Your data is yours.

• Your data is yours. Never sold to insurers, employers, or advertisers.
• We require our providers not to train their AI on your conversations.
• What the elder shares in private stays private, unless it is a safety concern.
• The caregiver gets a short summary after each call. Not transcripts. Not raw audio.
• The elder can stop any call, opt out any time. Their word overrides the caregiver's.

Village has two roles in every account. The elder is the member: the person Maya talks to, the person whose voice and signals we process, the person who owns the data. The caregiver is the sponsor: usually a child or close family member, the person who pays and who receives summaries.

The elder always controls what is shared with the caregiver. The caregiver never sees raw call audio, never sees transcripts, and never sees what the elder has explicitly asked to keep private. The elder can stop a call mid-sentence, pause Maya for a day, or close the account at any time, and their decision overrides the caregiver's.

To run the service, we process:

• Voice audio during calls, used only to turn speech into text. Village never stores call audio; our voice provider keeps recordings for a limited time (about 30 days) under its own policy, then deletes them.
• Call transcripts and the conversational memory Maya uses to recognize the elder across calls.
• Wellness signals inferred from what is said on calls, like mood and things the elder mentions. These are observations, not clinical diagnoses.
• Onboarding notes: what the elder likes to talk about and any topics to avoid.
• Account information: the elder's name and phone number, and the caregiver's contact details. Billing is handled by Apple and our payment processor and is not stored on our servers.
• Device and usage information needed for security and reliability.

We use the data we collect to:

• Run the calls. Maya needs to hear the elder, speak back, and remember context across days.
• Send the caregiver a short summary after each call. Summaries are written by AI and never include raw transcripts.
• Keep the service safe and reliable: prevent abuse, debug issues, and maintain audit logs.
• Improve Village. We use de-identified, aggregated patterns to make Maya better.

Maya is an AI. If anyone asks whether they are talking to a person or a computer, Maya always answers honestly and never pretends to be human. Maya speaks with a synthesized voice, not a clone of any real person.

We process voice audio for speech-to-text only. We do not use voice to identify anyone biometrically, do not build voice fingerprints, and do not match voices across accounts.

Village is a wellness companion. The signals we surface to the caregiver are observations about patterns over time, not medical diagnoses, not clinical screenings, and not a substitute for a doctor.

Wellness signals are never shared with healthcare providers, insurers, employers, or any other third party unless the member explicitly asks us to share them.

We work with a small number of vetted service providers to deliver Village. They handle categories like telephony, speech processing, language models, secure hosting, and billing. We require appropriate data-protection agreements from every provider that handles member data.

A current list of our service providers is available on request to privacy@villagecall.com.

We do not sell data, and we never share an elder’s calls, transcripts, wellness signals, or contact details with insurers, employers, or advertisers. That member data is firewalled from our marketing and advertising entirely. Our public marketing website does use standard, privacy-preserving analytics and an advertising pixel that see only anonymous website activity, never member or health data. See Website analytics and advertising below.

This section is about our public marketing website (villagecall.com), not the calls or the member data described above. To understand which pages and ads bring families to Village, and to spend our advertising budget responsibly, the website uses two tools:

• PostHog: cookie-based product analytics, hosted in the United States. It records anonymous website activity: pages viewed, buttons clicked, and how far someone gets in signing up.
• The Meta (Facebook) Pixel: Meta's advertising measurement tool. It tells us, in aggregate, which ads led to a visit or a signup.

What these tools neverreceive: an elder’s name, phone number, email content, the free-text you type during signup, health or hearing details, or anything Maya hears on a call. We send analytics only the bare fact that a step happened (for example, “a checkout was opened”), with no personal information attached. On the signup pages specifically, automatic capture and session recording are turned off so nothing you type there is ever collected.

For advertising measurement only, we share a one-way hashed(irreversible) version of the paying caregiver’s email with Meta, so a completed signup can be matched to the ad that led to it. This is standard conversion measurement; we never send health or call data.

You can opt out of all website analytics at any time. This turns off both PostHog and the Meta Pixel in your browser:

We keep each kind of data only as long as it is useful and as long as the law requires, then we delete it. Village never stores call audio; our voice provider deletes recordings after a limited time (about 30 days). Transcripts and wellness signals are kept for the life of the account so Maya can remember context across calls, and can be deleted on request. Consent, billing, and audit records are kept as long as the law requires.

When a member closes their account, we delete personal data within 30 days, except for records we are legally required to keep.

Members and caregivers can:

• Ask what data we have about them and request a copy.
• Ask us to correct anything that is wrong.
• Ask us to delete their account and all associated data.
• Stop Maya from calling at any time, with no penalty.
• Opt out of the sale or sharing of personal information. (We don't sell or share data for advertising. This right is here in case the law expands the definition.)

To exercise any of these rights, email privacy@villagecall.com. We respond within 30 days.

Village is not an emergency service, and Maya cannot call 911 or contact anyone for you in real time. If something worrying comes up on a call (a fall, a health scare, or talk of self-harm), Maya gently encourages the elder to call 911 or reach out to family, and after the call we send the caregiver a short note. In an emergency, always call 911. For a mental-health crisis, call or text 988 (US and Canada).

Village is for adults. We do not knowingly collect information from anyone under 18. If a child's name comes up in the phone book (a grandchild, for example), we treat it as a contact entry only and do not store anything additional about that child.

Village is available to residents of the United States and Canada, with some exceptions: we are not yet available in Quebec, Illinois, Washington, Nevada, Connecticut, or Florida. Member data is stored in Canada. Some processing happens in the United States (the AI that powers and analyzes calls, and our phone and messaging provider), so data may cross the border as part of running the service.

We encrypt data in transit and at rest. Access to member data is restricted by role and logged. We are pursuing industry-standard security certifications.

If a data breach affects you, we will tell you what happened, what was affected, and what we are doing about it. In the United States, we notify you within 60 days under the FTC Health Breach Notification Rule. In Canada, we notify you and the Office of the Privacy Commissioner as soon as feasible under PIPEDA, and we keep an internal breach log.

We will update this page as the service evolves and as we work through legal review. Material changes will be announced by email to active members at least 30 days before they take effect.

Privacy questions, requests, and concerns: privacy@villagecall.com. General questions: mike@villagecall.com.