Privacy Policy

Stillwell provides a phone number that a family sets up for a loved one. Calls and texts to that number ring the caregiver, or are answered with pre-approved reassurance, and can alert the family if the caller sounds unwell. Because of what it does, the service handles sensitive information, and this policy describes exactly what and how.

Account data: the caregiver’s name, email, phone numbers, and billing status.

Household data: the loved one’s name, phone numbers, address, timezone, the family’s emergency contacts in their chosen order, and the “facts card” of approved sentences the line may say.

Call and text records: who called, when, how the call was routed, and how long it lasted. For AI-answered calls: a short summary. The call is processed in memory and destroyed within 60 seconds of hangup — no audio or verbatim record is stored. Live calls between two people are not recorded.

Consent records: each consent and attestation, with its timestamp, device, and the policy version in force when it was signed.

Location: at most one current location snapshot per household, replaced when it updates — never a movement history — plus snapshots captured during an emergency event.

No third-party analytics, advertising pixels, or tracking scripts run on this site or in the product. An automated build check fails if anyone adds one.

No structured medical records: the product has no fields for diagnoses, medications, or treatments, and an automated check keeps it that way. If a caller asks about those topics, the line warmly changes the subject.

No call audio is stored in our database. Routine calls are not recorded. Recordings exist only for emergency events, kept one year, because families and responders need them.

No sale of data, no data sharing for advertising, ever.

A cloned voice is created only after the voice’s owner records a dated consent statement in their own voice, in the same session as the training sample. The owner can revoke at any time, which disables the cloned voice immediately. A cloned voice is used only on the household it was authorized for, never for outbound sales, and never to discuss money.

Transcripts are kept 90 days and summaries one year by default; both are configurable per household. Emergency-event records and their receipts are kept one year. Consent records are kept as long as the account exists. When you delete the account, household data is deleted within 30 days, except records we must keep by law.

A small set of vendors carry calls, store data, and render the approved voice clips. The complete, current list is published at /subprocessors, and an automated check keeps that page in sync with what the product actually uses.

The primary caregiver can export the household’s data, correct it, or delete the account from the dashboard. The loved one, or their authorized representative, can demand the same for their data by contacting us. If a caller ever expresses thoughts of self-harm, the line follows a published protocol that includes the 988 Suicide & Crisis Lifeline.

Questions, requests, or complaints: support@withstillwell.com.