Privacy Policy
Last updated: July 3, 2026
1. What we collect
- Account data — your name, email, password (stored as a salted hash), and the name and phone number of the person whose line is screened.
- Call data — caller phone numbers, timestamps, durations, screening outcomes, transcripts of screening conversations, and voicemail transcriptions.
- Configuration — trusted contacts, blocked numbers, caregivers you invite, and screening settings.
- Billing data — handled by Stripe; we store only your plan, subscription status, and Stripe identifiers, never card numbers.
2. How we use it
We use this data to screen calls, decide whether to forward or decline callers, show you transcripts and history, send caregiver alerts you enable, bill your subscription, and keep the service secure (for example, rate limiting and abuse prevention). We do not sell your data, and we do not use your calls or transcripts to train AI models.
3. Who we share it with
Only service providers necessary to operate the product: telephony (Twilio) to receive and route calls and send SMS alerts; AI processing (Anthropic) to conduct screening conversations, under terms that prohibit training on your data; payments (Stripe); and hosting infrastructure. We may also disclose data when required by law.
4. Call transcripts and recording
Screening conversations with the AI assistant are transcribed so you can review them. Voicemails are recorded and transcribed. Calls forwarded to the protected person are not recorded by us. Consent requirements for recording vary by jurisdiction — see our Terms of Service for your responsibilities.
5. Retention
Call history and transcripts are retained while your account is active so your dashboard works. If you close your account, we delete your account data, call history, and transcripts within 30 days, except records we must keep for legal or billing-dispute purposes.
6. Security
Data is encrypted in transit. Passwords are hashed with bcrypt. Access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as required by law.
7. Your rights
You can access and update your account information in Settings, and you can request a copy or deletion of your data by emailing us. If you are in a jurisdiction with specific privacy rights (such as the GDPR or CCPA), we will honor requests those laws provide.
8. Children
The service is not directed to children under 13 and we do not knowingly collect their data.
9. Changes
We may update this policy; material changes will be announced by email or in the dashboard at least 14 days before taking effect.
10. Contact
Privacy questions or requests: privacy@elderprotect.app