PERPETUA← Back

Legal

Privacy Notice

Last updated: July 2025

Who we are

Perpetua is a digital legacy platform that lets you record your voice, stories and memories so that the people you love can connect with who you really were. We are currently in private beta.

For any privacy questions, contact us at thorvaldursk@gmail.com.

What we collect

When you create an account and use Perpetua, we collect:

  • Your email address (for login)
  • Profile information you provide — name, date of birth, occupation, life details, passions
  • Audio recordings you make within the app
  • Transcripts of those recordings, generated automatically
  • A profile photo, if you choose to upload one
  • Basic usage data (which pages you visit) via Vercel Analytics

We do not collect payment information, location data, or any data from your device beyond what you explicitly provide.

How we use your data

Your data is used solely to provide the Perpetua service:

  • To build and maintain your AI persona based on your recordings and profile
  • To allow people you have granted access to hold conversations with your persona
  • To improve the accuracy and quality of your persona over time as you add more recordings

We do not sell your data, use it for advertising, or share it with third parties beyond the processors listed below.

Third-party processors

To deliver the service, your data passes through the following trusted processors:

  • Supabase — stores your account, profile, recordings and transcripts securely in the EU.
  • OpenAI (Whisper) — transcribes your audio recordings into text. Audio is sent to OpenAI's API and is not used to train their models under our API agreement.
  • Anthropic (Claude) — powers the AI persona conversations. Your transcripts and profile data are sent as context with each conversation. Anthropic does not use API data for model training.
  • Vercel — hosts the application and collects anonymised page view analytics.

Who can access your legacy

Your recordings, profile and persona are private by default. Only you can access them when signed in.

You can choose to grant specific people access to your persona by sharing a link. Only people you explicitly invite can hold conversations with your AI persona.

How long we keep your data

We keep your data for as long as your account is active. If you ask us to delete your account, we will remove all your personal data — profile, recordings, transcripts and persona — within 30 days.

To request deletion, email thorvaldursk@gmail.com with the subject line "Delete my account".

Your rights (GDPR)

If you are based in the EU or EEA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Export your data in a portable format
  • Object to or restrict how we process your data

To exercise any of these rights, email thorvaldursk@gmail.com. We will respond within 30 days.

Security

All data is encrypted in transit (HTTPS) and at rest. Recordings are stored in a private storage bucket — only authenticated users can access their own files. We use row-level security on all database tables.

As a beta product, we strongly recommend not uploading recordings you would not want reconstructed in the event of a security incident, and to let us know immediately at thorvaldursk@gmail.com if you notice anything unusual.

Changes to this notice

If we make significant changes to how we handle your data, we will notify beta users by email before those changes take effect.