Voice Data & Retention Statement
Reflora can narrate memories in a family member's own voice. To do that it creates a voice clone from a recording. A voice clone is a biometric identifier under laws such as the Illinois Biometric Information Privacy Act (BIPA) and similar statutes. This statement is our public written policy for that data.
1. Purpose
Voice clones are created and used for one purpose only: to narrate the memories your family creates in Reflora, for your family's listener. They are not used for identification, verification, advertising, training of AI models, or shared with anyone outside the providers that process them for us.
2. Consent
- A voice is cloned only from a recording made deliberately for that purpose, after the person recording confirms in the app that it is their own voice, or that they have the express permission of the person whose voice it is.
- That confirmation, with its time, is stored with the voice and can be shown to the person concerned on request.
- Consent can be withdrawn at any time by removing the voice in Settings or by writing to privacy@reflora.ai.
3. Where voice data is kept
The recording used for cloning is stored in our file storage (Cloudflare R2). The voice model is created and held by our speech provider, ElevenLabs, under its data-processing terms, and is referenced from our database by an identifier. Narrations already generated are ordinary audio files and are not biometric data.
4. Retention schedule
A voice clone and its source recording are permanently destroyed at the earliest of:
- the moment you remove that voice in Settings;
- the moment you request account deletion or a fresh reset (voices are destroyed immediately, before the 7-day grace period that applies to other content);
- [12 months] after your family's last use of Reflora (inactivity); or
- in every case, within three years of your family's last interaction with Reflora.
Destruction means deleting the model at the provider and the source recording from storage, and clearing the reference in our database. Narrations already generated in that voice remain playable unless you also delete the memories.
5. Who can access voice data
Only the systems that generate narrations. Reflora's operator tools show that a voice exists, its status and its consent time; they do not play or download voice data. Every operator action is logged.
6. Security
Voice data is encrypted in transit and at rest and handled with the same care as the rest of your content, as described in our Privacy Policy.