Privacy policy

Privacy Policy

Effective Date: September 2, 2026 Last Updated: September 2, 2026

Tell Me Forever LLC, doing business as Tell Me Forever ("Tell Me Forever," "we," "us," or "our"), respects the privacy of the people whose stories, recordings, and information are entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, and delete personal information when you use Tell Me Forever, including our website, applications, interview tools, recording features, telephone recording services, transcription services, scheduled-message features, book creation features, and related services (collectively, the "Service").

Tell Me Forever exists to help people preserve personal stories, memories, interviews, and messages. Those recordings can contain deeply personal information. We therefore believe the most important data practices should be stated clearly rather than buried in a list of vendors.

Important Privacy Disclosures

Your recordings are sent to AssemblyAI for transcription

When you submit an audio recording for transcription, the audio recording itself is uploaded or transmitted to AssemblyAI so that AssemblyAI can process the audio and create a transcript and related transcription data.

This means AssemblyAI processes the contents of the recording as necessary to provide transcription services. A recording may contain personal, sensitive, or private information depending on what the speaker chooses to discuss.

Tell Me Forever does not send recordings to AssemblyAI for advertising purposes.

Your recordings are stored using Cloudflare R2

Tell Me Forever uses Cloudflare R2 for object storage. Audio recordings and other files associated with the Service may be stored in Cloudflare R2.

Depending on the feature, Cloudflare R2 may store audio recordings, generated documents, book files, transcripts or transcript-related files, images or other media, and other content necessary to provide the Service.

Advertising and analytics providers do not receive your recordings or transcripts from us for advertising

We use analytics, advertising, attribution, and website-experience tools, including services provided by Google, Meta, TikTok, Pinterest, and Microsoft.

These services may receive website activity, advertising identifiers, device or browser information, conversion events, purchase information, and matching identifiers as described below.

We do not intentionally send these advertising or analytics providers the contents of your private audio recordings, transcripts, interview answers, interview questions, scheduled personal messages, or book manuscript content for advertising or audience-targeting purposes.

Hashed identifiers are not anonymous

For certain advertising measurement and matching features, we may send an advertising provider a SHA-256 hashed version of an email address or other identifier.

Hashing converts the original value into a fixed string and means we do not need to transmit the email address in readable form in that particular data field.

However, a hashed email address is not anonymous information. The same email address generally produces the same SHA-256 hash, and an advertising provider that already has the same email address can hash its copy and compare the two values.

We therefore treat hashed identifiers as personal or pseudonymous information, not as anonymous information.

1. Who This Policy Applies To

This Privacy Policy applies whether you are:

• An account holder.
• A person invited to participate in an interview.
• A person recording an answer without creating an account.
• A recipient of a scheduled "Message in a Bottle" or similar scheduled message.
• A person whose voice or personal information appears in content stored through Tell Me Forever.
• A purchaser of a Tell Me Forever product or service.
• A visitor to our website.

Tell Me Forever often involves more than one person, and not every person whose information appears in the Service will have created a Tell Me Forever account.

2. Account Holders

An account holder is the person who creates a Tell Me Forever account.

An account holder may:

• Create interviews.
• Choose pre-made questions.
• Create custom questions.
• Invite family members, friends, or other participants.
• Record responses.
• Review recordings.
• Review or edit transcripts.
• Trim or finalize recordings.
• Purchase recording time or other products or services.
• Create printed books.
• Generate or use sharing links or QR codes.
• Schedule future messages.

Account holders provide account information to us directly.

3. Interview Participants

An interview participant is someone invited to answer questions or provide a recording.

For example, an account holder may create an interview for a parent, grandparent, spouse, family member, friend, or another person.

A participant may never create a Tell Me Forever account.

An account holder may provide us with a participant's:

• Name.
• Email address.
• Telephone number.
• Relationship or descriptive information.
• Questions assigned to the participant.

We use participant contact information to provide the interview, deliver invitations, facilitate recording, send related service communications, and operate the requested features.

We do not treat an interview invitation as consent to receive unrelated marketing.

4. Scheduled-Message Recipients

A scheduled-message recipient is someone designated to receive a future recording or message through a scheduled-delivery feature.

A recipient may not have a Tell Me Forever account and may not know about the scheduled message until we contact them.

For scheduled messages, we may process:

• Recipient name.
• Recipient email address or telephone number.
• Scheduled delivery date and time.
• Sender information.
• The recording or message being delivered.
• Delivery status.
• Attempts to deliver the message.
• Access or open information where technically available.
• Recipient opt-out or suppression status.

We use this information as reasonably necessary to store, manage, and deliver the scheduled message and to prevent unwanted communications.

A recipient may opt out of future Tell Me Forever communications where an opt-out option is provided.

5. Account Information We Collect

When you create, use, or maintain an account, we may collect:

• Name.
• Email address.
• Password credential.
• Time zone.
• Account preferences.
• Account creation date.
• Account status.
• Recording-time balance.
• Purchase and transaction history.
• Service activity.
• Records of acceptance of our Terms of Service and Privacy Policy.
• Advertising-attribution information associated with the account.
• Internal account identifiers.

Passwords are not stored in readable form. They are stored using password-hashing technology.

6. Information About Interview Participants

When an account holder creates an interview for another person, we may receive or create information including:

• Participant name.
• Email address.
• Telephone number, where telephone recording is used.
• Relationship or descriptive information entered by an account holder.
• Assigned interview questions.
• Invitation status.
• Delivery status.
• Opt-out status.
• Recording participation history.
• Recording status.
• Transcript status.
• Approval or finalization status.

Participant email addresses and telephone numbers are used to provide the interview and related communications.

We do not use participant contact information supplied by an account holder to send unrelated marketing merely because the person was invited to an interview.

Where implemented as part of the Service, participant email addresses and telephone numbers may be encrypted at rest using application-level or infrastructure-level encryption.

Telephone numbers may be masked when displayed through the Service, such as by displaying only the last four digits.

7. Recordings and Interview Content

Tell Me Forever may process and store content including:

• Audio recordings.
• Interview responses.
• Interview questions.
• Transcripts.
• Word-level or segment-level timestamps.
• Editing information.
• Accepted, rejected, approved, or finalized responses.
• Generated PDFs.
• QR-code-associated recording links.
• Book content.
• Photographs or other media that you choose to add.
• Scheduled personal messages.
• Metadata associated with recordings or interviews.

Recordings are private by default.

We do not intentionally publish private recordings in a public directory or make them searchable by the general public.

You may choose to share access to content. For example, a QR code in a printed book or a sharing link may allow another person to access an associated recording.

You should treat a QR code or sharing link as access to the content itself. Anyone who obtains a functioning link or QR code may be able to access the associated content, depending on the sharing controls in effect.

8. Sensitive Information That May Appear in Recordings

A personal story can contain almost any kind of information.

Depending on what a participant chooses to discuss, recordings or transcripts may reveal information about:

• Family relationships.
• Health or medical experiences.
• Religion.
• Political opinions.
• Race or ethnicity.
• Sexual orientation.
• Financial matters.
• Employment.
• Military service.
• Legal matters.
• Locations.
• Personal history.
• Trauma or difficult life experiences.
• Other sensitive or private matters.

Tell Me Forever generally does not require participants to disclose these categories of information.

If sensitive information appears in the Service, it is generally because a person chose to include it in a story or another user included it in content submitted to the Service.

We process such information only as reasonably necessary to provide the Service and for the other purposes described in this Privacy Policy.

9. Voice and Biometric Information

Tell Me Forever stores audio containing people's voices.

We do not use voice recordings to authenticate users or create a Tell Me Forever voiceprint for the purpose of identifying a person across unrelated recordings.

We may process audio for:

• Recording.
• Playback.
• Storage.
• Transcription.
• Editing.
• Trimming.
• Organization.
• Book creation.
• QR-code or sharing features.
• Scheduled-message delivery.
• Customer support.
• Technical troubleshooting.
• Security and abuse investigation where necessary.

Certain speech-processing technologies may technically analyze characteristics of speech while providing their service.

Our use of a transcription provider does not mean Tell Me Forever uses your voice as a biometric authentication system.

10. Transcription and AssemblyAI

Tell Me Forever uses AssemblyAI to provide automated transcription and related speech-processing services.

The audio itself is sent to AssemblyAI

When transcription is requested, the entire audio file or audio stream needed for transcription is transmitted or uploaded to AssemblyAI.

AssemblyAI must process the audio in order to create the transcript and related transcription information.

Depending on the recording, the audio sent to AssemblyAI may contain names, voices, personal stories, family information, or sensitive personal information spoken by participants.

Transcription output

AssemblyAI may return information such as:

• Transcript text.
• Timestamps.
• Segmentation information.
• Speaker-related processing results where supported and enabled.
• Other speech-processing output necessary for the features we provide.

Automated transcripts can contain errors.

AI training

Tell Me Forever does not use private recordings or transcripts to train Tell Me Forever's own general-purpose artificial intelligence models.

We do not sell recordings or transcripts as AI-training datasets.

AssemblyAI processes information according to the agreements, settings, data controls, and terms applicable to our use of its services. Provider retention or model-training practices may depend on the product, account configuration, or contractual settings in effect.

11. Cloudflare R2 Storage

Tell Me Forever uses Cloudflare R2 as an object-storage provider.

Depending on the feature, Cloudflare R2 may store:

• Audio recordings.
• Edited recordings.
• Original recordings retained temporarily during editing or recovery periods.
• Generated documents.
• Book files.
• Transcript or transcript-related files where applicable.
• Photographs or other uploaded media.
• Other content necessary to provide the Service.

Audio files are not intentionally exposed through permanent unrestricted public object-storage addresses.

Tell Me Forever may use signed, temporary, authenticated, or otherwise access-controlled URLs or mechanisms to provide playback and file access.

Cloudflare may process technical information associated with storage requests as necessary to operate its infrastructure.

12. Payment Information

Payments are processed by third-party payment processors, including Stripe.

When you make a purchase, Stripe may collect information such as:

• Card number.
• Expiration date.
• Security code.
• Billing address.
• Cardholder name.
• Payment authentication information.

Your full payment-card credentials are handled by the payment processor and are not stored in Tell Me Forever's application database.

We may receive and retain transaction information such as:

• Transaction identifier.
• Amount paid.
• Date of purchase.
• Payment status.
• Refund status.
• Currency.
• Product purchased.
• Limited payment-method information, such as card brand and last four digits where provided by the processor.

We retain transaction records as reasonably necessary for accounting, taxation, fraud prevention, chargebacks, dispute handling, and legal compliance.

13. Book Orders and Shipping Information

If you order a printed book or another physical product, we may collect:

• Recipient name.
• Shipping address.
• Billing information.
• Book order information.
• Book content necessary to manufacture the order.
• Shipping and delivery status.

We provide the information necessary to manufacture and ship your order to applicable printing, fulfillment, and shipping providers.

Those providers may receive the book content they need to produce the product.

We do not intentionally provide them with unrelated recordings or account content that is not necessary to fulfill the order.

Shipping addresses maintained by Tell Me Forever are generally removed from active systems approximately 60 days after fulfillment, unless longer retention is reasonably necessary for:

• A refund.
• Replacement.
• Shipping dispute.
• Fraud investigation.
• Chargeback.
• Tax or accounting requirements.
• Another legal obligation.

Printing, shipping, and payment providers may separately retain information according to their own legal and operational obligations.

14. Information Collected Automatically

When you visit or use Tell Me Forever, we and our infrastructure, analytics, security, and advertising providers may automatically receive technical information such as:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Language.
• Approximate location derived from IP address.
• Date and time of access.
• Page URLs.
• Referring page or website.
• Pages or features accessed.
• Clicks or interactions.
• Application errors.
• Security events.
• Authentication activity.
• Request and server logs.
• Session identifiers.
• Advertising identifiers.
• Cookie identifiers.
• Campaign identifiers.
• Device and browser characteristics.
• User-agent information.

We may use this information to:

• Operate the Service.
• Authenticate users.
• Protect accounts.
• Detect abuse.
• Troubleshoot errors.
• Maintain reliability.
• Investigate security incidents.
• Prevent fraud.
• Understand use of our public website.
• Improve website usability.
• Measure advertising.
• Attribute registrations and purchases to advertising campaigns.

15. Cookies and Similar Technologies

Tell Me Forever and the companies that help us operate, measure, secure, and advertise the Service may use:

• Cookies.
• Local storage.
• Session storage.
• Pixels.
• Tags.
• SDKs.
• Server-side event reporting.
• Advertising click identifiers.
• Similar technologies.

Essential technologies may be used to:

• Keep users signed in.
• Maintain account and session security.
• Remember preferences.
• Prevent cross-site request forgery or similar attacks.
• Maintain checkout state.
• Detect abuse.
• Operate core Service features.

Analytics and advertising technologies may be used to:

• Count visits.
• Understand website usage.
• Measure campaign performance.
• Attribute registrations or purchases to advertisements.
• Measure conversions.
• Improve advertising effectiveness.
• Create or measure advertising audiences where permitted by applicable law and the user's privacy choices.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will seek consent or provide the required choices.

Browser settings and privacy tools may also allow you to limit or delete cookies, although doing so may affect Service functionality.

16. Analytics and Website-Experience Tools

We use analytics and website-experience tools to understand how our website performs and how visitors interact with it.

Google Analytics

We use Google Analytics to measure visits and understand how people reach and use portions of our website.

Depending on our configuration and your privacy choices, Google Analytics may process information such as:

• Page views.
• Referring sources.
• Campaign information.
• Device and browser information.
• Approximate geographic information.
• Interaction and engagement information.
• Cookie or device identifiers.
• Conversion-related events.

We do not intentionally send private recordings, transcript contents, interview answers, interview questions, or private book content to Google Analytics.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with portions of our website and to improve usability.

Clarity may collect or process information including:

• Page views.
• Clicks.
• Mouse movements.
• Scrolling.
• Navigation activity.
• Device and browser information.
• Session and cookie identifiers.
• Page or DOM information necessary to reconstruct website interactions.
• Performance and diagnostic information.

Clarity may create session replays, which are reconstructed representations of how a visitor interacted with a page. They are not traditional video recordings from a person's camera.

We do not use Microsoft Clarity for the purpose of recording the contents of private audio stories, and we do not intentionally provide Clarity with private audio recordings or transcript content for analytics or advertising purposes.

We use reasonable configuration and placement practices intended to keep private recording and interview content out of analytics and session-replay tools.

17. Advertising and Conversion Measurement

Tell Me Forever may advertise through third-party advertising platforms.

Our current advertising and measurement partners may include:

• Google, including Google Ads and related Google advertising or conversion-measurement tools.
• Meta, including Facebook and Instagram advertising, Meta Pixel, Conversions API, Advanced Matching, or related Meta Business Tools.
• TikTok, including TikTok Pixel, Events API, Advanced Matching, or related TikTok for Business tools.
• Pinterest, including the Pinterest Tag, conversion measurement, Enhanced Match, or related Pinterest advertising tools.

We may add, remove, or replace advertising providers over time. When a change materially affects how personal information is processed, we will update this Privacy Policy as appropriate.

What advertising tools may collect

Depending on the provider, our configuration, your actions, and your privacy choices, advertising tools may receive information such as:

• Page visits.
• Website events.
• Registration events.
• Purchase events.
• Purchase value.
• Currency.
• Transaction or order identifiers.
• Event timestamps.
• Page URL.
• Referring URL.
• Advertising campaign information.
• Advertising click identifiers.
• Pixel, cookie, browser, or device identifiers.
• IP address.
• User-agent information.
• Device and browser information.
• Hashed matching identifiers.

Advertising platforms may use these signals for purposes such as:

• Conversion measurement.
• Attribution.
• Campaign reporting.
• Ad-delivery optimization.
• Audience matching.
• Advertising measurement.
• Fraud and security.
• Showing or improving advertising where permitted by applicable law and your choices.

18. Hashed Email Addresses and Matching Identifiers

For some advertising and conversion-measurement features, Tell Me Forever or a browser-based advertising tool may transform an email address or another supported identifier using a cryptographic hashing function such as SHA-256 before the value is sent to an advertising platform.

This may be used by providers such as Meta, TikTok, Google, Pinterest, or other advertising providers that support hashed matching.

Hashing does not make the information anonymous

We do not describe these hashed values as anonymous.

A SHA-256 hash is one-way in the sense that the original email address is not intended to be directly readable from the hash itself.

However, email addresses are predictable values. A company that already knows an email address can apply the same hashing process to its copy and compare the result.

Advertising platforms use hashed identifiers precisely because they may be able to match the value to an account or other identifier they already possess.

Accordingly, Tell Me Forever treats hashed email addresses and similar matching identifiers as personal or pseudonymous information, not anonymous information.

Depending on the integration, we may send

• SHA-256 hashed email address.
• Hashed internal or external account identifier.
• Advertising click identifier.
• Browser or pixel identifier.
• Event identifier.
• Registration event.
• Purchase event.
• Purchase amount.
• Currency.
• Transaction identifier.
• Event timestamp.
• IP address or user-agent information where required or supported by the provider and permitted by our configuration.

Not every provider receives every category listed above.

19. What We Do Not Send Advertising Platforms

For advertising, attribution, audience matching, or conversion measurement, we do not intentionally send advertising platforms:

• Audio recordings.
• Transcript text.
• Interview answers.
• Interview questions.
• The contents of interviews.
• Scheduled personal messages.
• Private book manuscript content.
• The names of people being interviewed solely because they appear in an interview.
• Information about sensitive topics discussed inside a recording.

Our advertising integrations are intended to measure website activity and business events such as registrations and purchases, not the substance of the stories preserved through Tell Me Forever.

20. Google Advertising

We may use Google Ads and related Google measurement technology to advertise Tell Me Forever and determine whether an advertisement resulted in a registration, purchase, or other conversion.

Depending on our implementation, Google may receive:

• Advertising click identifiers.
• Website or conversion events.
• Transaction information.
• Purchase value.
• Currency.
• Event timestamps.
• Browser or device information.
• Cookie or advertising identifiers.
• Hashed first-party information, such as a hashed email address, where enhanced conversion or similar features are enabled.

Hashed information provided for matching is not anonymous; Google may compare a hashed identifier with hashed identifiers associated with Google users or advertising interactions.

We do not intentionally provide Google Ads with the contents of recordings, transcripts, interview questions, interview answers, or private stories for advertising.

21. Meta Advertising

We may use Meta Business Tools, including tools associated with Facebook and Instagram advertising.

Depending on our implementation, this may include:

• Meta Pixel.
• Conversions API.
• Advanced Matching.
• Related advertising, attribution, audience, or measurement tools.

Meta may receive information such as:

• Page visits.
• Registration events.
• Purchase events.
• Purchase amounts.
• Currency.
• Event timestamps.
• Meta click or browser identifiers.
• IP address.
• User-agent information.
• Hashed matching information, including a SHA-256 hashed email address where enabled.

A hashed email address sent to Meta is not anonymous information. It is a matching identifier that Meta may be able to associate with a Meta account or other information already held by Meta.

We do not intentionally send Meta the contents of recordings, transcript text, interview questions, interview answers, or private story content.

22. TikTok Advertising

We may use TikTok for Business tools, which may include:

• TikTok Pixel.
• TikTok Events API.
• Advanced Matching.
• Related conversion, attribution, advertising, or audience tools.

Depending on the implementation, TikTok may receive:

• Page visits.
• Website interaction events.
• Registration events.
• Purchase events.
• Purchase amount.
• Currency.
• Advertising or event information.
• Click identifiers.
• Event timestamps.
• IP address.
• User-agent information.
• Cookie or browser identifiers.
• SHA-256 hashed email or supported matching identifiers.

A hashed email address sent to TikTok is not anonymous information. It is a pseudonymous matching identifier that may be used by TikTok to associate a website event with information TikTok already has.

We do not intentionally send TikTok private recordings, transcript text, interview questions, interview answers, or private story content.

23. Pinterest Advertising

We may use Pinterest advertising and measurement tools, including the Pinterest Tag, conversion measurement, and Enhanced Match where enabled.

Depending on the implementation, Pinterest may receive:

• Page visits.
• Registration or signup events.
• Checkout or purchase events.
• Purchase amount.
• Currency.
• Page URL.
• Referring URL.
• Screen or browser information.
• Pinterest cookie or advertising identifiers.
• Event timestamps.
• Hashed email addresses or other supported matching identifiers.

Pinterest's Enhanced Match functionality may use a hashed email address to associate a website event with Pinterest activity.

A hashed email address sent to Pinterest is not anonymous information merely because it has been hashed.

We do not intentionally send Pinterest private recordings, transcript text, interview questions, interview answers, or private story content.

24. How We Receive Information

We receive personal information from several sources.

Directly from you

For example, when you:

• Create an account.
• Record yourself.
• Submit an interview response.
• Edit an interview.
• Contact support.
• Place an order.
• Schedule a message.
• Enter contact information.
• Use a sharing feature.

From another Tell Me Forever user

For example, an account holder may provide a participant's:

• Name.
• Email address.
• Telephone number.
• Relationship or descriptive information.

Automatically

Our website, application, hosting providers, security systems, analytics providers, and advertising tools may automatically generate information when the Service is used.

From service providers

We may receive information from companies helping us operate the Service, such as:

• Payment status from Stripe.
• Email delivery information from our email provider.
• Telephone-call information from our telephone provider.
• Transcription results from AssemblyAI.
• Hosting or storage information from Cloudflare or other infrastructure providers.
• Shipping information from fulfillment providers.
• Analytics information from Google Analytics.
• Website interaction information from Microsoft Clarity.
• Advertising-attribution or conversion information from Google, Meta, TikTok, Pinterest, or other advertising providers we use.

25. Why We Use Personal Information

We may use personal information to:

• Create and manage accounts.
• Authenticate users.
• Provide recording features.
• Store recordings.
• Send interview invitations.
• Place requested telephone calls.
• Record participant responses.
• Generate transcripts.
• Allow recordings to be reviewed, edited, trimmed, approved, and finalized.
• Generate PDFs.
• Provide QR-code and sharing experiences.
• Create printed books.
• Process purchases.
• Ship physical products.
• Deliver scheduled messages.
• Respect opt-out requests.
• Provide customer support.
• Detect fraud or abuse.
• Protect the Service.
• Maintain system reliability.
• Troubleshoot technical issues.
• Investigate security incidents.
• Understand website usage.
• Improve website usability.
• Measure advertising.
• Attribute registrations and purchases to marketing campaigns.
• Improve campaign performance where permitted by law.
• Maintain accounting and tax records.
• Enforce our Terms of Service.
• Comply with applicable law.
• Establish, exercise, or defend legal claims.

We do not use participant contact information supplied by another user for unrelated direct marketing merely because that person was invited to an interview.

26. Recording and Consent

Tell Me Forever is designed so that the person providing a recording knows that recording is occurring.

When recording through a website or application interface, the participant must take an action to begin recording.

For telephone recording, Tell Me Forever may play a spoken notice before recording begins explaining that a recording will be made and giving the participant an opportunity to decline.

The notice may itself be included in the resulting recording.

Recording, wiretapping, and consent laws vary by jurisdiction.

Account holders and participants are responsible for complying with applicable recording laws as described in our Terms of Service.

Tell Me Forever's recording notices are intended to support informed participation but are not a substitute for any additional consent independently required by law.

27. Service Providers

Tell Me Forever relies on third-party providers to operate the Service.

Our providers may include the following categories and companies.

AssemblyAI

Used for transcription and related speech processing.

The recording audio itself is sent to AssemblyAI when transcription is requested.

Cloudflare, including Cloudflare R2

Used for infrastructure, security, delivery, and object storage.

Recordings and other Service files may be stored in Cloudflare R2.

Stripe

Used for payment processing.

Email providers

Used to deliver account notices, invitations, scheduled-message communications, receipts, support communications, and other email.

Telephone providers

Used where Tell Me Forever provides telephone-based invitation, recording, or communication features.

Railway and other hosting or infrastructure providers

Used to host portions of Tell Me Forever's application, databases, workers, or other infrastructure where applicable.

Google

Used for analytics, advertising, conversion measurement, and related services, including Google Analytics and Google Ads where enabled.

Meta

Used for Facebook and Instagram advertising, attribution, conversion measurement, audience matching, and related Meta Business Tools where enabled.

TikTok

Used for TikTok advertising, attribution, conversion measurement, matching, and related TikTok for Business tools where enabled.

Pinterest

Used for Pinterest advertising, attribution, conversion measurement, matching, and related advertising tools where enabled.

Microsoft

Used for Microsoft Clarity website analytics, usability measurement, and session-replay functionality where enabled.

Printing and fulfillment providers

Used to manufacture and deliver physical books and other products.

These providers receive information according to the function they perform. We do not provide every provider with every type of information we hold.

28. Service Providers and Their Own Obligations

We select service providers to perform specific functions for Tell Me Forever.

Providers acting on our behalf may process information under contracts, data-processing terms, platform terms, privacy policies, and technical settings that govern our relationship with them.

Providers may also process or retain certain information independently where necessary to:

• Comply with law.
• Maintain security.
• Prevent fraud.
• Operate their services.
• Resolve billing issues.
• Maintain required business records.
• Enforce their terms.
• Provide advertising or measurement functions under their own applicable terms.

Their handling of information may also be governed by their own privacy policies.

29. Sale, Sharing, and Targeted Advertising

Tell Me Forever does not sell your private recordings, transcripts, participant contact information, or private story content for money.

We do not sell recordings as AI-training datasets.

We do not rent participant contact lists.

We do, however, use advertising and measurement technologies as described in this Privacy Policy. Depending on the law that applies where you live, some disclosures to advertising platforms, use of advertising cookies, audience matching, or cross-site advertising activity may legally be considered a "sale," "sharing," "targeted advertising," or "cross-context behavioral advertising" even when no money is exchanged for the personal information.

Where applicable law gives you a right to opt out of such processing, we will provide or honor the legally required opt-out mechanism.

Nothing in this section changes our commitment that we do not intentionally provide advertising platforms with private recording content, transcript text, interview answers, interview questions, or private story content for advertising.

30. Other Disclosures of Information

Outside the service providers and advertising/analytics disclosures described above, we may disclose information in the following circumstances.

At your direction

We may disclose information when you intentionally direct us to do so.

For example, sharing a recording or ordering a book requires us to provide applicable information to another person or provider.

Legal requirements

We may disclose information if we reasonably believe disclosure is required by:

• Applicable law.
• Subpoena.
• Court order.
• Search warrant.
• Other valid legal process.

Where legally permitted and appropriate, we may attempt to notify an affected account holder before disclosing information.

Safety, fraud, and security

We may disclose information when reasonably necessary to:

• Investigate fraud.
• Protect the security of the Service.
• Prevent unlawful activity.
• Protect the safety or rights of a person.
• Investigate misuse or abuse.
• Respond to a security incident.

Business transactions

If Tell Me Forever is involved in a merger, acquisition, financing, restructuring, bankruptcy, reorganization, or sale of some or all of its business or assets, personal information may be transferred as part of that transaction.

Any successor would remain subject to applicable privacy obligations concerning transferred personal information.

31. Who Can Access a Recording

Tell Me Forever recordings are private by default, but private does not necessarily mean only one person can ever access them.

Access may be available to:

• The account holder.
• The person who recorded the response.
• People the account holder intentionally shares the recording with.
• People who receive an authorized QR code or sharing link.
• Tell Me Forever personnel when access is reasonably necessary for support, security, abuse investigation, privacy requests, or legal compliance.
• Service providers processing the recording to provide a requested feature, including AssemblyAI for transcription and Cloudflare for storage.

We do not intentionally publish private recordings in public search engines or public recording directories.

QR codes and sharing links

A QR code may remain usable for a long period even if the underlying audio is delivered using signed or temporary technical URLs.

If you place a QR code in a printed book or give a sharing link to another person, anyone who later obtains access to that QR code or link may be able to access the associated content.

Do not publicly share a QR code or private recording link unless you are comfortable with the people who obtain it accessing the content.

32. Data Retention

We try to retain personal information only for as long as it is reasonably needed for the purpose for which it was collected.

Different information may have different retention periods.

Active recordings

Recordings are generally retained while the associated account and recording remain active.

Deleted recordings

When an account holder deletes a recording, the recording may enter a 30-day recovery or trash period.

During that period, restoration may be possible.

After the recovery period expires, the recording and associated data are scheduled for removal from active production storage and databases.

Copies may remain temporarily in routine backups, disaster-recovery systems, content-delivery caches, or provider systems until those systems are rotated, overwritten, or expire.

Originals of edited recordings

When Tell Me Forever creates an edited version of a recording, we may retain the original recording for approximately 30 days so an edit can be reversed or corrected.

After that period, an unnecessary original may be deleted.

AssemblyAI processing copies

Audio and transcription output processed by AssemblyAI may be retained by AssemblyAI for periods determined by our product configuration, deletion requests, contractual settings, and AssemblyAI's then-current service terms.

Tell Me Forever may request or configure deletion according to available provider controls.

Account information

Account information is generally retained while an account exists.

When an account is deleted, we delete or de-identify information that is no longer reasonably necessary, subject to limited retention for:

• Accounting.
• Taxes.
• Fraud prevention.
• Security.
• Disputes.
• Chargebacks.
• Legal obligations.
• Suppression records.
• Advertising attribution records where reasonably necessary.

Shipping addresses

Shipping addresses maintained by Tell Me Forever are generally removed from active systems approximately 60 days after fulfillment, unless continued retention is reasonably necessary for an order problem, accounting, fraud prevention, or legal requirements.

Payment records

Transaction and accounting records may be retained for as long as reasonably necessary to satisfy tax, accounting, chargeback, fraud-prevention, and other legal obligations.

Advertising attribution information

Advertising click identifiers, campaign information, conversion events, hashed matching identifiers, and related attribution information may be retained for periods reasonably necessary for campaign measurement, fraud prevention, recordkeeping, or legal compliance, subject to the retention practices of the advertising provider involved.

Email and telephone suppression records

If someone tells us not to contact them again, we may retain the minimum information necessary to honor that request indefinitely.

This is intentional because deleting a suppression record could cause the person to be contacted again by mistake.

Security and administrative logs

Security, authentication, administrative, and audit logs may be retained for a reasonable period necessary to:

• Detect security incidents.
• Investigate abuse.
• Maintain accountability.
• Prevent fraud.
• Meet legal requirements.

33. Deleting an Account

An account holder may request or initiate account deletion through available account settings or by contacting us.

Account deletion may permanently remove:

• Recordings.
• Transcripts.
• Interview information.
• Books or book projects stored in the account.
• Scheduled messages.
• Associated account content.

Download anything you want to keep before deleting an account.

Account deletion does not necessarily remove information that:

• Another person independently owns or controls.
• Has already been included in a physical book that was printed.
• Must be retained for accounting, tax, fraud, dispute, or legal reasons.
• Remains temporarily in routine backups.
• Is necessary to maintain an opt-out suppression record.
• Is maintained by a third-party provider under its independent legal obligations.
• Is retained as a limited advertising-attribution or transaction record where reasonably necessary and permitted by law.

34. Rights of Interview Participants

You do not need a Tell Me Forever account to contact us about privacy rights concerning your information.

A person whose voice is stored through Tell Me Forever may contact us and request information about recordings that concern them.

They may also request deletion of recordings containing their own voice, subject to applicable law and verification.

We may need to verify the person's identity before acting on a request.

When a participant deletion request is approved, deletion may affect:

• Audio.
• Corresponding transcript.
• Associated recording metadata.
• Generated digital content that depends on the recording.
• An account holder's interview.
• A book project.
• A recording collection.

A privacy request cannot retrieve or erase copies of a physical book that have already been printed and delivered.

35. Your Privacy Rights

Depending on where you live and whether a particular privacy law applies to Tell Me Forever, you may have rights concerning your personal information.

These may include the right to:

• Confirm whether we process your personal information.
• Access personal information we hold about you.
• Obtain a copy of certain personal information.
• Correct inaccurate information.
• Request deletion.
• Request data portability.
• Opt out of certain sales of personal information.
• Opt out of certain sharing of personal information.
• Opt out of targeted advertising.
• Opt out of certain profiling or automated decision-making.
• Limit certain uses of sensitive personal information.
• Withdraw consent where processing depends on consent.
• Object to or restrict certain processing where applicable.
• Appeal certain privacy-request decisions where applicable.

Even where a particular statutory privacy right does not technically apply, we may choose to honor reasonable access, correction, and deletion requests where doing so does not conflict with another person's rights, security requirements, or legal obligations.

36. Advertising and Cookie Choices

Depending on your location and our implementation, Tell Me Forever may provide a cookie banner, privacy preference center, opt-out mechanism, or similar control for non-essential analytics and advertising technology.

Where legally required, declining applicable advertising or analytics consent will prevent or limit the associated technology from being used.

You may also be able to manage advertising preferences directly through Google, Meta, TikTok, Pinterest, Microsoft, or your browser or device.

Browser-based technologies such as cookies may also be blocked or deleted using browser controls, although this may affect website functionality.

37. Global Privacy Control and Other Browser Signals

Where applicable law requires us to recognize a browser-based opt-out preference signal, such as Global Privacy Control (GPC), for processing in which we engage, we will honor the signal as required by law.

A browser signal may not affect processing that is exempt from the applicable opt-out right, such as processing necessary to provide the Service, maintain security, prevent fraud, or complete a transaction.

38. How to Make a Privacy Request

You may submit a privacy request using the support or contact information available through Tell Me Forever.

Please provide information sufficient for us to understand and locate the request, which may include:

• Who you are.
• The email address or telephone number involved.
• What information you are asking about.
• What you would like us to do.

For security, we may ask for information reasonably necessary to verify your identity.

We will not intentionally require substantially more personal information than is reasonably necessary to verify a request.

If you are requesting deletion of a recording but do not have an account, information such as the inviting person's name, your email address, telephone number, or approximate date of the recording may help us locate it.

39. Authorized Representatives

Where applicable law allows it, you may authorize another person to submit a privacy request on your behalf.

We may require reasonable evidence that the representative is authorized to act for you.

We may also contact you directly where necessary to verify identity or authorization.

40. Appeals

If we deny a privacy request and applicable law gives you a right to appeal that decision, you may appeal by contacting us again and identifying the request as a privacy appeal.

Please explain why you believe the decision should be reconsidered.

We will review the appeal as required by applicable law and provide information concerning additional options where required.

41. No Unlawful Discrimination

We will not unlawfully discriminate against a person because they exercised an applicable privacy right.

Deleting information necessary to provide a feature may make that feature unavailable.

For example, if a recording is deleted, Tell Me Forever cannot continue providing playback or transcription of that deleted recording.

That is a consequence of deletion rather than discrimination for exercising a privacy right.

42. Email Choices and Opt-Outs

Tell Me Forever sends different types of email.

Account communications

Account holders may receive emails necessary to operate their account, including:

• Account verification.
• Password and security notices.
• Purchase receipts.
• Service notices.
• Interview activity.
• Scheduled-message activity.
• Changes to legal terms.
• Customer-support communications.

Some operational communications cannot be disabled while an account remains active.

Participant and recipient communications

Interview participants and scheduled-message recipients may receive communications necessary to deliver an invitation or message requested by another Tell Me Forever user.

These communications are not permission to add the recipient to an unrelated marketing list.

Participants and recipients may use available opt-out mechanisms to stop future communications where applicable.

If a person opts out, we may retain a suppression record so that we can honor the request.

43. Children

Tell Me Forever is not directed to children under 13 years old.

We do not knowingly allow children under 13 to create Tell Me Forever accounts or directly submit recordings or other personal information through the Service where parental consent is legally required and has not been obtained.

Audio containing a person's voice is personal information and can be particularly sensitive when the speaker is a child.

If we learn that we directly collected personal information from a child under 13 in circumstances requiring parental consent and the necessary consent was not obtained, we will take reasonable steps to delete the information.

If you believe a child under 13 has directly provided information or a recording to Tell Me Forever, contact us.

An adult's inclusion of information about a child in the adult's own story may be treated differently under applicable law, but we may remove such information when legally required or when appropriate to protect the child.

For participants between 13 and 17, the account holder is responsible for obtaining parental or guardian permission where required by applicable law or our Terms of Service.

44. Security

We use administrative, technical, and organizational safeguards designed to protect personal information.

Depending on the information and system involved, safeguards may include:

• Password hashing.
• Encryption of certain information at rest.
• Encryption in transit.
• Separation or protection of encryption keys.
• Restricted administrative access.
• Administrative audit logging.
• Signed or expiring playback URLs.
• Access controls.
• Authentication protections.
• Security monitoring.
• Provider-level infrastructure protections.
• Backup and recovery procedures.
• Fraud and abuse detection.

No online service can guarantee perfect security.

If we discover a security incident involving personal information, we will investigate it and provide notifications where required by applicable law.

45. Administrator Access

Access to Tell Me Forever administration functions is restricted to authorized personnel who need that access for legitimate purposes.

Administrative access may be used for:

• Customer support.
• Security investigation.
• Abuse prevention.
• Technical troubleshooting.
• Privacy requests.
• Legal compliance.
• System administration.

Administrative actions may be logged to create an accountability and security record.

Tell Me Forever personnel are not permitted to browse private recordings out of curiosity or for unrelated purposes.

46. International Users

Tell Me Forever is operated from the United States.

If you use the Service from another country, your information may be transferred to, stored in, or processed in the United States or another country where one of our service providers operates.

Privacy and data-protection laws may differ between jurisdictions.

Where applicable law requires particular protections for an international transfer, we will take reasonable steps to use an appropriate transfer mechanism or safeguard.

47. Legal Bases Where Required

Some privacy laws require us to explain the legal basis on which we process personal information.

Where those requirements apply, processing may be based on one or more of the following.

Performing a contract

We process information when necessary to provide a Service that an account holder or participant has requested.

Consent

Certain processing may occur because a person affirmatively chooses to participate, record, share information, accept non-essential cookies, or otherwise consents.

Where processing legally depends on consent, consent may be withdrawn subject to applicable law.

Legitimate interests

Where legally permitted, we may process limited information when reasonably necessary for legitimate interests such as:

• Securing the Service.
• Preventing fraud.
• Providing customer support.
• Maintaining reliability.
• Improving website usability.
• Measuring business and advertising performance.
• Enforcing our Terms.

We consider the privacy interests of affected individuals when relying on legitimate interests.

Legal obligations

We may process or retain information when necessary to comply with applicable law, taxation, accounting, valid legal process, or other legal obligations.

48. Automated Decision-Making

Tell Me Forever uses automated technology for functions such as transcription, technical processing, fraud detection, and advertising measurement.

We do not use the content of personal stories to make decisions about a person's:

• Employment.
• Credit.
• Housing.
• Insurance.
• Education.
• Eligibility for government benefits.
• Access to essential services.

We do not use interview recordings to create automated profiles that determine these types of significant decisions.

Advertising platforms may separately use advertising and conversion information according to their own technologies, policies, and applicable law.

49. Changes to Service Providers

Technology providers can change over time.

We may replace a provider, add a provider, or change how an existing provider is used.

When a change materially affects how personal information is handled, we will update this Privacy Policy as appropriate.

Naming a provider in this Privacy Policy does not mean that provider receives every category of information described in the policy.

50. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time.

When we make changes:

• The updated policy will display a new effective date or last-updated date.
• Previous versions may be retained.
• Material changes may be communicated through the Service or by email where appropriate or legally required.
• Where applicable law requires consent to a materially new use of information, we will obtain that consent before applying the new use as required.

We will not intentionally rewrite this Privacy Policy to make a materially new practice appear as though it had always been in effect.

51. Contact Us

If you have:

• A privacy question.
• A request to access your information.
• A correction request.
• A deletion request.
• A recording-consent concern.
• An advertising opt-out request.
• A concern involving a child.
• A security concern.
• A privacy appeal.

please contact Tell Me Forever using the support information available on our Help or Contact page.

Tell Me Forever LLC Doing business as Tell Me Forever Louisville, Kentucky, United States

Effective Date: September 2, 2026