Privacy policy

Draft. This policy describes how the product currently works. It must be reviewed by a lawyer, and the company details and contact address filled in, before launch.

Who we are

[Company name, address and contact email to be added.]

What we collect

  • Family accounts: name, email address and a securely hashed password.
  • The person Dottie talks to: the profile family enters (name, language, a few personal details, a family contact and an emergency number).
  • Conversations: chatting time, a short summary of each conversation, and Dottie's memory notes. The full text of conversations is kept only if family turn on sharing, which should only happen with the person's agreement.
  • Story book: stories the person agreed, during a conversation, to keep for their family, written up from what they said, with the people and places they mentioned. A short excerpt of the conversation is kept only until the story is written up, then deleted. Questions family members add for Dottie to ask are stored with the asker's first name.
  • Payments: sold through Link (Sold through Link, LLC), part of Stripe, as merchant of record. At checkout Link collects your name, email, billing address and payment details, and uses them for its own purposes too (payments, tax, support and fraud prevention), as an independent controller under the Link privacy policy. We don't see or store card numbers. Asking Link to delete your data also cancels the subscription.

We don't keep recordings of anyone's voice.

How it's used

To run the conversations, remember what matters between them, show family the dashboard, and handle billing. We don't sell personal information or use it for advertising.

Who processes it

  • OpenAI, to understand speech and generate Dottie's replies.
  • ElevenLabs, to read Dottie's replies aloud in some languages.
  • Stripe and Link (Sold through Link, LLC), for payments, as described above. Data may be transferred to the United States.
  • MET Norway and OpenStreetMap, for the weather. They only receive the town's name or location, never who it's for.
  • [Hosting provider to be added, e.g. Railway, with the region the data is stored in.]

Your choices

  • Family can read and clear Dottie's memory notes at any time.
  • Sharing of full conversations can be turned off at any time, which deletes the full conversations saved so far.
  • The person can tell Dottie not to keep a story, or change their mind straight after. Family can remove any story from the story book.
  • Family can delete a person's profile, or the whole account, from the family dashboard at any time. That deletes their conversation summaries, memory notes and stories for good. You can also contact us at [contact email].

Sensitive information

Conversations may include health or other sensitive details. They're used only to provide the service as described above. [Legal basis and retention periods to be confirmed with legal review, including UK/EU GDPR and applicable US state laws.]