Privacy Policy
This policy explains what personal data Reflora collects, why, who processes it on our behalf, how long we keep it, and the rights you have. It is written for the caregiver who holds the account. Information about your loved one (the listener) is covered too, because you upload it.
1. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account identity: email address, name | Your Google sign-in | To create and secure your family account and to email you (export links, password resets) |
| Recordings of your voice and spoken answers | You record them | To transcribe them and write the retellings |
| Photos and videos | You choose them from your device | To build the memory video |
| Transcripts, key points, retellings, generated narration audio and video | Created by the service from your content | The product itself |
| Cloned voice (voiceprint) — biometric data | A recording you make with the speaker's permission | To narrate memories in a family voice. See the Voice Data & Retention Statement |
| Listener's first name and display preferences | You enter them | To personalise the listener's screen |
| Memory titles, chapters, dates | You enter them | To organise the Story Line |
| Usage and operational data: job status and errors, when memories are played, processing units per step (seconds of audio, text length) | Generated as the service runs | To run the service, fix failures, and understand our costs. Never includes the content itself |
| Push notification token, device platform | Your device, if you allow notifications | To tell you a memory is ready or was watched |
| Subscription status, token balance and ledger | The app store or Stripe | Billing. We never see or store card numbers |
| Terms and privacy acceptance (version and time) | You, in the app | Legal record |
2. What we do not do
- We do not sell personal data and we do not show advertising.
- We do not use your recordings, photos, voices or retellings to train AI models.
- Reflora staff do not browse your content. Our operator tools show account identity and operational state (counts, statuses, errors), not recordings, photos, transcripts, retellings or your loved one's name. [Note for counsel: technical access by the infrastructure owner exists; this is a policy and tooling control, not a cryptographic one.]
3. Who processes data for us
We use these providers, each under their own data-processing terms, only to deliver the service:
| Provider | What they do | What they receive |
|---|---|---|
| Google Firebase | Sign-in, push notifications | Email, name, device token |
| Render | Hosting of our servers and database | All service data, encrypted in transit and at rest |
| Cloudflare R2 | File storage | Recordings, photos, generated audio and video |
| ElevenLabs | Speech-to-text, voice cloning, text-to-speech | Recordings, retelling text, the voice sample used for cloning |
| Anthropic | AI language model that writes the retellings and checks them against your recording | Transcripts, key points, retelling text |
| Resend | Transactional email | Your email address and the message |
| Apple App Store, Google Play, Stripe | Payments | Payment data stays with them; we receive status and a customer reference |
Some providers are in the United States. [Note for counsel: add transfer mechanism wording if users outside the US are expected.]
4. How long we keep data
- While your account is active, your content is kept so your family can keep using it.
- Cloned voices follow the retention schedule in the Voice Data & Retention Statement and are destroyed immediately when you remove a voice or request deletion.
- Account deletion: sign-in stops immediately; all content, voices, listener profiles and devices are permanently erased after a 7-day grace period during which we can reverse an accidental deletion at your request. Payment ledger entries are kept in anonymised form for accounting.
- Fresh reset (on request): the same erasure of content, keeping your account and subscription.
- Export links expire after 7 days.
5. Your rights
- Access and portability: Settings → Your data → Get a copy of my data emails you a download of everything (recordings, photos, retellings, answers, ledger).
- Deletion: Settings → Your data → Delete my account, or see Delete your account.
- Correction: edit titles, key points, the listener's name and preferences in the app, or write to us.
- Withdraw voice consent: remove the voice in Settings; it is destroyed immediately.
- Depending on where you live you may have further rights (for example under the CCPA/CPRA or GDPR). Write to privacy@reflora.ai; we answer within [30] days.
6. Children
Reflora accounts are for adults. We do not knowingly collect data from children under 13 (or the age required where you live). Photos you upload may show children of your family; you are responsible for having the right to share them.
7. Security
Data is encrypted in transit and at rest. Access to production systems is limited to the operator and protected by sign-in with a fresh-authentication requirement for sensitive actions. Every operator action on an account is logged.
8. Changes
When this policy changes materially we will ask you to accept the new version in the app and record the version and time on your account.
9. Contact
privacy@reflora.ai · [COMPANY LEGAL NAME], [ADDRESS]