Privacy Policy
Effective 4 September 2026
Smriti is a small service with a simple promise: your loved one receives a warm daily WhatsApp message in your voice. Keeping that promise requires us to handle some deeply personal data — your voice above all — and this page explains, in plain words, exactly what we collect, why, who helps us, and how you erase it.
Who we are
Smriti (“we”, “us”) is an early-pilot service operated from India for family caregivers of people living with memory loss. For anything in this policy, write to us at the contact address at the bottom of this page.
The short version
You record a voice note, share a photo, and answer three questions inside one WhatsApp chat. We use these to send your loved one a short daily video message in a digital copy of your voice. Every message is AI-generated and we say so up front. Reply STOP to pause everything; reply DELETE to erase your data, including the voice copy at our voice partner. Nothing is captured before you agree.
What we collect, and when
We collect nothing until you have read our consent notice in the chat and tapped “I agree”. That single agreement covers four things, each recorded separately with the exact wording you saw: use of your voice, the daily messages, your authority to arrange them for your loved one, and the disclosure that the messages are AI-generated. After that, and only after that, we collect:
- Your WhatsApp phone number and profile name — this is how the chat works and how we know you.
- Your voice recording, and the digital voice copy created from it — the heart of the service.
- A photo of yourself — shown in the daily video message.
- Your answers to three short setup questions — used only to fit the tone and simplicity of each message to your loved one’s day.
- Your loved one’s WhatsApp number, which we confirm with a one-time code sent to their phone — so messages can only ever be set up for a number that is really theirs.
- Delivery records — which daily messages were sent and whether they arrived, so the service actually works.
- Your consent records — what you agreed to, when, and under which version of the wording.
What we use it for — and nothing else
Everything above serves exactly one purpose: creating and delivering your daily message, safely. We do not sell your data. We do not use it for advertising. We do not train AI models on your voice or your family’s information. This website itself sets no cookies and runs no trackers.
Who helps us run Smriti
Smriti is built on a small number of specialist providers. Each one processes only what its role requires, under its own data-protection terms:
- Meta Platforms (WhatsApp Business Platform) — carries the chat and delivers the messages.
- ElevenLabs — creates and hosts the digital copy of your voice, and turns each day’s words into audio.
- Anthropic (Claude) — drafts each day’s words and runs the automatic review every message must pass before it is sent.
- Cloudflare — hosts this service and stores your voice recording, photo, and the finished video files.
- Supabase — hosts our database.
How we protect it
Your voice recording is stored encrypted with a key we hold separately, and there is deliberately no public link to it anywhere — our own systems can only use it, not hand it out. Photos and finished videos live in short-lived storage used only for delivery. Access to our systems is restricted to the small team that runs Smriti, and our providers’ error logs are scrubbed of phone numbers before we ever see them.
How long we keep it, and how you erase it
We keep your data only while your Smriti service is active. You can end that at any moment, from the same chat, with one word:
Reply DELETE. We then erase your data everywhere it lives — the voice copy at ElevenLabs first, then every stored recording, photo, and video file, and then our records. This runs automatically and immediately, and if any step fails the erasure is retried until it completes; we confirm in the chat when it is done.
One thing survives erasure: the record that you gave consent and later withdrew it. Indian data-protection law expects us to be able to prove both, so that record is kept — it contains no voice data, no photo, and no message content.
Your rights
Under India’s Digital Personal Data Protection Act (DPDP), you have the right to know what personal data we hold about you, to have it corrected, to have it erased, and to withdraw your consent as easily as you gave it — for Smriti, that is literally one word in the chat. You may also nominate someone to exercise these rights for you, and you have the right to have any grievance heard.
For your loved one: they receive messages but are never asked to interact, and you — as their caregiver — confirm you have the authority to arrange this for them. Erasing your data erases theirs too.
Children
Smriti is for adults. We do not knowingly collect data about anyone under 18, and the service is designed for adult caregivers arranging messages for adult family members.
Grievances and contact
If anything about how we handle your data worries you, write to us and a founder will personally respond. If you are unsatisfied with our response, you may escalate to the Data Protection Board of India.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the WhatsApp chat before the change takes effect — the same place you gave your consent. The date at the top of this page always shows the current version.
Contact us: bobmcd@tuta.io