Privacy

Local-only mode (no cloud sync configured) — everything (photos, captions, music, messages, calendar, life story, the do-not-mention list) stays on the device. We never see any of it.

Cloud mode(Supabase backend connected) — the same content is stored on a private Supabase database + storage bucket so multiple family members can contribute and so a tablet can sync. Row-level security isolates each family's data — your photos, your AI digest summaries, your subscriptions are visible only to authenticated members of your loved-one account.

The companion uses Anthropic's API. We send Anthropic the loved one's life context (preferred name, life story, family relationships, photo captions, song titles, calendar events) and the current conversation. We do not store the full transcripts. We store only:

• A one-sentence summary of each conversation
• A mood signal (e.g. content, quiet, anxious) — never a diagnosis
• A distress flag, if one is detected, so the family dashboard can surface it

Anthropic's API terms (as of this writing) state that data submitted via their API is not used to train models. We link to their current policy at anthropic.com/legal.

We previously offered voice cloning of a living family member on the Max plan. It was retired in 2026 — we no longer clone voices, and no audio is sent anywhere for cloning. The companion now speaks with a natural text-to-speech voice instead, and family members can record their own actual voice messages.

We log activity counts on the tablet (Photos opened, Music played, Story heard, etc.) so the caregiver dashboard can show whether the loved one is using the app. We do not log the content of conversations, captions, or photo descriptions — only that an action occurred and when.

Voice-credit purchases inside the iOS family app go through Apple's StoreKit. Apple sees the transaction; we see the resulting balance on your SeniorsLink account. We do not store credit card numbers — that's Apple's job.

You can sign in with Google, Apple, or email + password. Authentication runs through Supabase. We store your email address and the auth provider; we never see your Google password or your Apple password. If you sign in with Apple and request a private relay email, we honor it.

• Anthropic — generates virtual companion responses
• Google (Gemini)— our text-to-speech provider; turns the companion's words into the spoken voice your loved one hears
• OpenAI — fallback text-to-speech (the gentler Nova voice) used for story / photo narration when Google is unavailable
• Supabase — cloud database, storage, and authentication (only if cloud mode is enabled on your install)
• Stripe — payment processing for the Pro and Max plans
• Apple App Store / Google Play — handle in-app voice credit purchases on iOS / Android
• Twilio + SendGrid — only if your operator enables inbound voice messages or photo-by-email
• Vercel — hosts the web app
• YouTube / Spotify — only when a song you added embeds their player

You can download a full JSON export of your data at any time from Family → Account. You can delete your account at the same page. Deletion cascades: photos, voice messages, songs, the profile and life story, chat history, safety records, and subscription records — removed from our database and our file storage alike.

GDPR / CCPA / PIPEDA: You have the right to access, correct, delete, or port your data. Email privacy@memorylane.app and we'll respond within 30 days.

While your account is active we keep your content — photos, voice messages, songs, the profile, and chat history — so it's there every time your loved one opens the tablet. We don't put an expiry on memories.

When you delete a loved one, or your whole account, the data is removed right away from our live database and file storage, and ages out of our encrypted backups within 30 days. We keep no shadow copy. We never sell your data, and we do not use your family's photos, voices, or conversations to train AI models.

If SeniorsLink is ever acquired by, merged with, or has its assets bought by another company, your account and its data may transfer to the new owner as part of that transaction. We will email account holders before any such transfer takes effect. The new owner stays bound by this policy — or must give you notice and the chance to export and delete your data before any materially less protective terms apply.

SeniorsLink is not designed for or marketed to anyone under 18. (The tablet is built for older adults; the caregiver-side requires you to attest you are an adult setting up for a loved one.)

We donate 5% of every Pro and Max subscription to the Alzheimer Society of Canada. The donation amount is calculated quarterly. We are not affiliated with the Alzheimer Society — we donate as an independent supporter.

Questions or concerns? Email privacy@memorylane.app.