Controlled private beta

Privacy in plain language.

Andrew Coughlan is the data controller for this controlled test. From Everyone is a product name, not a separate legal entity. Contact microappsdesk@proton.me for support or applicable privacy rights. This operating notice is deliberately conservative and is not legal advice.

What this pilot accepts

Adult organisers, adult recipients and adult contributors only. The pilot is for birthdays, farewells or retirement, appreciation and other low-sensitivity adult celebrations. Do not submit material involving minors, memorials, health or recovery, safeguarding, sexual content, accusations, humiliation, workplace disputes, confidential information or other high-sensitivity or special-category material.

What we use

We process only the project details, messages, photographs, optional Keepsake voice moments and operational records needed to create and deliver the private keepsake. Short video is not accepted in this beta. Organiser sign-in identifies the project owner. Contributors do not need accounts; each saved contribution receives an unguessable private edit link. Their contact details are not shown to other contributors, and this application does not collect contributor email addresses.

Who can see it

The organiser, the minimum authorised operator, named hosting and payment providers where needed, approved adult contributors through their own submission route, and the adult recipient through the private output. There is no public gallery, address-book import, face recognition, advertising use, automated transcription or model training on customer content.

Optional AI writing and recording-script help

A contributor can deliberately ask for a wording suggestion after writing their own message, or—when voice notes are enabled—turn their own typed points into a natural 30–45 second recording script. Only the text deliberately placed in the relevant draft or voice-notes box and the bounded instruction are sent to OpenAI. The app does not automatically add the recipient name, project title, photograph, caption, audio recording or other contributions, and audio is never sent for transcription. The request uses the OpenAI Responses API with response storage disabled. OpenAI states that API data is not used for model training unless the customer opts in, while default abuse-monitoring logs may retain API content for up to 30 days. The original text remains available, no suggestion is applied automatically, and the generated recording script is an editable on-screen guide rather than a separately submitted contribution.

True details only

Every factual statement must be traceable to supplied organiser or contributor material. The writing and recording-script assistants are instructed to preserve the contributor’s voice and must not invent, infer or embellish facts, memories, quotations, habits, events, relationships, traits or sentiment. The contributor remains responsible for checking and choosing the final wording before recording or submitting it. The organiser may change project-level names and presentation, but cannot silently rewrite a contributor’s personal statement. Material wording changes must be returned to the contributor or carry their recorded approval.

Storage and deletion

Active and accessible working copies and uploads are deleted within seven days after delivery, refund or withdrawal resolution and no later than 21 days after submission. Private hosted outputs are revoked or deleted 30 days after delivery. The organiser can delete the entire active project immediately from the dashboard. A minimal deletion audit remains without customer content. Provider disaster-recovery copies may persist for their documented backup period and are not used for delivery or accessible from former links.

Payments and measurement

Normal proposed one-time prices are Classic €4.99 and Keepsake €9.99, but payment is unavailable during this private beta. Privacy-safe events record only milestones and bounded flow stages: app opened, project started or created, format chosen, invitation generated, contribution link opened, contribution started or submitted, preview, completion, export, deletion and abandonment stage. Event records never contain messages, filenames, media, recipient names, contributor names or contributor identities.

Your choices

Contribution is voluntary. Until the deadline or final lock, a contributor can use their private link to review, edit, replace or remove media, withdraw, or permanently delete the entry without an account. The organiser may return an entry for changes, hide or restore it, permanently delete it after confirmation, or delete the whole project. For help, contact the address above with the non-personal project reference; do not send media, passwords, credentials or identity documents by email.

Operational notice version: 1 September 2026.