1. Information We Collect

We collect information you or your caregiver provide directly, information generated by using the Service, and a small amount of information from third parties who help us operate it.

Account & Setup Information

• Email address, username, and password (stored as a one-way hash - we never store your plain-text password).
• Name, date of birth, gender, and daily routine (wake/sleep times).
• Emergency contact and family/caregiver contact details, including their own login if they set up Family Dashboard access.

Health-Related Information You Choose to Provide

• Primary medical diagnosis, current medications and schedule, primary care physician name and phone number, and any mental/behavioral health history you choose to share.
• This information is entered voluntarily during setup (or later, in your Health Profile) to make reminders and companion conversations more useful and relevant. You are never required to fill in every field.

Conversation & Usage Data

• The text and voice content of your conversations with AI companions, so the companion can respond and remember context over time.
• Life stories and memories you choose to share for the Memory Vault and Legacy Book.
• Automated safety-monitoring signals derived from conversations - general mood/engagement trends and crisis-related flags (see Section 5).

Location & Device Information

• If you allow it, your approximate location (via browser geolocation) to show local weather and news. You can decline this at any time in your browser; the Service still works without it.

Payment Information

• Subscription and billing information is handled directly by our payment processor, Stripe. HarborEcho does not receive or store your full card number.

2. How We Use Your Information

• To provide companion conversation, memory continuity, reminders, and the Memory Vault/Legacy Book.
• To generate general well-being trends and crisis-safety alerts for designated emergency contacts and Family Dashboard users.
• To process subscription payments and manage your account.
• To maintain, secure, and improve the Service.

We do not sell your personal information, and we do not use your health information or conversation content for advertising.

3. Who We Share It With

To provide the Service, certain information is sent to a small number of trusted outside providers ("subprocessors"). We choose providers who don't use your data to train their own public models where we can avoid it, but you should understand each one's role:

Provider	What They See	Purpose
Google (Gemini API)	Conversation text, relevant profile context (e.g. name, interests, health notes you've shared) needed to generate a reply	Powers the AI companion's understanding and responses
ElevenLabs	Text of companion replies	Converts companion replies to spoken voice audio
Stripe	Billing/contact information and payment details	Processes subscription payments securely - HarborEcho never sees your full card number

We may also disclose information if required by law, to protect someone's safety in an emergency, or in connection with a business transfer (such as a merger), in which case this Policy would continue to apply to your information.

4. Family & Caregiver Visibility

If a family member has Family Dashboard access, they can see:

• General mood/engagement trends over time (a simple color-coded pattern, not a transcript).
• A brief, AI-generated weekly summary written only from those same trend notes - never from the actual words of a conversation.
• Safety alerts (for example, a concerning health reading or a crisis flag).
• Legacy Book / Memory Vault stories that have been approved for sharing.

Family Dashboard users cannot read the raw content of private conversations. That boundary is built into how the Dashboard is generated, not just a policy promise.

5. Crisis & Safety Monitoring

As disclosed during account setup, HarborEcho automatically screens conversations for signs of possible crisis (for example, language suggesting thoughts of self-harm), using both AI-based analysis and a keyword safety check. If a possible crisis is detected, the companion responds with support and shares crisis resources (including the 988 Lifeline), and a flag is logged and, where configured, an emergency contact is notified. This monitoring is automated and best-effort - see our Terms of Service for the full disclaimer on its limits.

6. Data Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) between your device and our servers, hashed passwords, and access controls limiting who can view sensitive data. No system is perfectly secure, and we cannot guarantee absolute security.

7. A Note on HIPAA

HarborEcho is a consumer wellness and companionship product, not a healthcare provider or health plan. We do not currently represent HarborEcho as HIPAA-compliant, and we do not currently operate under Business Associate Agreements with our AI and voice service providers. If you are not comfortable with health-related information being processed under the terms described in this Policy, please avoid entering it, or discuss your concerns with us first at the email address below.

8. Data Retention & Deletion

We retain your information for as long as your account is active, so companions can maintain continuity and memory. You (or an authorized family member/caregiver) can request deletion of an account and its associated data at any time by contacting us; we will delete it within a reasonable time, except where we're required to retain certain records by law (for example, billing records).

9. Children's Privacy

HarborEcho is designed for adult use and is not directed at children under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will make reasonable efforts to notify you before they take effect. Continued use of the Service after changes take effect means you accept the updated Policy.