Privacy

One

What stays on your computer

All of it. Everything in this list lives in Eternity's own data folder under your Windows user profile, next to the vault, and nothing in it is copied anywhere else by the application.

• The vault. A single SQLite database file holding the memories, the letters, the people, the interview answers and the profile. You can turn on encryption at rest. The key is then kept in a file beside the vault, encrypted by Windows so that only your Windows account can read it. If Windows cannot provide that protection, Eternity falls back to storing the key with weak encoding instead and records a warning in its log; that should not happen on a normal Windows installation, but it is better said than left out. We never see the key either way, and it exists on your machine only. When the key changes, the one it replaced is kept beside it in the same folder rather than destroyed, so that backups you made under an older key can still be opened. Nobody at SyphonDigital can open your vault.
• Photographs, documents and recordings. Importing copies the files into a store beside the vault and leaves your originals where they are. Voice recordings, restored photographs and thumbnails are all files on your disk.
• The local AI models. Speech recognition, face detection and photograph colourisation ship inside the installer and run on your own machine. Nothing is fetched at runtime. The transcription worker is configured to refuse remote models outright, so a missing file is a loud local error rather than a quiet download. A computer that has never been online behaves exactly like one that has.
• Face grouping, which names nobody. The model gathers faces that resemble each other, and that is the whole of its claim. Whether a group is a person, and what that person is called, is your decision. No face, no crop and no descriptor is sent anywhere.
• Sealed packages and exports. A sealed package is an encrypted file you create and copy wherever you like. We never hold one, and could not decrypt it if we did. Exports are plain JSON beside the original files, on your disk.

Two

What leaves your computer, and when

There are exactly two outbound destinations. Neither carries anything from your vault except in the second case, which you have to switch on yourself.

1. GitHub, for the update check

The version downloaded from this site checks for a newer release when it starts, and again every six hours while it is running. The request goes to GitHub, where the releases are hosted. It tells GitHub your IP address and which version of Eternity is asking, which is what any download from any website tells the server. It carries nothing about you, nothing about your vault, and no identifier created by us, because we do not create one. If a newer version exists, the installer is downloaded from GitHub and applied the next time you quit.

In the version downloaded from this site there is no setting to turn this off. Saying otherwise would be more comfortable and less true. If you would rather it never happened, block Eternity in Windows Firewall. Everything else in the application works with no network at all.

2. Anthropic, only if you supply your own key

This is off by default and no key ships with the application. Without one, Eternity is complete: the companion still answers, by quoting the person's own recorded words rather than rephrasing them.

If you add your own Anthropic API key in Settings, text from the vault goes to Anthropic's API. That text is the person's own writing, so it is worth setting out exactly when it happens and how much of it goes, rather than leaving you to assume it is less than it is. There are three occasions, and the first one surprises people:

• When you save a memory. Its title and its full text are sent so that themes, places, dates and the names of people in it can be worked out. This happens each time a memory is created, for every memory, not only when you ask the companion something. Without a key the same work is done on your own machine by simpler means, and nothing is sent.
• When you talk to the companion. Rather more goes than the question. Alongside it: the memories the search found relevant, up to eight of the most significant memories in the vault whether or not they matched anything you asked, up to six interview answers, up to a dozen earlier turns of the same conversation, and a summary of the person built from the profile, being their name, birth year, birthplace, home, occupation, the values, beliefs and traits recorded for them, and the life story if one has been written. All of that accompanies every turn. The memories added to fill out the picture are why a question that matches nothing still sends some of the record.
• When a voice profile is built. To work out how the person writes and the way they put things, Eternity runs the life story, the memories and the interview answers together into one body of text and sends it in a single request: up to about 60,000 characters of their own writing at once. It happens when you build or rebuild that profile, and not otherwise.

Marking a memory "Only me" does not hold it back from any of this. Scope decides what goes into a sealed package, and there it is honoured absolutely. It has no bearing on the AI path: none of the requests above filter on it, so a private memory is sent to Anthropic exactly like any other. If there is something you would rather was never sent anywhere, the way to be certain is to leave the key out.

Smaller requests go the same way, and it would be wrong to read the three above as the whole of it. With a key in place, the tone of a conversation turn is read from your message and the reply, the interview writes its next questions from your recent answers, and the prompts that suggest what is missing from the record are built from the display name, the birth year and the opening couple of hundred characters of up to a dozen memories.

Photographs, audio and the vault file itself are never sent. The key is stored on your machine and used from it, the request goes from your computer directly to Anthropic, and we are not part of it and see none of it. What Anthropic then does with the request is governed by Anthropic. Remove the key and the application returns to answering offline immediately, using only what is on your disk.

Three

What we never do

• No account. No sign-up, no login, no password, no profile held by us. There is nothing to cancel because there was never anything to join.
• No telemetry and no analytics. The application counts nothing, times nothing and reports nothing. We do not know how many people use it, which features they use, or whether it ran at all.
• No crash reporting. Errors are written to a log file on your own machine, which stays there. If you want us to see one, you have to send it.
• No advertising and no trackers. No third-party SDK, no pixel, no attribution, in the application or on this site.
• No selling or sharing. Not as a policy that could be revised, but as an absence: there is no collected data here to sell to anybody.
• No way to read your vault. We hold no key, no copy and no access. This is not a promise about our conduct, it is a fact about how the product is built.
• No runtime downloads of models or content. Every model ships inside the installer, and speech is spoken by the voices Windows already has, so nothing is fetched to make the application work. The one thing it does download is a newer version of itself, which is the update check described in what leaves your computer.

Four

This website

These pages are static HTML. They set no cookies, run no analytics, and contain no JavaScript of any kind. Nothing is stored in your browser and no record is kept of your visit by us.

One thing is worth naming, because it is the single external request the site makes. The pages load two typefaces, Instrument Serif and Inter, from Google Fonts at fonts.googleapis.com and fonts.gstatic.com. That means your browser contacts Google when the page loads, and Google receives your IP address and the ordinary details of the request. This is about the website, not about the application, which loads no fonts from anywhere. If you would rather it did not happen, block those two hosts: the pages read perfectly well in your system's own fonts.

The download buttons point at GitHub, so following one is a request to GitHub in the usual way.

Five

Your data rights

Rights to see, correct, export or delete personal data are exercised against whoever holds it. Nobody here holds any of yours, so there is nothing to ask us for and nothing we could return. This section is short for the same reason the policy is short.

• To see it or take it elsewhere: export the vault from inside the application. It writes plain JSON alongside your original files, readable without Eternity.
• To correct it: edit it. It is your record, on your machine, and nothing is filed anywhere else that could disagree with it.
• To delete it: uninstalling deliberately leaves the vault in place, because removing an application should never destroy somebody's record. To remove everything, delete Eternity's data folder as well, along with any exports, backups and sealed packages you have made.
• One thing we cannot help with: a sealed package you have already given to somebody is a copy in their hands. Nobody can recall it, including us.

Six

Children

Eternity is not directed at children. There is no sign-up and nothing is collected from anyone of any age, so no age is ever asked for or known. A family record often contains photographs of children and things they said, and that material stays on the owner's machine like everything else in the vault.

Seven

Changes to this policy

If anything here changes, this page changes and the date at the top changes with it. If a future version of the application ever sends something somewhere new, it will be named in "What leaves your computer, and when", in the same plain terms as the two already there.

Eight

Contact

Questions about any of this, or about something you think is missing from it, go to support@syphondigital.online. Email is the only way we hear from anybody, so an email you send us is the only record of you we could have.

Eternity is made by SyphonDigital. See also the terms.