Privacy

Fond Farewell delivers your recorded messages to the people you choose after a trusted contact reports your passing. To do that we store only what the service needs.

What we store

Your account: your Sign in with Apple identifier, email address and name.
Your content: recipients' names, email addresses and mobile numbers, the notes and videos you record for them, and your trusted contacts' names, email addresses and mobile numbers.
If you pick someone from your Contacts, the app receives only the person you pick. It never reads your address book.
Device: a push notification token for each device you sign in on.
Purchase: the App Store transaction identifier for your one-time purchase.

How it's used

Only to run Fond Farewell: to sign you in, alert you, invite your trusted contacts, and deliver your messages. All of it is linked to your account and used for app functionality only.

No analytics SDKs, no advertising, no tracking, and nothing is sold or shared with third parties beyond the infrastructure that runs the service (Cloudflare for hosting, storage and email delivery; Apple for sign-in, purchases and push notifications; Telnyx for text messages).

Security

Data is encrypted at rest by Cloudflare. Videos are private and are only served through a link that contains a long random token. Trigger addresses and links are unique per trusted contact and can be revoked by removing that contact. Messages are not end-to-end encrypted, because the service has to be able to deliver them when you can't.

Deleting your data

Settings → Delete account removes your account, recipients, notes, videos, contacts and sessions immediately, cancels any pending report, and tells your trusted contacts their role has ended. After your messages have been delivered, recipients' viewing pages, notes and videos stay available, and each recipient can download their video and letter to keep on their own device.

Contact

support@elier.ai