Aerisight Care Privacy Policy

Information we handle

Account and access information: your name, email address, account identifiers, sign-in session identifiers, care-space membership, invitations, permissions and saved preferences. Sign-in requires account and session information. A session cookie keeps you signed in; local device storage remembers choices such as language.

Information you choose to add: reminders, medication schedules, allergies and food preferences, kitchen inventory, shopping lists, meal plans, notes, bills, amounts, due dates, account-ending digits, reported payments, receipts and uploaded documents. These records may contain health or financial information. Add another person’s information only when you are authorized to do so.

Personal contacts: the names, telephone numbers, relationships and notes you enter. The app does not import your device’s address book. Calendar export creates a copy of selected app reminders; it does not read your device calendar.

If you enable phone reminders, selected reminder details are scheduled on your device and may appear in notifications. You can turn reminders off and manage notification previews in device settings.

Optional AI and voice information: the messages, microphone recordings, reply text, documents and selected food or kitchen information needed for the feature you choose. If you report AI or care-circle content or a person, we receive the excerpt, reason and explanation you submit, plus account, care-space and report identifiers.

Policy acceptance: we record your account identifier, the accepted policy version and text fingerprint, the language shown, and the acceptance date and time. These records are removed with your account.

Connection and operational information: hosting and service providers process IP addresses, approximate location derived from network information, browser or device information, requested pages, timestamps, request results and performance diagnostics. We also record feature usage counts, consent choices and security or care activity. The app does not request precise GPS location.

How we use information

We use information to operate accounts, authenticate users, enforce access permissions, organize records, deliver requested features and transactional emails, provide optional AI assistance, personalize meal suggestions, respond to support and deletion requests, diagnose faults and protect the service from abuse.

We use operational information to understand service performance and availability. Aerisight Care does not display third-party advertisements or sell personal care records. It does not make payments or automatically approve bills.

Where data protection law requires a legal basis, we use information as needed to provide the requested service, meet legal obligations, and pursue legitimate interests in security and reliable operation. We obtain consent where required, including for optional AI processing and sensitive information. Withdrawing consent stops the affected future processing; it does not undo processing that already occurred.

Your care circle and choices to share

Care-space owners choose which areas other members can access, such as routines, kitchen information and bills. Members can see records within their permissions. Role labels do not by themselves grant access. Your personal contacts and AI companion conversation history are not shown to your care circle through shared care records.

When you choose to export, share, call or invite someone, the selected information may reach the person or service you choose. Recipients may keep copies they have downloaded or received. Removing their access prevents future access through the app but cannot recall those copies.

AI and voice

OpenAI processes information sent to the optional AI features. Conversations send the text needed for a response; voice transcription sends the recording you choose to submit; spoken replies send reply text for speech generation. Optional bill reading sends the selected PDF for extraction. Meal assistance uses selected preferences and eligible meal options based on your kitchen information.

The microphone starts only when you choose to record. You can decline microphone access and use text. AI conversations can be turned off in Settings. Separate features ask for the relevant consent before sending content.

We do not store raw microphone recordings or companion chat history as shared care records. Transcription recordings are handled in memory for the request. Saved meal plans, bill details and submitted reports are retained separately. OpenAI’s published API rules specify no content retention for its transcription endpoint; other AI requests can be retained in abuse-monitoring logs for up to 30 days, with longer retention where required by law or needed to prevent harm. OpenAI states that API content is not used for model training by default. These are different retention rules, not a promise that every AI request is immediately erased.

AI can make mistakes. Aerisight Care provides everyday organization and support; it is not a medical device, an emergency service or a payment processor.

Service providers and other disclosures

We use Netlify for hosting, server functions and operational monitoring; Supabase for authentication, database and private document storage; OpenAI for selected AI and voice processing; and Resend for invitation emails. Authentication email delivery is handled through the authentication service. Providers receive the information needed for their respective functions.

If Google Play subscriptions are offered, Google processes the transaction and we use purchase or subscription-status information to manage access. Aerisight Care does not need your payment-card number for that purpose.

We may disclose information to comply with applicable law or a valid legal request, or as necessary to investigate fraud, security incidents or threats to safety. We also disclose information when you direct us to do so, including through care-circle access and exports.

Retention and deletion

We keep account information and saved care content while needed to provide the service. You can request deletion at the account-deletion page or by emailing info@aerisightanalytics.com from your account email address. We verify the request and complete verified account-deletion requests within 30 days, or sooner where applicable law requires.

Account deletion removes your sign-in account, personal contacts and preferences. If you own a care space, its records, documents and invitations are removed for everyone in that space. Spaces owned by other people remain: your access and account attribution are removed, while shared content in those spaces may remain. Copies others have downloaded cannot be recalled.

Submitted content and user reports are kept to review and address the reported issue; the service schedules routine deletion from active report storage after 30 days. Account or care-space deletion also removes associated reports. A sign-in session expires after 24 hours. Expiry is an access limit, not a claim that all related operational records disappear at that moment.

Provider operational logs, security records and backup copies follow separate retention schedules and may remain after deletion of active app records. Supabase currently provides one day of API/database log history on our plan. Netlify’s published monitoring retention varies by plan from one to 30 days. OpenAI’s content-retention rules are described above. These periods describe the specified records, not every copy held by a provider. Contact us for information about a particular deletion request.

We retain support and deletion correspondence as needed to handle the request and document its outcome. If particular information must be retained to meet a legal obligation or address a specific security issue, we limit it to that purpose and explain the applicable reason and retention period when responding to your request, unless prohibited by law.

Deleting an Aerisight Care account does not cancel a Google Play subscription. If you have one, cancel it separately in Google Play to stop future charges.

Security and processing locations

We use encrypted connections, sign-in controls and care-space permissions. Uploaded bill documents are stored privately. These measures reduce risk, but no service can guarantee complete security. Keep sign-in codes and credentials private and review whom you invite.

Our database is hosted in the United States. Service providers may process information in the United States and other countries where they operate. Those countries may have different privacy protections from your location. We use provider contractual protections and access controls, and apply additional transfer safeguards where required by applicable law. Contact us to ask about the arrangements relevant to your information.

Your choices and privacy rights

You can manage care-circle permissions, change available preferences, choose whether to use optional features, and manage microphone and notification permissions in your device settings. Essential account, session and operational processing is needed to provide the online service.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information, restrict or object to processing, or withdraw consent. Contact info@aerisightanalytics.com to make a request. We may need to verify your identity or authority before acting. You may also complain to your local data protection authority. We respond according to applicable law.

Adults only

Aerisight Care is intended for adults aged 18 and over and is not designed for children. If you believe a child has provided information to the service, contact us so we can investigate and take appropriate action.

Changes and contact

We update this policy when our practices change and identify the effective date above. We provide additional notice or obtain consent where required. Privacy contact: Aerisight Analytics LLC, info@aerisightanalytics.com.

Provider information

• Netlify
• Supabase
• OpenAI data and retention
• Resend