Privacy Policy
Effective date: March 25, 2026 · Last updated: March 25, 2026
Family Guardian AI (“we,” “our,” or “us”) is operated by Finn Willwerth and Donnie Trump III. We built this platform to give families peace of mind by enabling AI-powered daily check-in calls for elderly loved ones and by surfacing meaningful insights about their health and wellbeing over time.
Because our service involves sensitive personal and health-related data — including information about senior citizens who may be vulnerable — we take privacy with the utmost seriousness. This Privacy Policy explains what data we collect, how we use it, who we share it with, how long we retain it, and what rights you have.
By creating an account or using Family Guardian AI, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Definitions
- “Service” means the Family Guardian AI platform, website at familyguardian.ai, mobile web application, and all related APIs and infrastructure.
- “Family Member” means you — the adult who creates an account to monitor a senior.
- “Senior” or “Monitored Individual” means the elderly person enrolled in check-in calls under a Family Member’s account.
- “Personal Data” means any information that identifies or could reasonably be used to identify a person.
- “Health Data” means sensitive data relating to a person’s physical or mental health, medications, cognitive state, or wellbeing.
- “Call Data” means transcripts, AI-generated summaries, mood scores, and analysis produced from check-in calls.
2. Data We Collect
We collect data in three ways: data you provide directly, data generated automatically by our systems, and data received from third-party services.
2.1 Data You Provide Directly
| Family Member account | Name, email address, password (hashed), phone number for SMS alerts |
| Senior profile | Senior’s full name, phone number, date of birth, photo (optional) |
| Health & medical context | Medical conditions (e.g., dementia, diabetes, Parkinson’s), current medications, mobility limitations, cognitive status, dietary restrictions, any special health notes provided by family |
| Interests & personality | Hobbies, career history, favorite topics, important family members, life stories — used to personalize conversations |
| Family instructions | Standing or one-time instructions given to the AI about what to discuss or avoid (e.g., “Don’t mention Dad’s passing”) |
| Call schedule | Preferred call days and times in the senior’s local timezone |
| Family relationships | Names and roles of other family members granted access to the account |
2.2 Data Generated During the Service
| Call transcripts | Full text transcripts of every AI check-in conversation with the senior |
| AI analysis & mood scores | Mood score (1–10), detection flags (confusion, distress, pain, fall risk), AI-generated call summary, key topics discussed, extracted memories |
| Wellbeing scores | Computed wellbeing scores derived from call analyses over time |
| Anomaly detection flags | Boolean flags and narrative descriptions when concerning patterns are detected |
| Call metadata | Call duration, start time, completion status, call ID from ElevenLabs |
| Conversation memories | Stories, quotes, and life details extracted from calls and stored in the Story Vault |
| Weekly reports | AI-generated weekly wellness summaries compiled from all calls in the period |
| Chat messages | Messages sent by Family Members to our AI assistant asking about the senior’s status |
| Alert records | Records of alerts generated and sent, including severity, message, and acknowledgment status |
| Usage data | Pages visited, features used, session duration, device type, browser, IP address |
2.3 Data Received From Third-Party Services
When a call is completed, our voice AI provider (ElevenLabs) sends us the call transcript and metadata via a secure webhook. Twilio provides SMS delivery status. Supabase (our database) stores all data on our behalf.
2.4 Data We Do Not Collect
We do not collect or store audio recordings of calls. Transcripts are text-only. We do not collect payment card numbers (billing, if and when introduced, would be handled by a PCI-compliant processor). We do not knowingly collect data from anyone under 18 (see Section 10).
3. How We Use Your Data
We use data collected for the following purposes:
- Delivering the Service. Initiating and managing AI check-in calls; generating personalized conversation prompts; processing call transcripts; computing mood, wellbeing, and cognitive scores; populating the family dashboard; generating weekly reports.
- AI Analysis (via Anthropic Claude). Call transcripts are sent to Anthropic’s Claude API for structured analysis. Claude receives the transcript and recent call history and returns a structured analysis: mood score, anomaly flags, summary, and extracted memories. No identifying information beyond what appears in the transcript is sent to Anthropic.
- Voice Calls (via ElevenLabs + Twilio). ElevenLabs provides the conversational AI voice that conducts check-in calls over Twilio’s telephony network. The senior’s phone number and a system prompt (containing their personalization context) are sent to ElevenLabs to initiate each call.
- SMS Alerts (via Twilio). When a health concern is detected, we send SMS alerts to Family Members who have opted in. We send the Family Member’s phone number and alert message to Twilio for delivery.
- In-App Notifications. We generate in-app notifications for call completions, anomaly alerts, and other important events.
- Account Management. Creating and managing your account, authenticating sessions, handling password resets, responding to support inquiries.
- Service Improvement. Understanding aggregate usage patterns to improve call quality, anomaly detection accuracy, and dashboard functionality. We do not sell your data or use it to train AI models for third parties.
- Legal Compliance. Retaining records as required by applicable law, responding to valid legal requests, enforcing our Terms of Service.
4. Third-Party Services & Data Processors
We share data with the following sub-processors to deliver the Service. Each is bound by data processing agreements and appropriate security standards:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database & authentication | All user and application data | USA (AWS us-east-1) |
| ElevenLabs | AI voice calls | Senior phone number, system prompt with profile context, call config | USA |
| Twilio | Telephony & SMS alerts | Senior phone number (call routing), Family Member phone number (SMS), alert message content | USA |
| Anthropic | AI transcript analysis | Call transcript text, recent call summaries | USA |
| Vercel | Hosting & edge functions | Request data, logs (IP address, user agent) | USA |
We do not sell, rent, or share your personal data with advertisers, data brokers, or any third party for their own marketing purposes — ever.
5. Data Retention & Deletion
5.1 Retention Periods
| Account & profile data | Retained for the life of your account plus 30 days after account deletion request |
| Senior profile & health context | Retained for the life of your account plus 30 days after account deletion request |
| Call transcripts | Retained for 2 years from the date of the call to support longitudinal trend analysis, then permanently deleted |
| AI analyses & mood scores | Retained for 2 years from the date of the call |
| Alert records | Retained for 2 years from creation |
| Weekly reports | Retained for 2 years from creation |
| Conversation memories (Story Vault) | Retained until manually deleted by a Family Member, or upon account deletion |
| Chat messages | Retained for 1 year from the message date |
| Usage logs | Retained for 90 days, then deleted |
| Webhook & system logs | Retained for 30 days for debugging purposes |
5.2 Account Deletion
You may request deletion of your account and all associated data at any time by emailing privacy@familyguardian.ai. We will process your request within 30 days. Some data may be retained longer where required by law (e.g., financial records). After deletion, data is removed from our production systems within 30 days and from backups within 90 days.
6. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit: All data is transmitted over TLS 1.2+. API communication between our services and third parties is encrypted.
- Encryption at rest: All data stored in Supabase (PostgreSQL on AWS) is encrypted at rest using AES-256.
- Row-Level Security (RLS): Database access is enforced at the row level — Family Members can only access data for seniors they are connected to.
- Webhook signature verification: Incoming webhooks from ElevenLabs are verified using HMAC signatures to prevent spoofing.
- Authentication: Passwords are hashed and never stored in plaintext. Sessions are managed via secure, HTTP-only cookies.
- Access controls: Production database credentials are rotated regularly and access is limited to production systems and authorized engineers.
- No audio storage: We do not record or store call audio — only text transcripts.
Despite our best efforts, no system is 100% secure. If you believe your account has been compromised, contact us immediately at security@familyguardian.ai.
7. Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve the Service:
| Authentication cookies | Essential — required to keep you signed in. Cannot be disabled. |
| Preference cookies | Store your dark/light mode preference. Can be cleared via browser settings. |
| Analytics (privacy-preserving) | If and when we add analytics, we will use privacy-respecting tools and disclose them here. We currently use no third-party analytics. |
We do not use advertising cookies or sell cookie data to third parties. You can control cookies through your browser settings, though disabling essential cookies will prevent you from using the Service.
8. Your Rights
Depending on where you live, you have the following rights regarding your personal data:
8.1 Rights for All Users
- Access: Request a copy of the personal data we hold about you and the seniors associated with your account.
- Correction: Update or correct inaccurate data directly in the app or by contacting us.
- Deletion: Request deletion of your account and associated data (see Section 5.2).
- Data portability: Request an export of your data in a machine-readable format (JSON or CSV).
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Objection: Object to processing of your data where we rely on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
8.2 California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights. We do not sell personal information as defined by the CCPA. California residents have the right to:
- Know what personal information we collect, use, disclose, or sell about you.
- Delete personal information we have collected from you (subject to certain exceptions).
- Opt out of the sale of personal information — though we do not sell personal information.
- Non-discrimination for exercising your CCPA rights.
- Limit the use and disclosure of sensitive personal information (we use health data only to deliver the Service).
To exercise your CCPA rights, email us at privacy@familyguardian.ai with “CCPA Request” in the subject line. We will respond within 45 days.
8.3 EEA / UK Residents (GDPR)
We do not currently operate a dedicated establishment in the European Economic Area or United Kingdom. If you access the Service from these regions, you do so at your own discretion. We apply the data protection principles described in this policy to all users regardless of location, including purpose limitation, data minimization, and security.
To exercise any of your rights, email privacy@familyguardian.ai. We may need to verify your identity before processing your request.
9. Special Category Health Data
The Service involves sensitive health and medical information about seniors. We treat this category of data with heightened protection:
- Health data is used only to personalize calls and detect wellbeing concerns. We do not use health data for advertising, profiling beyond the Service, or any secondary purposes.
- Health data entered into senior profiles (medical conditions, medications, cognitive status) is stored encrypted in our database and is never shared with third parties except as described in Section 4 and only to the minimum extent necessary.
- Call transcripts — which may contain health disclosures made by the senior during a call — are processed by Anthropic’s Claude API for analysis. Only the transcript text is sent; no profile identifiers beyond what the senior mentions aloud.
- AI-generated mood scores and anomaly flags are clinical aids for family awareness, not medical diagnoses. See Section 11 of our Terms of Service.
- Family Members who add health data about a senior are responsible for obtaining appropriate consent from the senior or, where the senior lacks capacity, acting in their best interests.
10. Children’s Privacy
Our Service is designed for adults and is intended to monitor elderly seniors (typically age 65 and above). We do not knowingly allow anyone under the age of 18 to create an account or to be enrolled as a Monitored Individual.
If you believe we have inadvertently collected data from or about a minor, please contact us immediately at privacy@familyguardian.ai and we will promptly delete it.
11. Data Breach Notification
In the event of a data breach that is reasonably likely to result in harm to you, we will notify affected users without undue delay and, where required by law, within 72 hours of becoming aware of the breach. Notification will be sent to the email address associated with your account.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes — those that significantly affect your rights or how we use your data — we will notify you via email or a prominent in-app notice at least 14 days before the change takes effect.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy inquiries within 5 business days.