Security & privacy
Built around your family's privacy.
Honest answers about how AyaCall stores, processes, and shares the conversations your parent has with us. No legalese — that lives in the privacy policy.
Six promises
What we promise.
01Encryption at rest and in transit.
All data — recordings, transcripts, memory, dashboard content — is encrypted at rest in our database (Postgres on Neon) and in transit over TLS 1.2+. We never send transcripts over unencrypted channels.
02No data sold, ever.
We do not sell, rent, or share your parent's data with advertisers, brokers, insurers, or third parties for marketing. Our business model is the subscription you pay — that is the whole revenue line.
03Consent before the first call.
On call 1 the AI introduces itself as AI and asks if it's okay to call daily. We record the verbal answer. If they decline, we never call again. If they ever say 'stop' on a call, we stop.
04Delete on request.
Caregivers can delete a senior — and every associated call recording, transcript, and memory — from the dashboard. The deletion runs end-to-end across our database and the recording vendor's storage.
05Quiet by default.
We do not send marketing emails, SMS, or robocalls. The only outbound communication from AyaCall is the daily check-in call your parent agreed to, and the dashboard notifications you opted into.
06No medical claims.
AyaCall is a wellness check-in, not a medical device. We do not diagnose, prescribe, or replace a clinician. We notify the family on concerning signals — we do not call 911 ourselves. Always seek qualified medical care for medical needs.
The full stack
Who we trust with your family's data.
We chose vendors who themselves take security seriously. Each one is bound by a data processing agreement (DPA), and for our Care Teams tier, by a Business Associate Agreement (BAA) for HIPAA-aligned operation.
- Retell AIVoice telephony + call audio pipeline
- AnthropicClaude — the AI brain that holds the conversation and writes summaries
- ElevenLabsVoice synthesis for the AI's spoken voice
- TelnyxPhone number provider for outbound calls
- OpenAIWhisper — transcribes family voice notes (audio you record yourself)
- NeonPostgres database where memory, transcripts, and account data live
- StripeBilling and subscription management — we never see card numbers
- ResendTransactional email (digest, alerts, account)
- Vercel + RailwayApplication and API hosting
For B2B
For Care Teams and Enterprise.
Our Care Teams ($249/mo) and Enterprise tiers are built for senior-living operators, home-care agencies, and adult day programs. If you are evaluating us for a B2B deployment, we are happy to share our security packet on request.
- SSO via OIDC / SAML
- Multi-resident facility dashboard
- White-label & branded calls
Reach a person.
Security concerns, vulnerability reports, or just questions — we read every message.