Privacy Notice
Version dpdp-2026-09-29. Written for India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
Who we are
Whose data, and on what basis
A family caregiver signs up and gives consent for their own data. The person living with dementia (“the person”) may not be able to give consent themselves. The caregiver confirms they are a family member or lawful guardian and gives consent on the person’s behalf, acting in the person’s best interest, as the DPDP Act allows for a person who cannot consent for themselves. The family member whose voice is copied gives their own consent by recording a spoken consent statement before any copy is made.
What we collect and why
- Caregiver: email address (to sign in), name, and an optional WhatsApp number (to tell you when the person replies).
- The person: name, the name they like to be called, language and dialect, hometown, family members (with photos, nicknames, birthdays, and how to speak about those who have died), life story, daily routine and times, favourites, festivals the family chooses, calendar dates, topics and words to avoid, what calms them, and facts the family confirms. Used only to write messages for them.
- Family photos and captions, shown to the person with messages.
- A family member’s spoken consent recording and a 1 to 2 minute voice sample, used only to create the cloned voice.
- The person’s voice replies, kept so you can hear them. Each reply is turned into text by a computer, and an AI reads the text to note the mood, who they asked about, worries, requests and memories, and to suggest new facts for you to confirm. These are observations to help the family notice, not a medical assessment. A patient’s words never become a fact unless you confirm them.
- Alerts (no reply by a time you choose, words of distress, strong upset), sent to you in the app and, if switched on, by email or phone notification.
- Recordings and songs you add to the comfort button.
- Usage events (message sent, opened, played, replied) with times, so you can see the messages are reaching them.
We do not assess, score or diagnose anyone. We do not sell data or use it for advertising.
Who processes it for us
- Supabase: database, sign-in and private file storage.
- Netlify: hosting the website.
- Anthropic (Claude): writes message drafts from the profile, and reads the text of replies as described above. AI writes every message; you approve each one before it is sent. Every AI output is kept in a log you can read.
- ElevenLabs: creates the cloned voice from the sample, turns approved text into speech, and turns the person’s voice replies into text.
- Resend (only if email alerts are enabled): sends alert emails to you.
- Twilio (only if enabled): sends WhatsApp notifications.
Some of these providers process data outside India, under contracts that limit use to providing the service.
How it is protected
Your rights
How long we keep it
What you agree to at sign-up
- I consent to Smriti processing my name, email address and optional WhatsApp number to run this service for my family, as described in the Privacy Notice.
- I am a family member or lawful guardian of the person I will add, and I give consent on their behalf, as they may not be able to give it themselves. I will act in their best interest.
- I understand Smriti stores photos, life details and voice recordings about the person, and uses AI (Anthropic Claude to write messages and ElevenLabs to speak them in a cloned voice).
- I know I can withdraw consent, correct data, or delete the person and all their data at any time from the app, and that deletion also removes the cloned voice.