Privacy Policy

This page describes the technical controls in place today. Retention language remains under counsel review; where the implementation and this page differ, we pause activation and correct the public language before relying on it.

Stillwell is a dedicated family phone line. Depending on the household’s approved configuration, calls can route to a caregiver, approved clips and voicemail, or a consent-gated AI path. When something on a call needs you, software rings the people you listed, in the order you chose. Nobody here is watching a screen: this is not monitored dispatch. In testing, the phone network has confirmed those calls connected — not that anyone picked up.

Account data: the caregiver’s name, email, phone numbers, and billing status.

Household data: the loved one’s name, phone numbers, address, timezone, the family’s emergency contacts in their chosen order, and the “facts card” of approved sentences the line may say.

Call and text records: Every call saves the plain details — when it came in and how long it lasted — and a short written summary. During explicit product testing, turn-level caller and line text capture is enabled as well. Live person-to-person calls are not recorded by this path.

Consent records: each consent and attestation, with its timestamp, device, and the policy version in force when it was signed.

Location: at most one current location snapshot per household, replaced when it updates — never a movement history — plus snapshots captured during an emergency event.

No third-party analytics, advertising pixels, or tracking scripts run on this site or in the product. An automated build check fails if anyone adds one.

No structured medical records: the product has no fields for diagnoses, medications, or treatments, and an automated check keeps it that way. If a caller asks about those topics, the line warmly changes the subject.

The current call path does not persist call audio in the product database. The explicit testing capture stores turn-level text, not audio.

No sale of data, no data sharing for advertising, ever.

A cloned voice requires the voice owner’s recorded consent. Revocation disables that voice for the household and starts the governed deletion process. Voice configuration is scoped to the authorized household and may not be used for outbound sales or money discussions.

Deletion on an automatic schedule is not switched on, and we do not describe it as though it were. Requests to see, correct, revoke, or remove data go through support. We will publish the counsel-approved schedule before paid launch. Voice-owner revocation follows the separate voice deletion workflow described above.

A small set of vendors carry calls, store data, and render the approved voice clips. The complete, current list is published at /subprocessors, and an automated check keeps that page in sync with what the product actually uses.

A caregiver, loved one, voice owner, or authorized representative can ask to access, correct, revoke, or delete applicable data by contacting us. We verify identity and authority before acting. Self-serve account deletion is not represented as live.

Questions, requests, or complaints: support@withstillwell.com.