1. Who this policy covers
This Privacy Policy describes how [Company Legal Name] ("Hamton," "we," "us") handles personal information when you use our website, mobile or web applications, and related services (the "Service"). It applies to family members and caregivers who create accounts, people whose voices and memories are recorded ("care recipients"), and visitors to our site.
By using the Service, you agree to this policy. If you record another person's voice or information, you confirm you have the authority and consent to do so, as described in our Consent Policy.
2. Information we collect
Information you give us
- Account details — name, email address, password, and (for paid plans) billing information processed by our payment provider.
- Care-recipient details — the name and information you choose to add about the person receiving care.
- Voice recordings & memories — audio you record, transcripts generated from it, and the stories and notes you add. See Section 3.
- Communications — messages you send us through forms, email, or support.
Information we collect automatically
- Usage data — features used, calls started, and general activity, used to operate and improve the Service.
- Device & log data — device type, browser, IP address, and timestamps.
- Cookies & similar technologies — used for sign-in, security, and remembering preferences. You can control cookies in your browser settings.
3. Voice recordings & memory data
Voice and memory data is the heart of Hamton and the most sensitive information we hold. We treat it accordingly:
- Consent is required. Every voice profile requires explicit permission from the person recorded or their authorized representative. See our Consent Policy.
- It belongs to your family. Recordings, transcripts, voice profiles, and memories are private to your account and the people you invite.
- It is used to deliver the Service — to build a recognizable voice profile and to power familiar, consented de-escalation calls.
- Depending on your jurisdiction, voiceprints may be treated as biometric or special-category/health-related data subject to additional legal protections. [Confirm applicable laws with counsel.]
4. How we use information
- To provide, maintain, and operate the Service, including building voice profiles and powering calls.
- To create and secure your account and process payments.
- To respond to your requests and provide support.
- To improve reliability, safety, and quality of the Service.
- To send you service-related messages (and, only with your consent, optional updates).
- To detect, prevent, and address fraud, abuse, and security issues.
- To comply with legal obligations.
5. Our legal bases (where GDPR/UK GDPR applies)
Where this law applies, we rely on: consent (for voice/biometric and any health-related data, and optional communications); contract (to deliver the Service you sign up for); legitimate interests (to secure and improve the Service, balanced against your rights); and legal obligation (to meet our compliance duties). [Confirm with counsel.]
6. When we share information
We do not sell your personal information, voice recordings, or memories. We share information only:
- With people you invite — family members or caregivers you add to your account, and (for facility plans) authorized staff.
- With service providers — vendors who host, process, or support the Service (for example, cloud hosting, speech processing, and payment processing) under contracts that require them to protect your data and use it only for us. [List sub-processors / link to a sub-processor page.]
- For legal reasons — to comply with the law, enforce our Terms, or protect the rights, safety, and security of users and the public.
- In a business transfer — if we are involved in a merger, acquisition, or sale of assets, with notice to you and continued protection of your data.
7. AI processing and model training
Hamton uses automated speech and language technology to create voice profiles and conduct calls. We do not use your voice recordings, transcripts, or memories to train public or general-purpose AI models, and we do not sell them. Any processing is performed to deliver the Service to your family. [Describe whether processing happens on-device, in your cloud, or via a named vendor, and update if that changes.]
8. How long we keep information
We keep personal information only as long as needed to provide the Service and for legitimate, lawful purposes such as security, dispute resolution, and legal compliance. You can delete recordings, memories, voice profiles, or your entire account at any time. When you delete data or close your account, we delete or de-identify the associated personal information within [X days], except where we must retain limited records to meet legal obligations.
9. How we protect information
- Encryption in transit and at rest.
- Access controls limiting who can access data, with role-based permissions for facility accounts.
- Operational safeguards including monitoring and least-privilege practices.
No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and regulators of any breach as required by law. [Describe your breach-notification process / timeline.]
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent at any time. For voice and biometric data, you may withdraw consent and request deletion as described in our Consent Policy.
To exercise any right, email privacy@hamton.example. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority. We will not discriminate against you for exercising your rights.
California residents: you have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sharing" for cross-context advertising. We do not sell or share personal information in that sense. [Confirm and add required disclosures with counsel.]
11. Children
The Service is intended for adults. It is not directed to children under [13/16], and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you (for example, by email or an in-app notice) and update the "Last updated" date above. Continued use of the Service after changes take effect means you accept the updated policy.
13. Contact us
Questions or requests about privacy? Reach our team:
- Email: privacy@hamton.example
- Mail: [Company Legal Name, Street Address, City, State/Country, Postal Code]
- Data Protection Officer / EU-UK representative (if applicable): [Name & contact]
Hamton is a support tool and does not provide medical advice, diagnosis, or treatment. See our Terms of Service and Consent Policy.