Privacy

We store the elder profile you provide, call transcripts, and generated summaries in an encrypted database (Supabase). Transcripts are retained for 90 days and then deleted.

We do not sell your data. We use Vapi, Anthropic, ElevenLabs, Twilio, Resend, and Stripe as subprocessors.

If you choose to add medications or care notes, that information is also stored in the same encrypted database and used only to give Grace gentle context during calls. Grace is not a medical service, does not diagnose, and is not HIPAA-compliant — please do not enter protected health information or anything from a medical record. We do not connect to pharmacies or electronic health record systems.

SMS notifications

When you sign up for Grace and enter your phone number on the intake form, you are explicitly consenting to receive SMS notifications from the Grace alerts program — including missed-call alerts, distress alerts, weekly care summaries, “quiet day” reassurance texts, and one-time phone verification codes. Message frequency varies based on care events; expect roughly 2–5 messages per recipient per week. Message and data rates may apply.

Your phone number is used solely to deliver these notifications. We do not sell, rent, or share mobile numbers with third parties or affiliates for marketing or promotional purposes. Phone numbers are shared only with Twilio, the SMS carrier we use to deliver the messages.

You can opt out at any time by replying STOP to any Grace text, by removing your number from the dashboard, or by emailing support@callwithgrace.com. For help, reply HELP or contact support at the same address.

Family voice cloning (optional). If a family member uploads an audio sample to clone their voice for Grace calls, the sample is sent to ElevenLabs to create a voice ID. We do not retain the original audio file. We store the resulting voice ID and a permanent consent record (who acknowledged consent, the speaker's name and relationship, the time, and the IP address and browser used). You can delete the cloned voice at any time from the dashboard, which removes it from ElevenLabs as well; the consent record is retained for our audit trail. You can also download every consent record for your family as CSV or JSON, and revoke consent at any time — revoking immediately removes the cloned voice and writes a permanent “revoked” entry to the audit trail.

Email support@callwithgrace.com to request deletion.