Deara Privacy Policy

1. Key terms

• Memory. Content you keep in Deara: text, voice recordings, photos, videos, and the details attached to them, such as date, tags, location, and which child a Memory is about.
• Archive. The private space where a family's Memories are kept.
• Family Member. A person the Archive owner invites to add Memories to an Archive.
• Source Materials. The original audio recording, the raw text you type, and the transcript of a recording, kept as the authoritative record of a Memory.
• Outputs. Materials Deara generates from Source Materials, such as polished memory text, titles, Monthly Letters, and Keepsakes. Outputs do not replace Source Materials.

2. Information we collect

Using Deara without signing in. You can use Deara before signing in. When you first open the app, Deara assigns an account identifier to you, and your Archive and Memories are stored on Deara's servers under that identifier with the protections described in this Policy. Signing in later connects that account to your sign-in identity so you can reach it from another device or after reinstalling the app. If you never sign in and lose access to your device, we may not be able to verify which account is yours or restore access to it.

Information you provide.

• Account information: if you sign in, your name, email address, and the identifiers used to sign you in through Apple, Google, or email.
• Memories: the text you write, voice recordings you make, photos and videos you add, and the details you attach to them.
• Location: if you allow the app to use your location and choose to attach a location to a Memory, that location. You can decline the permission and still use Deara.
• Child profile information: a child's name, birth date, and a photo if you add one. You, the adult account holder, provide this information, not the child.
• Family and language details: the languages spoken in your family and the reading language you choose for Monthly Letters.
• Future Delivery details: the Memories or letters you seal, the delivery date you select, and the recipient email address you enter.
• Invitations: the contact details you use to invite a Family Member, and the status of each invitation.
• Communications: messages and attachments you send to our support.

Information generated when you use the Service.

• Transcripts and Outputs, as described in Section 1. Source Materials are kept separately from Outputs.
• Derived details, such as a child's approximate age at the time of a Memory.
• Attribution details: the author of each Memory and each person's role in an Archive.

Information collected automatically.

• Device and app information: device model, operating system version, app version, language, time zone, and identifiers needed to operate the app and deliver notifications, such as a push token.
• Usage and diagnostics: interactions with app features, crash logs, and performance data.
• Technical and security records: IP address, authentication tokens and internal account identifiers, access and security event logs, notification and email delivery status, consent and permission records, and metadata about AI requests, such as request identifiers, timestamps, the provider used, and processing status.
• Subscription information: your plan, subscription status, and transaction identifiers provided by Apple or Google and our subscription infrastructure. Payments are processed by Apple or Google. Deara does not receive your card number or bank details.
• Marketing measurement: if you installed Deara after seeing one of our ads, we may receive a privacy-preserving attribution signal from the platform. This does not identify the content of your Memories.

You do not have to provide any particular information, but some features need certain information to work. We do not sell personal information.

3. Information about people who do not have a Deara account

Deara users provide information about people who may not have their own Deara account:

• a person invited to become a Family Member (name, contact details, and invitation status);
• a person designated to receive a Future Delivery (email address);
• a child or another family member who appears in Memories (their name, image, voice, or details of events involving them).

We process this information only for the purposes described in this Policy and keep it as described in Section 9. If you are such a person and wish to ask about, object to, or request deletion of information concerning you, contact us at support@deara.app. We respond in accordance with applicable law, taking into account applicable exemptions and the rights of the user who keeps the Memory.

4. Children

Deara is designed for adults keeping memories about their families. You must be at least 18 years old to create an account. The Service is not directed to children, and we do not knowingly collect personal information directly from children.

Information about children in Deara is provided by adult account holders. When you add information about a child, you confirm that you are the child's parent or legal guardian, or that you have the guardian's permission.

If we receive credible information that an account was created by a child, or that information about a child was added without appropriate authority, we may restrict access to the relevant information while we review the matter and delete or otherwise act on it where required or permitted by law. Deara does not determine parental responsibility and does not adjudicate custody, guardianship, or family disputes.

A parent or guardian may contact us at support@deara.app regarding a child's information.

5. Sensitive and biometric information

Deara does not ask for sensitive information. Because Memories are free-form, the content you choose to keep may incidentally include sensitive information about you or your family, such as information relating to health, religion, or ethnicity. We process it only as reasonably necessary to provide the features you request, secure and support the Service, comply with law, and exercise or defend legal rights, and we do not use it for advertising.

Where applicable law requires a specific basis for processing sensitive information that you include, we rely on your explicit consent, which you give by choosing to include that information in a Memory and can withdraw by editing or deleting the Memory. When the information concerns your child, you give that consent as the child's parent or guardian.

Deara does not use facial recognition or voice identification to determine who a person is. Transcription converts speech into text; it is not used to identify anyone.

6. How we use information

We use personal information to:

• Provide the Service: keep your Memories, maintain your Archive, sync across your devices, and operate the sharing you set up with people you invite.
• Create Outputs: transcribe your voice recordings and generate polished memory text, Monthly Letters, and Keepsakes (Section 7).
• Operate Future Delivery: keep sealed content until the date you select and deliver or unlock it on that date. Deara does not guarantee that a delivery or notification will be delivered, received, opened, or acted upon.
• Personalize Deara for your family: for example, by suggesting prompts or reminders based on a child's age or the Memories you have kept.
• Manage subscriptions: determine your plan, limits, and entitlements.
• Send notifications and service messages you enable, subject to your notification settings.
• Communicate about Deara: show you messages in the app, and send you emails, about Deara's plans, features, and offers, as permitted by law (Section 14).
• Measure our own marketing using the signals described in Section 2.
• Provide support and respond to your requests.
• Keep the Service secure: prevent fraud, abuse, and unauthorized access.
• Comply with law and enforce our Terms of Use.
• Operate, troubleshoot, and improve the Service using usage, diagnostic, security, and performance information.

Deara personnel access the content of Memories only as needed to provide support you request, investigate abuse or a security incident, comply with law, or diagnose a specific problem.

Deara does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Legal bases (EEA, UK, Switzerland).

Where the GDPR or equivalent laws apply, we rely on the following bases:

• Performance of a contract: providing the Service you request, including your account, Archive, Outputs, Future Delivery, notifications you enable, subscriptions, and support.
• Consent, or explicit consent where required: sensitive information you choose to include (Section 5), optional reminders, and marketing messages where local law requires consent. You can withdraw consent at any time; withdrawal does not affect processing that took place before.
• Legitimate interests: securing and improving the Service, preventing fraud and abuse, personalization, measuring our own marketing, and telling you about Deara. You can object to processing based on legitimate interests as described in Section 10.
• Legal obligation: keeping records required by law and responding to lawful requests.

7. AI processing

Some features of Deara use artificial intelligence. Voice recordings are transcribed into text, and polished memory text, Monthly Letters, and Keepsakes are generated from the Memories you keep.

AI processing supports your content and does not replace it. Source Materials are kept separately from Outputs, and Outputs may contain mistakes, so you can always check an Output against the Source Materials.

AI transcription and generation are performed by third-party providers acting on our instructions. The current providers, the content sent to each, the feature each supports, and each provider's retention practices are listed at https://deara.app/subprocessors.

8. How we share information

We share personal information only as described below. We do not sell personal information and do not share it for targeted advertising.

• Within your Archive. Memories are visible to the people who have access to the Archive. Sealed Future Delivery content is private to its creator until delivery. Memories added by a Family Member are shown with attribution.
• Service providers. Companies that support the Service, under agreements that limit their use of your information to providing services to us: cloud hosting and storage; authentication; AI transcription and generation (Section 7 and https://deara.app/subprocessors); notification and email delivery; subscription infrastructure; analytics, performance, and crash reporting; and support infrastructure.
• Apple and Google. Purchases and certain platform features are provided by Apple or Google under their own terms and privacy policies.
• Legal reasons. Where required by law, legal process, or a governmental request, or where reasonably necessary to protect the rights, safety, or property of you, others, or Deara, or to detect, prevent, or address fraud or security issues.
• Business transfers. If Deara Labs LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction.
• At your direction. When you export your content, share a Keepsake, or send a Future Delivery to an email address, you decide who receives it. Copies that leave the Service are outside Deara's control.

9. Retention and deletion

We keep personal information for as long as it is needed for the purposes described in this Policy, and afterwards as needed to meet legal obligations, resolve disputes, enforce our agreements, and maintain security. In particular:

• Memories and Archive content are kept while the Archive exists, unless deleted by their author or removed as required by law. You can delete a Memory you wrote at any time in the app.
• Account deletion is available in the app. When you delete your account, it is scheduled for deletion, and you can cancel within the period shown in the app by signing back in. After that period, your account, the Archives you own, and everything in them, including sealed Future Deliveries you created, are deleted. Residual copies may remain in backups for a limited time until those backups are overwritten or expire.
• Memories a Family Member added to an Archive stay in that Archive after the Family Member leaves, is removed, or deletes their account, as shown in the app at the time. Requests to erase such content are handled under applicable law, taking into account the rights of the Archive owner and other family members.
• Usage, diagnostic, security, and support records are kept for as long as needed to operate, secure, troubleshoot, and improve the Service and to meet legal obligations, and no longer than the retention periods configured with our providers.
• Subscription and transaction records, consent records, and other records required by law are kept for as long as the law requires.
• Content sent to AI providers is retained by each provider as described at https://deara.app/subprocessors.

We may retain de-identified or aggregated information that does not identify you.

10. Your rights and choices

In the app you can edit or delete Memories you wrote, manage notifications, export your Memories and photos (voice recordings are not included in exports), and delete your account. Archive owners can manage who has access to their Archives.

Depending on where you live, you may have rights under applicable law to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. In the EEA, the UK, and Switzerland, you have the rights provided by the GDPR and equivalent laws, including the right to lodge a complaint with your supervisory authority. If the Service is made available in Türkiye, you have the rights listed in Article 11 of Law No. 6698 (KVKK). Residents of some US states have similar rights under state privacy laws.

To exercise these rights, use the controls in the app or contact us at support@deara.app. We will verify your request and respond as required by applicable law.

Deara does not track you across other companies' apps or websites and does not respond to browser Do Not Track signals.

11. International transfers

Deara Labs LLC is based in the United States, and personal information is processed in the United States and in countries where our service providers operate. Where the law of your country restricts transfers of personal information, we rely on legally recognized safeguards, which may include standard contractual clauses in our agreements with service providers and, where a provider is certified, the EU-US Data Privacy Framework and its UK extension. You can request information about the safeguards that apply to a particular transfer at support@deara.app.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your device and sign-in method secure.

13. Your responsibilities

Deara keeps what you choose to put in it. When you add content about another person, including a child or a family member, you confirm that you have the right or the necessary permission to do so. When you invite a Family Member, share content, or send a Future Delivery, you decide who can see your family's Memories; invite only people you trust. Once content leaves Deara or another person is given access to it, that person's handling of the content is outside Deara's control.

14. Communications

Service messages, such as invitations you send, account and subscription notices, and Future Delivery messages, are part of operating the Service. Push notifications require your permission and can be turned off at any time in your device settings or in the app. We may also show you messages in the app, and send you emails, about Deara's plans, features, and offers, as permitted by law. Marketing emails include an unsubscribe link.

15. Third-party services

The Service works with platforms and features we do not control, such as the App Store, Google Play, Sign in with Apple, Sign in with Google, and your device's share sheet. Their handling of your information is governed by their own terms and privacy policies.

16. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice as required by applicable law. The effective date above shows when the current version took effect.

17. Contact

Deara Labs LLC

777 Brickell Avenue, Suite 500, No. 94591, Miami, Florida 33131, United States

support@deara.app

Our privacy contact is responsible for Deara's compliance with this Policy. If the Service is made available in Türkiye, requests under KVKK may be sent to the same address.

Information practices for the Deara website and waitlist are described in our separate Website and Waitlist Privacy Notice.