Compani is built for a vulnerable audience — people living with dementia and the families who love them. We take the privacy of both very seriously. This page explains what we collect, what we do with it, and what you can ask us to delete.
The short version. We collect what we need to let Jon talk to your loved one and remember the things you tell her. We don’t sell your data. We don’t run ads. We don’t train other companies’ AI on your conversations. You can ask us to delete everything at any time.
Who this applies to
Compani has two kinds of user:
- The carer — the family member or friend who creates an account, sets up the profile, and pairs the device.
- The patient — the person using the voice loop on the paired device.
The carer is the account holder. The patient’s data is stored under the carer’s account. The carer is responsible for the patient’s consent — please see our Terms of use.
What we collect
Account & profile
- Carer name, email, and password (hashed).
- The patient’s name, the family members and friends they’d like Jon to know about, and whatever life stories, songs, and routines the carer enters into the “LifeBook”.
Conversations
- The audio of the patient’s voice while they’re talking to Jon, captured on the paired device.
- The text transcript of each utterance (made by an automatic speech-to-text system).
- Jon’s replies and a short rolling memory of the conversation.
- A short end-of-day summary of the conversation.
Optional integrations
- If the carer pairs Google Calendar: a refresh token that lets Compani read upcoming events and (with the patient’s explicit ask) create events. We read only events relevant to the patient.
- If the carer pairs Spotify: a refresh token that lets Compani play music on the patient’s request. We don’t see your full listening history; only what we actively play.
Usage, diagnostics & technical data
- Device identifiers used for pairing, so we know which device is paired to which patient.
- How the app is used — for example how often conversations happen and which features are used (product-interaction and other usage data).
- Diagnostic information such as crash reports, performance data, and other technical logs (errors, latencies) that help us keep the voice service reliable.
This usage and diagnostic data may be associated with the carer’s account, so we can support you and improve the product. We use it both to run the app and to understand, in aggregate, how Compani is performing. We never use it to advertise to you or to track you across other companies’ apps or websites.
How we use it
- To run the voice loop — transcribe, reply, speak.
- To let Jon remember context across conversations so she actually feels like a companion, not a goldfish.
- To send you the daily summary of how conversations went.
- To investigate and fix bugs.
- To keep Compani reliable — we look at usage and diagnostic data (such as crash and performance reports, which may be associated with your account) to fix problems and improve the experience.
- To improve Compani without training external AI models on your conversations (see below) and without using your data for advertising.
Who we share it with
Compani uses a small number of trusted sub-processors to make the product work:
- ElevenLabs — powers the live voice conversation over a real-time connection. It receives the patient’s voice to convert it to text, and turns Jon’s replies back into the voice you hear. We’ve turned off model training in our ElevenLabs workspace, so your conversations are not used to train their models.
- OpenAI — receives the text of the conversation (the patient’s words plus the context you’ve set in the LifeBook) to generate Jon’s replies. It does not receive raw audio. We use OpenAI’s API under a zero-retention arrangement, and your conversations are not used to train their models.
- Google Cloud / Firebase — stores your account, the patient profile, conversations, and summaries. Hosted in their secure data centres.
- Google — only if you pair Google Calendar. We use your refresh token to read events server-side; the token never leaves our backend.
- Spotify — only if you pair Spotify. Same as above for the refresh token.
We don’t share your data with advertisers, data brokers, or anyone using it for unrelated purposes. We will share data if we’re legally required to (a court order, for example), and we’ll tell you when we’re allowed to.
Some of these providers process and store data outside Australia — ElevenLabs and OpenAI both process data in the United States. Where your data is transferred overseas, we rely on the provider’s recognised safeguards (such as ElevenLabs’ EU–US Data Privacy Framework certification) and contractual data-protection terms.
What we don’t do
- We don’t sell your data. Ever.
- We don’t use conversations to train external AI models.
- We don’t collect face data. Compani never uses the camera — no photos, video, or facial information are ever captured, used, shared, or stored. The camera permission listed in the app exists only because our real-time voice technology requires it to be declared; it is never activated.
- We don’t serve ads inside Compani.
- We don’t track you across other companies’ apps or websites, and we don’t use your data for advertising.
- We don’t monitor conversations in real time. No human listens to your calls live.
- We don’t share the patient’s data with anyone other than the carer who set up the account — not even other family members.
How long we keep it
- Voice audio: streamed for the live conversation and not stored by us. Our voice provider may process it briefly to do its job; we keep the transcript instead.
- Transcripts & daily summaries: kept for as long as your account is active so Jon can remember earlier conversations. Older raw transcripts may be pruned once they’re no longer useful for memory.
- Profile & LifeBook: kept for the life of your account.
- Usage & diagnostic data: kept for a limited period to keep the service reliable and to understand how Compani is performing.
- Account closure: when you delete your account, we delete the patient profile, LifeBook, transcripts, summaries, and OAuth tokens within 30 days, except where a specific legal obligation requires us to keep a record for longer.
Your rights
Depending on where you live (GDPR, Australian Privacy Act, CCPA, etc.), you may have the right to:
- Access the data we hold about you and the patient.
- Correct anything that’s wrong.
- Delete the account and everything in it.
- Export your data in a portable format.
- Withdraw consent for optional integrations at any time.
- Object to processing or lodge a complaint with a regulator.
To do any of these, email [email protected] and we’ll respond within 30 days.
Children
Compani is not designed for children. Carer accounts must be held by someone 18 or older. The patient may be any adult, most often an older adult with a dementia diagnosis.
Security
We protect your data in transit (HTTPS) and at rest (encryption at our cloud provider). OAuth tokens are stored server-side and never exposed to the device. We restrict access to production data to a small set of trusted operators and log access.
No system is perfect. If we ever discover a breach affecting your data, we’ll tell you promptly and explain what happened.
Changes to this policy
We may update this policy as the product evolves. If we make a material change, we’ll notify you by email and update the “Last updated” date at the top.
Contact
For anything at all — privacy questions, data requests, or just to say hello — email [email protected].