Privacy Policy
1. Introduction
Call Donna, Inc., a Delaware corporation doing business as “Donna” (“Donna,” “we,” “us,” or “our”), provides AI-powered companion phone calls for older adults and tools for the family caregivers who set them up. This Privacy Policy explains how we collect, use, disclose, and protect information when you use calldonna.co, the Donna mobile app, Donna phone services, or otherwise contact us.
Contact us at support@calldonna.co with questions or privacy requests.
2. Information We Collect
2.1 Information You Provide
Caregiver account information:
- Name, email address, phone number, login details, and account preferences
- Support messages, feedback, waitlist submissions, and other information you choose to send us
- Payment information when you start a paid subscription. Online payments are handled by our payment processor (Stripe); subscriptions purchased through an app store are handled by that store. We do not store full card numbers.
Call recipient (“senior”) information you enter:
- Name, preferred name, phone number, timezone, language, city/state/ZIP, and call schedule
- Interests, hobbies, family context, topics to avoid, and other details used to personalize calls
- Everyday and social reminders you configure for conversation
- Lifestyle notes you voluntarily provide to personalize calls
2.2 Information Generated Through Use
- Call metadata: call date, time, duration, status, answered/missed and voicemail detection, and related delivery metadata
- Transcripts and summaries: AI-generated text transcripts of calls and post-call summaries, sentiment, and notes for caregivers
- Conversation memory: details Donna remembers from past calls to keep future conversations warm and consistent
- Reminders and responses: reminder delivery status and responses shared during calls
- App and website data: device type, browser, operating system, IP address, app events, error diagnostics, and security logs
2.3 Preview Phone Line and Waitlist
If you call the Donna preview line before creating an account, we process your phone number, call metadata, audio in transit, and the resulting transcript for the duration needed to operate the preview. The preview line is transcribed and analyzed; we do not retain a stored audio recording of the preview call. If you submit the waitlist form, we collect the contact details and notes you provide so we can follow up.
2.4 Sources of Information
We collect information directly from you (the caregiver), from the call recipient during calls, automatically from your use of the app, website, and phone calls, and from our service providers (for example, authentication, telephony, and diagnostics providers) acting on our behalf.
3. How We Use Information
- Set up caregiver accounts and senior profiles
- Schedule, place, transcribe, and summarize Donna calls
- Personalize calls based on interests, reminders, and conversation history
- Send service messages, missed-call notifications, reminder updates, and support responses by email and in-app push notification
- Obtain and record consent to call and to transcribe calls
- Maintain security, prevent abuse, debug issues, and improve reliability
- Comply with legal obligations and enforce our terms
- Send marketing messages only where allowed; you can opt out at any time
We use sensitive information (such as the contents of calls) only as needed to provide and maintain the Service, secure it, and meet legal obligations. We do not use sensitive information to infer characteristics about a person for advertising, and we do not sell it.
4. Calls, Transcripts, and Summaries
Donna processes call audio in real time so the AI assistant can understand and respond to the call recipient. As a call happens, audio is converted to text by our speech-to-text provider. We store the text transcript and a summary of the call — not an audio recording. Transcripts, summaries, and conversation memory are encrypted at rest.
Consent to call and to transcribe is obtained during setup. For caregiver-managed accounts, Donna also asks the call recipient directly on the first call and records their verbal okay as a short text quote. For self-signups, the subscriber's setup consent serves as that direct permission and Donna does not place a separate consent call. If the call recipient declines, we stop placing scheduled calls.
We do not sell, share, or use call audio, transcripts, conversation memory, reminders, or summaries for third-party advertising.
5. How We Share Information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law. We share information only as needed to operate Donna, comply with the law, protect users, or complete a transaction you request.
5.1 Service Providers
Donna uses service providers for authentication, hosting, database storage, phone calls, speech processing, AI models, push notifications, email, crash reporting, feature flags, search, and payment processing (currently Stripe for online billing). These providers may process personal information only for the services they provide to Donna. If you subscribe through a third-party app store, that store processes your payment under its own privacy policy. See our Third-Party Services page for the current provider list.
5.2 Caregivers and Family
Donna is a caregiver-facing service. Call summaries, call history, reminder status, and wellness-check answers about a call recipient are made available to the caregiver who set up the account and to any additional caregivers that account holder has authorized.
5.3 Legal, Safety, and Business Reasons
We may disclose information if required by law, court order, subpoena, or governmental authority, or when we believe disclosure is necessary to protect the rights, safety, or property of Donna, users, call recipients, or the public. If Donna is involved in a merger, acquisition, financing, or asset sale, information may be transferred as part of that transaction, subject to this policy or a successor notice.
6. Cookies and Tracking Technologies
The calldonna.co marketing website uses essential cookies and similar technologies for security, routing, and site functionality, and may use limited analytics or diagnostics to understand reliability and improve the site. We do not use cookies for personalized third-party advertising.
Some browsers provide a “Do Not Track” or Global Privacy Control signal. Where required by law, we treat a recognized opt-out preference signal as a valid request to opt out of any sale or sharing; because we do not sell or share personal information, this has no additional effect on our practices.
7. Data Security
We use technical and organizational safeguards intended to protect personal information, including encryption in transit (TLS) and field-level encryption at rest (AES-256-GCM) for sensitive stored data such as transcripts, summaries, conversation memory, reminders, and profile notes. We also use access controls, audit logging of access to sensitive records, masked and PII-minimized operational logs, and secure infrastructure practices. No system is perfectly secure, and we cannot guarantee absolute security.
8. Data Retention
We keep personal information only as long as needed to provide Donna, meet legal and operational obligations, resolve disputes, maintain security, and enforce agreements. Our current retention practices include:
- Call transcripts and summaries: retained up to one year, then deleted or de-identified (call date, duration, and other non-content metadata may be kept longer)
- Conversation memory: retained up to two years, then deleted
- Call analyses (summary, sentiment): retained up to one year, then deleted
- Reminder delivery and short-term call context: retained up to 90 days
- Caregiver notifications: retained up to 180 days
- Waitlist submissions: retained up to one year; abandoned onboarding/prospect records up to 90 days
- Security and audit logs: retained for a longer period as required for security and legal purposes
When you delete your account (see Section 9), we delete the associated account data promptly rather than holding it for the periods above, except where we must retain limited records for legal, security, fraud-prevention, backup, or dispute-resolution purposes. Retention may also be suspended where a legal hold applies.
9. Your Privacy Rights and Choices
Depending on where you live, you may have some or all of the following rights regarding personal information:
- Know / Access: request the categories and specific pieces of personal information we have collected
- Delete: request deletion of personal information
- Correct: request correction of inaccurate personal information
- Portability: request a copy of personal information in a portable format
- Opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of
- Non-discrimination: we will not discriminate against you for exercising these rights
Caregivers can exercise several of these rights directly in the Donna app, including editing a senior's profile and settings, requesting a copy of a senior's data, and deleting their account and its associated data. You may also email support@calldonna.co to make a request. We will respond within 45 days; if we need more time, we will tell you and may extend by up to another 45 days as permitted by law.
To protect your information, we verify requests using information associated with your account before acting on them. You may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and may still ask you to verify your identity directly.
California Residents
Donna does not sell personal information or share personal information for cross-context behavioral advertising. The categories of personal information we collect are described in Section 2 and may include identifiers, customer records, commercial information, internet or app activity, approximate location, audio and electronic information (call audio processed in real time and the resulting call transcripts), and inferences drawn to personalize calls; some of this may be “sensitive personal information” (such as the contents of calls). We use and disclose this information for the business purposes described in Sections 3, 4, and 5, and we use sensitive personal information only as needed to provide the Service, which does not trigger the right to limit its use. California residents may exercise the rights described above and may designate an authorized agent.
10. Call Recipients, Caregivers, and Account Authority
The caregiver who creates an account is the account holder and is responsible for the information they enter and for obtaining the call recipient's consent. The call recipient is the person Donna calls. A call recipient may ask to stop receiving calls at any time, and Donna honors that request: if the recipient declines or withdraws consent, we stop placing scheduled calls and may require a renewed consent before calls resume. If a call recipient objects to our processing of their information, contact us at support@calldonna.co and we will pause calls and work with the account holder to resolve the objection, including stopping calls and deleting the recipient's call content where appropriate.
11. Children's Privacy
Donna is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child provided us personal information, contact us and we will take appropriate action.
12. Third-Party Links
Our website or app may link to websites or services that Donna does not operate. Their privacy practices are governed by their own policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the “Last Updated” date when changes are posted. Material changes may also be communicated by email, in-app notice, or another appropriate method.
14. Contact Us
Call Donna, Inc. (d/b/a Donna)
Email: support@calldonna.co
Website: calldonna.co