Privacy policy

foreverus is a digital service for couples to save memories, messages and routines together. This policy explains what data we process, why, and your rights, in line with Brazil’s General Data Protection Law (Law No. 13.709/2018, LGPD).

1. Data controller

The data subject is the natural person the data refers to (you). The foreverus service is operated so each couple can use a shared space; account and content data are processed to provide the service contracted or requested through registration.

2. Data we may process

• Account data: e.g. email address and access credentials (password stored securely, not in plain text).
• Couple and space data: couple name (if provided), invite code, preferences (such as theme colour), dates and records you create (moments, photos, messages, love calendar, phrases), depending on features you use.
• Technical and usage data: information needed for security, diagnostics and service improvement (e.g. device type, activity logs within stated purposes), and, if enabled, aggregated analytics to understand site usage.
• Payments: if you subscribe to a paid plan, billing and payment data may be processed by our payment provider (e.g. Stripe) under that provider’s rules.

3. Purposes and legal bases

We process data to:

• Create and maintain your account and couple space (contract performance or pre-contractual steps).
• Invite a partner, share content between profiles and sync what you store in the service.
• Ensure security, prevent abuse and comply with legal obligations.
• Service-related communications (e.g. password recovery, important account notices).
• Measure site usage in aggregate where applicable, based on consent where required (e.g. non-essential cookies or analytics per your settings).

4. Sharing and subprocessors

The service may rely on infrastructure and software vendors (e.g. hosting, database, file storage, email, payments). They process data only as needed to provide contracted functions and under confidentiality and security obligations. We do not sell your personal data.

5. Retention

We keep data as long as needed to provide the service, meet legal obligations (e.g. tax or accounting, where applicable) and resolve disputes. When you delete your account or request deletion within what is technically and legally possible, we will erase or anonymise within a reasonable time, except minimum retention required by law.

6. Your rights (LGPD)

You may request, as applicable by law:

• Confirmation that we process data and access to data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymisation, blocking or deletion of unnecessary or excessive data;
• Portability to another provider, where applicable;
• Deletion of data processed on consent, where applicable;
• Information on entities with whom we have shared data;
• Withdrawal of consent where processing is based on consent.

To exercise rights or ask questions, contact us via the channel indicated on the site or account area with reasonable identification of the request.

7. Security

We adopt technical and organisational measures appropriate to the risk, including encrypted communications where applicable, good credential storage practices and access limitation. No system is 100% risk-free; we recommend strong passwords and care with devices where sessions stay signed in.

8. Changes

We may update this policy to reflect legal or service changes. The date at the top shows the last revision. Continued use after material changes may imply acceptance as applicable; for substantial changes we will try to notify by appropriate means (e.g. on the site or by email).