Privacy

We store the elder profile you provide, call transcripts, and generated summaries in an encrypted database (Supabase). Transcripts are retained for 90 days and then deleted.

We do not sell your data. We use Vapi, Anthropic, ElevenLabs, Twilio, Resend, and Stripe as subprocessors.

If you choose to add medications or care notes, that information is also stored in the same encrypted database and used only to give Grace gentle context during calls. Grace is not a medical service, does not diagnose, and is not HIPAA-compliant - please do not enter protected health information or anything from a medical record. We do not connect to pharmacies or electronic health record systems.

SMS notifications

When you sign up for Grace, SMS notifications are optional. You may complete setup with email only. If you enter your phone number on the intake form and check the optional SMS consent box, you are explicitly consenting to receive SMS notifications from the Grace alerts program - including missed-call alerts, distress alerts, weekly care summaries, “quiet day” reassurance texts, and one-time phone verification codes. Message frequency varies based on care events; expect roughly 2–5 messages per recipient per week. Message and data rates may apply.

Your phone number is used solely to deliver these notifications. If you do not check the SMS consent box, Grace does not save your phone number for family SMS alerts. We do not sell, rent, or share mobile numbers, SMS opt-in data, or SMS consent records with third parties or affiliates for marketing or promotional purposes. Phone numbers are shared only with Twilio, the SMS carrier we use to deliver the messages.

You can opt out at any time by replying STOP to any Grace text, by removing your number from the dashboard, or by emailing support@callwithgrace.com. For help, reply HELP or contact support at the same address.

Family voice cloning (optional). If a family member uploads an audio sample to clone their voice for Grace calls, the sample is sent to ElevenLabs to create a voice ID. We do not retain the original audio file. We store the resulting voice ID and a permanent consent record (who acknowledged consent, the speaker's name and relationship, the time, and the IP address and browser used). You can delete the cloned voice at any time from the dashboard, which removes it from ElevenLabs as well; the consent record is retained for our audit trail. You can also download every consent record for your family as CSV or JSON, and revoke consent at any time - revoking immediately removes the cloned voice and writes a permanent “revoked” entry to the audit trail.

Email support@callwithgrace.com to request deletion.