What this application stores, sends, and never keeps.
When you paste an Any Human Ever URL, the generated life's data and its source URL are cached on the server for about 30 days so repeat conversations don't re-fetch the source page. This cached data is the same public information already on the life's page at anyhumanever.com.
If you're not signed in, your conversation is kept only in your own browser (localStorage) — it is never written to this application's database. Closing your browser's stored data, or using a different browser or device, loses it.
If you're signed in, one conversation per life is stored on the server against your account, so it follows you across devices. Use Clear conversation in the chat view to delete it at any time — this removes it immediately and permanently.
Either way, each message you send necessarily passes through this application's server in order to be forwarded to whichever AI provider is generating the reply — see Sending messages to AI providers below. What differs between signed-in and anonymous use is only whether that conversation is saved afterward.
Chat message text, API keys, and full AI-provider responses are never written to application logs. Operational logs record only metadata: which provider and model handled a request, how long it took, token counts, and whether it succeeded — never the content of what was said.
To generate a reply, your message and the persona's system prompt are sent to whichever AI provider is currently active for your chat: the free shared tier (currently Groq) by default, or your own OpenAI, Anthropic, or Gemini account if you've set one up. That provider processes the request under its own privacy policy and data practices, separate from this application's.
A key you enter is sent to this application's server over TLS and used only for the request it was given for. If you don't explicitly save it, it is never written to disk. If you choose "Remember for this tab," it's kept in your browser's session storage — cleared automatically when the tab closes, never sent anywhere but this application's server.
If you save a key while signed in, it is encrypted at rest (AES-256-GCM) with a master key kept outside the database. The application decrypts it only immediately before a request that needs it, and the key is never shown again in the interface after saving — only its last four characters, so you can tell which key is which. Use Delete on the API keys page to remove a saved key permanently at any time.
Creating a share link makes an independent, public copy of your conversation exactly as it stood at that moment — anyone with the link can view it, and it does not include anything said afterward. You (or, if you were signed in when you created it, your account) can delete a share at any time from its page; deleting it removes it completely.
Registration is invite-only. Passwords are hashed (Argon2id) — never stored in a recoverable form. Signing in sets a session cookie holding a random token; only a hash of that token is stored, so a database compromise alone doesn't expose usable sessions. An anonymous visitor also gets a signed cookie used only to enforce the free tier's daily message limit, not to identify or track you elsewhere.
This application does not use analytics scripts, advertising trackers, or third-party embeds. The only outside network calls it makes are to anyhumanever.com (to import a life) and to whichever AI provider is handling your current chat.