the Cookie Policy.
We implement administrative, technical, and physical safeguards including:
family_id and owns_student() policies/partner/*) and admin console (/admin/*)We maintain an incident response program as described in our Security Policy (Volume 4). In the event of a data breach affecting personal information, we will notify affected users and regulators as required by applicable law.
Retention periods are defined in our Data Retention Policy (Volume 4). Summary:
| Data Category | Retention Period |
|---|---|
| Child Profile data | ~7 years (2,555 days) while account active |
| Memories and artifacts | ~7 years (2,555 days) |
| Consent records | ~7 years; revocation recorded, not hard-deleted |
| Audit logs | ~3 years (1,095 days) |
| Inactive account grace | 365 days after deletion request |
You may request:
Contact support@myeverjoy.com or use in-app Settings (where available) to initiate deletion. Consent and audit records may be retained in anonymized or aggregated form as required for legal compliance.
You may request an export of your personal information and Child Profile content in a commonly used, machine-readable format by contacting privacy@myeverjoy.com. We will respond within the timeframe required by applicable law (e.g., 45 days under CPRA).
Depending on your location, you may have the right to:
To exercise these rights, contact privacy@myeverjoy.com or support@myeverjoy.com. We may verify your identity before processing requests.
California residents have additional rights under the California Consumer Privacy Act as amended by the CPRA:
| Right | Description |
|---|---|
| Right to Know | Categories and specific pieces of personal information collected |
| Right to Delete | Request deletion of personal information |
| Right to Correct | Request correction of inaccurate information |
| Right to Opt-Out of Sale/Sharing | We do not sell or share personal information for cross-context behavioral advertising |
| Right to Limit Use of Sensitive PI | Limit use of sensitive personal information where applicable |
| Right to Non-Discrimination | We will not discriminate against you for exercising privacy rights |
Categories collected (last 12 months): Identifiers; personal information (Cal. Civ. Code § 1798.80); characteristics of protected classifications (age/birth year of children); commercial information; internet activity; audio/visual information (photos); professional information (school affiliation); education information; inferences (AI-generated tags and insights with consent).
Sources: Directly from you; your children (via your uploads); partner capture; schools (roster); automatically from device/browser; service providers.
Business purposes: See Section 3 above.
No sale of personal information.
Submit CPRA requests to privacy@myeverjoy.com. We will respond within 45 days. You may designate an authorized agent to submit requests on your behalf with written authorization.
Nevada residents may opt out of the sale of personal information. We do not sell personal information as defined under Nevada law. Direct inquiries to privacy@myeverjoy.com.
If GDPR applies, you have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your local supervisory authority. Our legal basis for processing is described in Section 3.7.
EverJoy is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
For EEA/UK transfers, we rely on appropriate safeguards such as Standard Contractual Clauses where required.
The Service may contain links to third-party websites (e.g., Stripe payment portal, school directory sources). We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information.
We may update this Policy from time to time. When we make material changes:
/re-consent when changes affect consent-dependent processingContinued use after the effective date constitutes acceptance of the updated Policy unless applicable law requires explicit re-consent.
EverJoy does not knowingly collect personal information directly from children under 13. All Child Profile data is provided by parents or legal guardians. See our Children's Privacy Notice (COPPA) (Volume 2) for additional information.
We are committed to making our policies and Service accessible. If you need this Policy in an alternative format, contact support@myeverjoy.com.
| Purpose | Contact |
|---|---|
| Privacy inquiries and rights requests | privacy@myeverjoy.com |
| Data Protection Officer | privacy@myeverjoy.com |
| General support | support@myeverjoy.com |
| EverJoy Memory LLC, [TODO: Registered business address — confirm with counsel] |
The following inventory describes personal information collected through each Service feature. This schedule is provided to satisfy transparency requirements under CPRA and to help parents understand data flows.
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| Email address | Yes | Account lifetime + 365 days | Supabase, Postmark/SendGrid |
| Full name | Yes | Account lifetime + 365 days | Supabase |
| Password hash | Yes | Account lifetime | Supabase Auth |
| Phone number | No | Account lifetime | Supabase |
| Timezone | No | Account lifetime | Supabase |
| Avatar image | No | Account lifetime | Supabase Storage |
| Email verification status | Yes | Account lifetime | Supabase Auth |
| Stripe customer ID | If subscribed | 7 years | Stripe |
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| First name | Yes | ~7 years | Supabase |
| Last name | Yes | ~7 years | Supabase |
| Birth year | Yes | ~7 years | Supabase |
| Date of birth | Partner schools only | ~7 years | Supabase (server-side only) |
| Grade level | Yes | ~7 years | Supabase |
| School affiliation | Yes | ~7 years | Supabase |
| Profile photo | No | ~7 years | Supabase Storage |
| Favorite subjects | No | ~7 years | Supabase |
| Graduation year | No | ~7 years | Supabase |
| School student ID | Partner schools | ~7 years | Supabase |
| Label preference (booklet type) | Partner schools | ~7 years | Supabase |
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| Photo/image files | Per upload | ~7 years | Supabase Storage |
| PDF documents | Per upload | ~7 years | Supabase Storage |
| Title and description | No | ~7 years | Supabase |
| Upload timestamp | Automatic | ~7 years | Supabase |
| OCR text (AI) | If AI consent | ~7 years | Supabase, OpenAI |
| AI summary (AI) | If AI consent | ~7 years | Supabase, OpenAI |
| Classification tags (AI) | If AI consent | ~7 years | Supabase, OpenAI |
| Growth dimension scores (AI) | If AI consent | ~7 years | Supabase, OpenAI |
| Storage path metadata | Automatic | ~7 years | Supabase |
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| Scanned artifact images | Per capture | ~7 years | Supabase Storage, Capture Partner |
| QR/barcode identifier | Per capture | ~7 years | Supabase |
| Capture timestamp | Automatic | ~7 years | Supabase |
| Capture partner ID | Automatic | ~7 years | Supabase |
| School ID | Automatic | ~7 years | Supabase |
| Handwritten name (if visible) | Incidental | ~7 years | Supabase Storage (not used for ID) |
| QA status | If applicable | ~7 years | Supabase |
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| Invited member email | Per invitation | Until revoked | Supabase, Postmark |
| Sharing permissions | Per invitation | Until revoked | Supabase |
| Comments and reactions | Per interaction | ~7 years | Supabase, invited members |
| View timestamps | Automatic | ~7 years | Supabase |
| Data Element | Required | Retention | Shared With |
|---|---|---|---|
| Yearbook layout selections | Per yearbook | ~7 years | Supabase |
| Selected memory IDs | Per yearbook | ~7 years | Supabase |
| AI recommendations (AI) | If AI consent | ~7 years | Supabase, OpenAI |
| Generated PDF | On generation | ~7 years | Supabase Storage |
| Download history | Automatic | ~7 years | Supabase |
| Data Element | Source | Retention | Shared With |
|---|---|---|---|
| Student first/last name | School upload | Agreement + 90 days | Supabase |
| Grade | School upload | Agreement + 90 days | Supabase |
| Date of birth | School upload | Agreement + 90 days | Supabase |
| School student ID | School upload | Agreement + 90 days | Supabase |
Note: Roster data is not accessible to parents for browsing. Used solely for server-side activation matching.
This schedule provides additional detail for California residents exercising rights under the CCPA as amended by the CPRA.
Category A — Identifiers: Name, email, IP address, account ID, Stripe customer ID, Student ID label codes.
Category B — Personal information (Cal. Civ. Code § 1798.80): Name, address (if provided), phone number.
Category C — Protected classification characteristics: Age/birth year of children; grade level.
Category D — Commercial information: Subscription plan, payment history, booklet purchase records.
Category E — Internet or network activity: Page views, feature usage, session data via PostHog.
Category F — Audio, visual, or similar information: Photos, images, PDFs, artwork, scanned schoolwork.
Category G — Professional or employment information: Not collected.
Category H — Education information: School affiliation, grade, roster matching data, captured schoolwork.
Category I — Inferences: AI-generated classifications, growth insights, yearbook recommendations (with consent).
Category J — Sensitive personal information: Date of birth (roster verification only); contents of photos/documents depicting children.
We use each category for the business purposes described in Section 3. We do not use sensitive personal information for purposes other than those permitted by CPRA (providing the Service, security, compliance).
See Section 10 and the Data Retention Policy (Volume 4).
Online: Email privacy@myeverjoy.com with subject line "California Privacy Request"
Required information:
Verification: We verify identity by confirming access to your registered email or requesting additional information for deletion requests.
Response timeline: 45 days (extendable by 45 days with notice).
Authorized agents must provide:
Submit to privacy@myeverjoy.com with subject "Authorized Agent Request."
We will not discriminate against you for exercising CPRA rights. We will not:
Virginia residents may exercise rights to access, correct, delete, obtain a copy, and opt out of targeted advertising, sale, and profiling. We do not sell personal data or engage in profiling in furtherance of decisions producing legal effects. Contact privacy@myeverjoy.com.
Colorado residents have similar rights under the Colorado Privacy Act. Contact privacy@myeverjoy.com.
Connecticut residents have similar rights under the Connecticut Data Privacy Act. Contact privacy@myeverjoy.com.
Utah residents have rights to access, delete, and opt out of sale. We do not sell personal data. Contact privacy@myeverjoy.com.
As comprehensive privacy laws take effect in additional states, we will update this schedule and honor applicable rights. Contact privacy@myeverjoy.com for current information.
Family Circle enables controlled sharing of Memories with invited family members (grandparents, co-parents, etc.).
Invited family members may view:
Invited family members may NOT:
Internal privacy rules (family-circle-privacy-rules.ts) enforce:
The Partner Capture Network implements privacy by design:
Capture Partners access only:
Capture Partners do NOT access:
Capture Partners complete certification including FERPA/COPPA awareness before serving schools.
The Student Growth Cloud tracks five growth dimensions:
Growth data is derived from memory content (with AI consent) and displayed in parent dashboards. Growth insights are informational only and do not constitute educational assessment.
We are committed to making privacy disclosures accessible:
Q: Does EverJoy sell my family's data? A: No. We do not sell personal information to third parties.
Q: Can my child's school see photos I upload? A: No. Schools do not have access to parent-uploaded Memories unless you explicitly share them.
Q: What happens to scanned schoolwork? A: Scanned artifacts appear in your Memory Inbox for review. You control whether to keep, edit, or delete them.
Q: Can I use EverJoy without AI? A: Yes. AI processing is optional and requires separate consent. Core storage and timeline features work without AI.
Q: How do I delete my child's data? A: Delete individual memories from your inbox, delete the Child Profile from Settings, or request full account deletion.
Q: What data goes to OpenAI? A: With AI consent, memory content, OCR text, and growth signals are sent to OpenAI for processing. See Section 7.
Q: How long do you keep data? A: Child profiles and memories are retained for approximately 7 years while your account is active. See Data Retention Policy.
Q: Is EverJoy FERPA compliant? A: EverJoy is designed with FERPA awareness. We act as a service provider to parents. Schools execute separate agreements for roster data.
This Privacy Policy is version 2026-07. It should be read together with the Terms of Service, Cookie Policy, Children's Privacy Notice, and applicable consent agreements.