Privacy posture

MemorySignal is designed as a privacy-forward consumer health support product. Provider reports require Memory Partner review before sharing, and the current iOS app transcribes voice input without storing raw audio files.

Data we use

• Clerk account details for sign-in and account security.
• Convex records for profiles, trusted facts, recall events, notes, and audit history.
• RevenueCat purchase and entitlement status for subscription access.
• Limited app-use milestones linked to your account: setup, first approved answer playback, Family offer views and verified trial activation. We keep counts and first/latest timestamps, without question text, recordings, Health data, advertising identifiers or session replay. Internal and sandbox activity are separated from production. These records are removed when you delete your account.
• Daily Apple Health step and sleep summaries only after the care recipient opts in.
• With separate permission on your device, Natural AI voice sends the selected answer text to OpenAI to create speech. It is an AI-generated voice, not a family member. MemorySignal plays the audio in memory and does not save it; OpenAI processes requests under its API data policies. You can turn this off in Companion display settings and keep device speech.
• Minimum necessary context sent to OpenAI from the server to draft support language.
• Optional family video messages, captions, speaker names, and consent confirmation stored privately with the care circle for MemorySignal Family. Videos are not used to generate answers or to clone a family member's voice.

Provider search

Provider search uses Google Maps features and content. The ZIP code and search category you enter are sent to Google; your care-recipient profile and notes are not included. Search results can be used for calling and maps and are not automatically saved as contacts. Use of these features is subject to the current Google Maps End User Additional Terms of Service and Google Privacy Policy.

Your controls

• Memory Partners can export or delete care-recipient data from in-app settings.
• Account settings also lets you delete your account. If you own a shared care circle, you must choose another active Memory Partner to own it first; shared care records stay with the circle. You can confirm deletion of a circle with no other Memory Partner.
• Apple Health access is optional and can be revoked in iOS Settings.
• Provider share links expire and are recorded in an audit trail.
• Caregivers can remove a family video in the app. Approved shared videos stay with the care circle after an owner transfers it; the departing account's speaker attribution is replaced. Deleting the circle removes its videos.
• MemorySignal does not use sensitive health content for advertising or tracking.

MemorySignal does not claim HIPAA compliance. Final retention periods and the public consumer-health-data notice remain subject to privacy and legal review before public launch.

For support requests or data rights questions, email support@memorysignal.ai.