Your family memories belong to your family.
Hearthsay is built to be trusted with the people you love. Here is exactly how we keep their voices and stories safe — in plain words.
This is a draft privacy policy and should be reviewed before production launch.
Private by default
Every vault is private the moment you create it. Memories, recordings, and photos are visible only to the family members you invite — never indexed, never public.
Consent required
Before a loved one’s voice or memories are used, a Consent Passport must be verified by trusted family. Until then, voice previews and future messages stay turned off.
Delete anytime
You stay in control. Remove a single memory, a loved one’s profile, or your whole vault whenever you choose — and it is gone, not hidden.
Generated responses are clearly labeled
Every answer carries an "AI-generated from saved memories" badge and lists the exact memories it drew from, so family always knows what is real and what was inferred.
No public voice models
Your family’s recordings are never used to train public models or shared synthetic voices. Voice playback is a private, clearly labeled preview only.
No phone-call impersonation
Hearthsay never places calls or speaks for someone with scripted lines. It shares memory-based guidance inspired by saved recordings — nothing made up.
The details, in plain language
Your memories are yours.
What data Hearthsay collects
Hearthsay collects only what is needed to preserve and organize your family memories. We never sell your data, and we never use your family recordings to build public or shared voice models.
- Voice recordings you and your family choose to save.
- Transcripts generated from those recordings.
- Family relationships and loved-one profile details (name, relationship, living or in-memory status).
- Photos and avatars, if you upload them.
- Payment and subscription status (we store plan and trial state, not full card numbers).
- MCP connections, if you enable them — which assistants are connected and what scopes you approved.
- Bring-your-own-AI provider settings, if you enable them.
- Consent records, future message drafts, AI advice sessions, and the source references behind each answer.
How Hearthsay uses your data
Your data is used to keep your family vault working: to store and play back recordings, to organize memories by topic and date, and to produce source-backed answers that are always labeled "AI-generated from saved memories".
Generated answers are grounded only in your saved memories. When there is not enough recorded memory to answer a question honestly, Hearthsay says so rather than guessing. Synthetic voice features stay locked until consent is verified.
If you connect your own AI provider, your selected memories may be sent to that provider to answer your questions. You are told this clearly, and only providers you choose are ever used.
How your data is shared
Vaults are private by default. Memories are visible only to the family members you invite. Hearthsay does not index your vault, make it public, or share synthetic voices.
If you enable MCP, an external assistant can access only the people, memories, and tools you approve, within the scopes you grant. You can revoke that access at any time.
How to export your data
You can export your family archive anytime from Settings. The export includes your recordings, transcripts, memory titles, tags, dates, consent records, future message drafts, AI advice sessions, source references, and loved-one and vault metadata.
How to delete your data
You can delete a single memory, a loved-one profile, or your entire account from inside the app, and from the public delete-account page. Deleting a profile removes its recordings, transcripts, generated messages, and source memory links. We keep only the minimal billing or legal records we are required to keep.
Nothing is ever destroyed without confirmation. Account deletion asks you to type DELETE to confirm, and you can download your data first.
Consent and revocation
Before a loved one’s voice or memories are used, a Consent Passport must be verified by trusted family. Consent can be revoked at any time, which turns voice features back off. Hearthsay never places phone calls or speaks for someone with scripted lines.
Children and sensitive memories
Hearthsay is intended for adults preserving family memories. Treat recordings of children and other sensitive memories with the same care you would any private family keepsake, and only with the consent of those involved.
Contact
For privacy questions or data requests, reach the family vault owner inside the app, or contact Hearthsay support. This policy will be updated as Hearthsay grows.
The Consent Passport
Each loved one has a Consent Passport: a clear record of what may be saved, who may listen, and what Hearthsay is allowed to do. Trusted family members review and verify it. Voice previews and future-message delivery only ever turn on once consent is verified — and it can be revoked at any time.
Visit the Trust Center