Privacy Policy

Last updated: April 9, 2026

1. Introduction

Voralee ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI companion service.

2. Data We Collect

Personal Information

• Name, age, language preference
• Family information (as provided by you)
• Interests and preferences
• Login credentials (encrypted)

Conversation Data

• Text messages exchanged with the AI companion
• Voice recordings (processed locally, not stored permanently)
• Mood and health information mentioned in conversations

Media

• Photos and videos uploaded by you or your family

Health Data

• Health indicators mentioned in conversations (sleep, mood, pain, appetite)
• Medical notes added by family members or healthcare staff
• Medicine schedules

3. How We Use Your Data

• To provide personalized AI companion conversations
• To remember your stories, preferences, and family details
• To monitor your wellbeing and alert family when needed
• To generate daily reports for family members (if you consent)
• To provide clinical insights to healthcare professionals (Business plans only)

4. Data Sharing

We share your data ONLY with:

• Family members - Only if you explicitly enable sharing in your profile settings
• Healthcare providers - Only if you are a patient in a Business/Enterprise plan, and only with authorized staff

We NEVER sell your data to third parties. We NEVER use your data for advertising.

5. Data Storage & Security

• All data is stored on secure European servers
• Passwords are encrypted using SHA-256 with unique salts
• Session tokens expire after 30 days
• Daily encrypted backups are performed
• Voice data is processed locally and not transmitted to external services

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access - Request a copy of all your personal data
• Rectification - Correct inaccurate data
• Erasure - Request deletion of all your data ("right to be forgotten")
• Portability - Receive your data in a machine-readable format
• Restriction - Limit how we process your data
• Objection - Object to certain processing activities
• Withdraw consent - At any time, without affecting prior processing

To exercise any of these rights, contact us at: privacy@voralee.com

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days. Anonymized aggregate data may be retained for service improvement.

8. Special Category Data

Health data is considered special category data under GDPR. We process this data based on your explicit consent and, for healthcare settings, on the basis of healthcare provision (Art. 9(2)(h) GDPR).

9. Children

Voralee is designed for elderly adults. We do not knowingly collect data from persons under 16 years of age.

10. Changes

We may update this policy. Significant changes will be communicated via email or in-app notification.

11. Contact

Data Controller: Voralee
Email: privacy@voralee.com