smritiMiles apart, mornings together.

Privacy Notice

Version dpdp-2026-09-29. Written for India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

Who we are

Smriti is the Data Fiduciary for the personal data described here. You can reach our grievance contact at the grievance contact shown in the app. We reply within 30 days.

Whose data, and on what basis

A family caregiver signs up and gives consent for their own data. The person living with dementia (“the person”) may not be able to give consent themselves. The caregiver confirms they are a family member or lawful guardian and gives consent on the person’s behalf, acting in the person’s best interest, as the DPDP Act allows for a person who cannot consent for themselves. The family member whose voice is copied gives their own consent by recording a spoken consent statement before any copy is made.

What we collect and why

  • Caregiver: email address (to sign in), name, and an optional WhatsApp number (to tell you when the person replies).
  • The person: name, the name they like to be called, language and dialect, hometown, family members (with photos, nicknames, birthdays, and how to speak about those who have died), life story, daily routine and times, favourites, festivals the family chooses, calendar dates, topics and words to avoid, what calms them, and facts the family confirms. Used only to write messages for them.
  • Family photos and captions, shown to the person with messages.
  • A family member’s spoken consent recording and a 1 to 2 minute voice sample, used only to create the cloned voice.
  • The person’s voice replies, kept so you can hear them. Each reply is turned into text by a computer, and an AI reads the text to note the mood, who they asked about, worries, requests and memories, and to suggest new facts for you to confirm. These are observations to help the family notice, not a medical assessment. A patient’s words never become a fact unless you confirm them.
  • Alerts (no reply by a time you choose, words of distress, strong upset), sent to you in the app and, if switched on, by email or phone notification.
  • Recordings and songs you add to the comfort button.
  • Usage events (message sent, opened, played, replied) with times, so you can see the messages are reaching them.

We do not assess, score or diagnose anyone. We do not sell data or use it for advertising.

Who processes it for us

  • Supabase: database, sign-in and private file storage.
  • Netlify: hosting the website.
  • Anthropic (Claude): writes message drafts from the profile, and reads the text of replies as described above. AI writes every message; you approve each one before it is sent. Every AI output is kept in a log you can read.
  • ElevenLabs: creates the cloned voice from the sample, turns approved text into speech, and turns the person’s voice replies into text.
  • Resend (only if email alerts are enabled): sends alert emails to you.
  • Twilio (only if enabled): sends WhatsApp notifications.

Some of these providers process data outside India, under contracts that limit use to providing the service.

How it is protected

Every caregiver can see only the people they added. Photos and audio are in private storage and are shown only through short-lived signed links. The person’s screen is reached through a long random link that you can revoke or replace at any time.

Your rights

You can see, correct and update everything from the app. You can withdraw consent and delete a person at any time: deletion removes their profile, photos, recordings, messages, replies and the cloned voice at ElevenLabs. You can nominate someone to exercise these rights for you, and you can complain to us and then to the Data Protection Board of India.

How long we keep it

Until you delete it, or 12 months after the account was last used, whichever is sooner.

What you agree to at sign-up

  • I consent to Smriti processing my name, email address and optional WhatsApp number to run this service for my family, as described in the Privacy Notice.
  • I am a family member or lawful guardian of the person I will add, and I give consent on their behalf, as they may not be able to give it themselves. I will act in their best interest.
  • I understand Smriti stores photos, life details and voice recordings about the person, and uses AI (Anthropic Claude to write messages and ElevenLabs to speak them in a cloned voice).
  • I know I can withdraw consent, correct data, or delete the person and all their data at any time from the app, and that deletion also removes the cloned voice.