Privacy Policy

1. Information We Collect

We collect only what is necessary to provide the Avvizo check-in and wellness service. This includes:

• Account information: your name, email address, and billing details when you sign up.
• Your loved one's profile: their name, phone number, preferred call time, timezone, and any health notes or medication reminders you choose to provide.
• Call transcripts and audio recordings: a full transcript of every check-in conversation, and the audio recording of that call (Opus format, stored securely).
• Wellness data: AI-generated wellness scores, mood signals, and concern flags derived from each conversation.
• Family connections: names and contact details of family members you invite to the dashboard.
• Story content (Story+ plans and above): transcribed story segments, themes, and associated metadata.
• Usage data: standard web analytics to improve the product (no third-party ad tracking).

2. How We Use Your Information

Your data is used exclusively to provide, maintain, and improve the Avvizo service. Specifically:

• To place and manage daily AI check-in phone calls at the times you configure.
• To generate wellness summaries, mood signals, and concern flags visible to you and authorized family members.
• To send SMS alerts, escalation notifications, and nightly digest emails to your family connections.
• To compile life story transcripts into a Story Timeline (Story+ plans and above).
• To process subscription payments through Stripe.
• To improve the quality and accuracy of our AI system using aggregated, de-identified data. We never use your personal call recordings to train AI models.

We never sell your data. We never use your voice recordings for advertising. We never share your information with third parties except as required to deliver the service (e.g., our telephony provider, payment processor).

3. Data Storage and Security

All data is stored in Supabase (PostgreSQL) hosted in Canada/US with Row-Level Security (RLS) enforced on every database table. This means your data is architecturally isolated from other users' data at the database level, not just by application logic.

Audio recordings are stored in encrypted object storage and are only accessible via time-limited signed URLs. We use TLS 1.3 for all data in transit and AES-256 encryption at rest.

We retain call transcripts and audio recordings for as long as your account is active, plus a 90-day grace period after cancellation. You may request immediate deletion of all your data at any time.

4. Audio Recording Disclosure

Avvizo records all check-in calls. The AI discloses at the start of every call that the conversation is being recorded. By enrolling a phone number in the Avvizo service, you confirm that you have informed the person being called that they will receive AI check-in calls that are recorded.

Call recordings are used to generate transcripts, provide wellness summaries to your family dashboard, and (on Legacy plans) accumulate audio data that may be used for voice cloning with your explicit separate consent. Recordings are never made available to third parties for any other purpose.

5. Your Rights

Under PIPEDA, you have the following rights with respect to your personal information:

• Right of access: request a copy of all personal information we hold about you.
• Right to correct: request corrections to any inaccurate information.
• Right to withdraw consent: withdraw consent for data collection at any time by cancelling your account.
• Right to deletion: request permanent deletion of your account and all associated data, including transcripts and audio recordings.
• Right to complain: file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

6. Third-Party Service Providers

We use the following service providers to operate Avvizo. Each is bound by data processing agreements and may only process your data to deliver services on our behalf:

• Supabase — database, authentication, and file storage.
• VoxImplant — telephone call routing and infrastructure.
• xAI (Grok) — AI voice agent for daily check-in conversations.
• Twilio — SMS delivery for escalation alerts.
• Stripe — subscription billing and payment processing.
• Vercel — web application hosting.
• Resend — transactional email delivery.

7. Contact & Privacy Officer

For any privacy inquiries, data requests, or concerns, please contact our Privacy Officer:

We will respond to all privacy inquiries within 30 days, as required by PIPEDA.