Privacy, in plain English

What Earlene keeps, and what she does not.

This page describes what the system does today. The formal privacy policy and the household agreement are written and are being reviewed by counsel before the first paying family; when they are final they will be linked here. Nothing on this page will get looser.

No audio is recorded. Calls are transcribed into notes.
Nothing is used to train a model, shared across households, or sold.
Reports go to the family only. Never to an agency, insurer, doctor or advertiser, unless a law requires it, and then we tell you.
Any member of a household can have everything erased.

What is kept, for how long

Data	Form	Kept	Deletion
Phone numbers	Keyed hash for lookup, plus one encrypted copy to dial	Life of the household	Erased on request
First names	Plain text labels for the companion and the family	Life of the household	Erased on request
What your parent says	Transcribed by the telephone provider, kept as text under your parent's key	Household plus 30 days	Erased on request
What Earlene says	Text	Household plus 30 days	Erased on request
Call facts	Connected or not, direction, seconds, time. No words	Household plus 30 days	Erased on request
Your notes and texts	What you sent her, by command and template id. Never the body of her texts	Household plus 30 days	Erased on request
Consent records	Which question, which wording, when, and the answer	Three years after the household closes	Kept as the record of what was agreed
Opt-outs	STOP and press 9, as keyed hashes	Indefinitely	Kept so a request to stop is never lost
Audio	Not recorded	Never
Voiceprints	Not created	Never

What she learns

Earlene remembers the way a friend does, in text, under a key derived from your parent's phone number. In a call she has the last few minutes in front of her. Across calls she has what your parent told her: names, routines, the knee, the neighbor, what was said last Tuesday. Her own background is fixed in her signed bundle and is never confused with your parent's life.

Before anything is written down, phone numbers and email addresses that come up in conversation are stripped. Card numbers, passwords and codes are never asked for and never stored. Your parent can tell her to forget something, and she will.

Who sees what

Your parent: Hears everything she says. Can keep things private, with three exceptions: money already moved, danger, and talk of self-harm.
The family: Call facts, consent records, your own notes, and flags with the verbatim line that caused them. Never transcripts.
The operator: Can read a household's journal and notes to fix a problem or answer a request, and for no other reason.
Processors: Handle data for us and only for us, under contract.

Twilio	the telephone and texts; speech to text of the call	numbers, audio in transit, transcripts
Baseten	the model that forms her answers	the prompt and the recent turns, under no-retention terms
ElevenLabs	her voice	only her own lines, which may carry a first name
Supabase	the database and file storage	all tables, encrypted at rest
Fly.io	hosting in the United States	the running application and its secrets
Cloudflare Turnstile	telling people from bots on the website chat	browser signals during the check; never what you type
Stripe	billing	the card and the billing phone; we never see card numbers

Your rights, for everyone in a household

See it. Ask for the journal and, for your parent, the notes from the calls, in plain text.
Delete it. Numbers, names, consent records, the journal and the notes, usually the same day and always within 30 days. If your parent asks, it is deleted whatever anyone else prefers.
Stop. Say "stop calling me" or press 9 on a call. Text STOP. Text PAUSE to stop calls for a while.
Ask a person. Email privacy@earlene.ai. We verify by calling the number back. Nobody is charged or treated differently for asking.

State notices

Observations about mood, memory or health are not offered yet for companions in Washington, Nevada or Connecticut, whose consumer health data laws require a separate consent and policy we have not finished. California residents have the rights above under the CCPA; we do not sell or share personal information. Earlene is for adults; we do not knowingly set up a companion under 18.

Earlene is a resident of the Forever Protocol. The same rules apply to every resident. How residents work.