Privacy Policy

Effective date: August 16, 2026 · Last updated: August 16, 2026

1. Who we are

"MeetClara" (the "App", "we", "us") is operated by Alex Koby (sole proprietor). The App is a service that places scheduled, AI-driven phone calls to a "loved one" (typically a parent or grandparent) on behalf of a "buyer" (typically an adult family member). The buyer reviews recorded calls, transcripts, and AI-extracted summaries from a mobile dashboard.

2. Who can use MeetClara

MeetClara is intended for use by adults age 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data to us, contact us and we will delete it.

3. The people involved

MeetClara is unusual: the person paying for the service ("buyer") is not always the person being called ("loved one"). Both are covered by this policy — as are care-team members the buyer invites (§6).

• Buyer: the family member who installs the App, creates an account, schedules calls, and reviews recordings.
• Loved one: the person Clara (our AI) calls. The loved one is not required to install anything. Their phone rings; Clara introduces herself as calling on behalf of their family member (see §5 on recording).

4. Data we collect

From the buyer (when you sign up + use the App)

From the loved one (during a phone call)

We do not collect:

• The loved one's email
• The loved one's location beyond the city the buyer entered
• Any data outside of the scheduled phone call (we do not access the loved one's contacts, calendar, microphone, or any device data — they are not running the app)

5. Call recording (important)

Every Clara call is recorded — audio and transcript. That is the heart of the service: the recording is what lets your family listen to the conversation and keep the stories. On a first call, Clara introduces herself as calling on behalf of the buyer. The loved one can hang up at any time; the recording stops the moment the call ends.

Buyers are responsible for recording consent. Call recording laws vary by state and country, and some places require the consent of everyone on the call. By scheduling calls, you confirm that you have told your loved one that these calls are recorded and that they have agreed, to the extent your local law requires their consent. If a loved one does not want to be called or recorded, remove their profile in the App (which stops all future calls) — and email privacy@meetclara.org to have existing recordings deleted.

6. How we use your data

Buyer data

• Authenticate you and protect your account.
• Show you the dashboard, transcripts, summaries, recordings.
• Send service emails (sign-in codes, care-team invites). We do not send marketing email.

Loved-one data

• Generate the AI conversation in real time (we send live audio to a speech-to-text vendor and recent transcript to a large language model — see §7).
• Produce a written summary, sentiment score, and "memories" after the call ends (an LLM processes the transcript).
• Display all of the above to the buyer in the App.

Sharing within your family (care team)

• The buyer can invite other family members or trusted people to their care team. Active care-team members can see the loved one's data in the App — including recordings, transcripts, summaries, notes, and schedules — until the buyer removes them.
• Invitations must be accepted from a signed-in account matching the invited email address. Only invite people you trust with this access.

Aggregated, non-personal use

• We compute non-identifying performance metrics across all calls (e.g. average call duration, transcription latency) to debug and improve the service. None of this is shared externally.

7. Third-party services we share data with

We use the following processors. Each one receives only the data necessary to do its job. None resell your data.

We have signed standard data-processing agreements with each vendor where available. We do not sell or rent personal data to advertisers, brokers, or any other party.

8. Where data is stored

• Audio recordings: Supabase Storage (S3-backed), private bucket, signed URLs only. Servers are in U.S. regions.
• Database rows (transcripts, summaries, profiles, memories): Supabase Postgres, U.S. region, encrypted at rest.
• Photos (profile photos and photos of your loved one): Supabase Storage; currently served via addressable URLs rather than signed links.
• On-device data (your auth session): protected by the operating system's security features.
• In-flight audio during a call: passes through our telephony and speech vendors (§7) and our servers. The lasting copies are the recording files in Supabase Storage (a lossless original and a playback copy); transient working copies on our servers are cleaned up after processing — and if archiving fails, a copy is retained on our servers until it can be recovered.

9. How long we keep your data

To permanently delete your entire account — including all profiles, recordings, and transcripts — email privacy@meetclara.org from your account email address. Deletion completes within 30 days. (An in-app deletion flow is on our roadmap; until it ships, email is the way.)

10. Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccuracies.
• Delete your data.
• Export a machine-readable copy of your data.
• Opt out of any non-essential data sharing (we already don't do any).

To exercise these rights, email privacy@meetclara.org. We respond within 30 days. If you live in California (CCPA/CPRA) or the European Economic Area / UK (GDPR), the same rights apply with the deadlines those laws impose.

11. Security

We use industry-standard practices to protect your data:

• All transport over TLS 1.2+ (HTTPS, WSS).
• Authentication sessions protected on-device by the operating system's security features.
• Database access enforced by row-level security: data is visible only to the account that created it and to care-team members that account has invited (§6).
• Vendor and database credentials (API keys, service keys) are server-side only; the app on your device never holds them — only your own sign-in session.
• Recording access is logged — each time a playback link is created: who, for which recording, when, and from where (§9).

We are a small team and do not yet have SOC 2 or HIPAA attestations. We make security decisions conservatively but cannot promise an attack will never succeed. If we discover a breach affecting your data, we will notify you within 72 hours.

12. Children's privacy

MeetClara is not intended for, marketed to, or knowingly used by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us immediately and we will delete it.

13. Changes to this policy

If we materially change how we collect or use data, we will email you at least 30 days before the change takes effect, and update the "Last updated" date above. Continued use of the App after the change constitutes acceptance.

14. Contact

This policy is provided in plain English. If you'd like a copy in your preferred language, email us.  ·  meetclara.org