Privacy Policy

01Information we collect

Profile and contact information: your name or preferred name, optional age range, email address, phone number, relationships, profile and account identifiers, preferences, consent choices, and authentication information. If you select a contact, we receive the name and number you choose, not your entire address book.

Conversations and memory: your voice, text, Rae’s responses, conversation context, facts you ask Rae to remember or that Rae identifies as useful, corrections, and brief summaries. If you enable camera or screen sharing, we process the images, screen content, and associated audio you choose to share. These features do not give us unrestricted access to your camera, photos, other apps, or screen.

Circle activity: invitations, the people you connect with, sharing permissions, check-ins, reminder schedules, missed-check-in events, requests for help, brief conversation updates, and notification delivery and interaction records.

Beta call records: with your permission, full call audio, transcripts, conversation inputs and outputs, tool requests and results, timing, errors, and diagnostic records. This can include personal or sensitive information you discuss. Camera images or screen content are retained only if the recording notice for that feature expressly includes them and you agree.

Technical information: IP address, approximate region inferred from it, device and operating-system details, app version, browser, timestamps, page visits, session identifiers, permission states, crash information, performance measurements, and security events. We do not collect precise GPS location or create voiceprints or face templates to identify you.

Payments and purchases: billing contact details, customer and subscription identifiers, plan, price, currency, transaction and receipt information, renewal and cancellation status, and limited payment-method details such as card brand and last four digits. Stripe, Apple, or Google handles payment credentials; we do not store full card numbers or card security codes.

Information you send us: early-access requests, survey and onboarding answers, support messages, feedback, and attachments you choose to provide. Avoid sending passwords, financial account numbers, government identifiers, or other people’s confidential information.

02Where information comes from

We collect information directly from you; from your device and use of the service; from people who invite you or share with you; from AI responses and summaries; and from providers that operate hosting, payments, app distribution, communications, and security. A person inviting you may provide your name, relationship, and optional contact number before you have an account. An invitation does not by itself authorize access to your private information.

03How we use information

We use information to operate and personalize YourRealm; connect calls to Rae; save and correct useful memory; manage profiles, invitations, check-ins, and sharing; deliver notifications; process purchases and entitlements; answer support requests; and carry out your instructions.

We also use information to find and fix bugs, evaluate response quality, improve accessibility and reliability, develop and test features, prevent abuse, protect accounts, meet legal obligations, and handle disputes. Beta call records are used for those improvement, support, and safety purposes only after you agree to recording. Authorized employees and service providers may listen to recordings or read transcripts when needed for those purposes. They are subject to confidentiality and access restrictions.

We do not sell personal information, use it for targeted or cross-context behavioral advertising, or use private calls in public demonstrations, testimonials, or advertising without a separate agreement. We do not use your private call records to train a general-purpose AI model. Internal evaluation, prompt improvement, and bug reproduction are covered by the beta-recording permission; a materially different use requires a new notice and any required consent.

04Rae and AI processing

Rae uses Google’s Gemini AI. To provide a call, we send Google your voice or text, relevant conversation context and saved memory, and any camera or screen content you deliberately share. Google returns responses and may request actions through tools that YourRealm controls. We ask for permission before this processing begins. Turning off an optional camera or screen feature stops new sharing from that feature.

Personal conversations are processed through Google’s paid API services under its data-processing terms, rather than a free service that permits use of prompts for general model improvement. Google may retain limited records for abuse prevention, security, and legal compliance under its own applicable terms. See Google’s Gemini API terms and Google’s Privacy Policy. We do not represent that an AI provider retains no data.

Rae may save relevant facts automatically, including names, preferences, age range, and relationships. You can ask Rae to correct or forget a fact. Removing saved memory does not itself erase a retained call recording or transcript; you can request deletion of those records too. An instruction to forget cannot undo information already processed in a call.

05Beta recording and your choice

Before beta call recording starts, we explain what is recorded and why and ask you to agree. Once enabled, recording applies to subsequent beta calls until you turn it off. An on-screen or audible indicator identifies recording. You can withdraw permission in Settings or contact support@yourrealm.com. Withdrawal stops future optional recording; it does not automatically delete existing records unless you also request deletion.

Call records remain personal information while they can be linked to you. We use pseudonymous identifiers, restrict access to identifying details, and remove identifiers from review materials where practical. Your voice and what you say can still identify you, so we do not describe raw recordings as anonymous. We retain the association needed to honor your deletion request.

If another person joins a recorded call, tell them it is being recorded and obtain their agreement before they participate. Do not capture bystanders or someone else’s private conversation. Calls you place through your phone’s normal calling app are not recorded by YourRealm.

Optional local diagnostic exports are separate. Files saved on your device or exported by you stay under your control; a server-side deletion cannot erase a copy you exported to another location.

06What your support circle receives

A connection and sharing permission are required before automatic sharing begins. The person sharing agrees to the people and direction of sharing. Their connected supporters may receive check-ins, brief updates about help from Rae, requests for support, and missed-check-in notices. A brief update may indicate that you asked for help even if you did not ask Rae to send an immediate support request.

Full call recordings, transcripts, private saved memory, and camera or screen captures are not shared with your support circle. Routine updates are designed to omit sensitive medical details, financial details, passwords, and private third-party information. You can tell Rae not to include something. Review shared information and contact us if a summary is wrong.

You can stop sharing or remove a connection in Settings. This stops future sharing and access through that connection; it cannot retract information someone already saw, copied, or received outside the app. A postponed invitation shares no private updates. Anyone with an invitation link may see the names needed to understand the invitation, so send links only to the intended person.

Notification previews may be visible on a locked device depending on its settings. A notification being sent does not establish that someone received, read, or acted on it.

07Providers and other disclosures

Cloudflare provides hosting, storage, networking, and security. Google provides Gemini AI and Google Workspace email. Apple provides TestFlight or App Store distribution and push notifications. Stripe processes direct web and mobile-web payments; Apple and Google process purchases through their respective stores when offered. We share only the information needed for the relevant service and require appropriate contractual protections where they process information for us.

Payment processors and app stores may also use information independently for payments, fraud prevention, tax, and legal duties under their own policies. See Stripe, Apple, Google, and Cloudflare. We do not send your call recordings or saved memory to payment providers to process a purchase.

We may disclose information when legally required, to establish or defend legal claims, or as reasonably necessary to investigate fraud, security incidents, or serious threats to safety. We limit such disclosures to what is appropriate. Information may be transferred during a merger, acquisition, reorganization, or sale of the relevant business, subject to this policy and applicable notice and consent requirements. We may also disclose information at your specific direction.

08Retention

Full beta call recordings, transcripts, call-content logs, and associated review copies are retained for up to 90 days from the call, unless you request earlier deletion. Ordinary technical and security logs are retained for up to 90 days. We do not keep identifiable copies indefinitely merely because they are useful for future development.

Profile information, current saved memory, connections, and settings remain while your profile or account is active, until you remove them or request deletion. Check-ins, shared summaries, and support requests are kept for up to 12 months. Unaccepted invitation records expire and are removed within 90 days of creation unless renewed at your request.

Early-access inquiries are kept for up to 12 months after our last interaction. Support correspondence is kept for up to 24 months after a case closes; attached call records follow the shorter call-record period unless retention is necessary for an active issue and you agree to an extension. Billing, tax, consent, and legal records may be kept for up to seven years where needed to establish transactions, permissions, or meet legal obligations; those records do not include full call content merely to prove consent.

A specific legal obligation, preservation order, or active security investigation may require longer retention of relevant records. We restrict their use to that purpose and delete them when it ends. Truly de-identified statistics that cannot reasonably be linked to a person may be retained longer; we do not attempt to re-identify them.

09Access, correction, deletion, and withdrawal

You can ask to access, export, correct, or delete your information, including recordings and transcripts, by emailing support@yourrealm.com. You can also request deletion through profile or account controls in the app. Deleting a profile removes information associated with that profile; deleting your account removes all profiles you control and their associated call records, memory, connections, and service history, subject to the narrow retention exceptions above.

We stop active sharing and disable the deleted profile or account promptly. We complete deletion from active systems and identifiable development or review copies within 30 days of receiving a verified request, unless a legally permitted extension is necessary and we notify you. Residual backup copies are isolated from ordinary use and removed within 90 days. If a backup is restored, deletion instructions are reapplied. We instruct providers processing information on our behalf to honor deletion as required by law and contract.

We may ask for limited information to verify that you control the affected account or are authorized to act for that person. You need not create a new account to make a request. We do not require government identification as a routine condition. We respond within 30 days, or an applicable shorter legal deadline; if an extension is allowed and needed, we explain why and when you will receive a response.

Deletion does not erase another person’s independent account or copies outside our control. Payment providers may retain transaction records under their own legal obligations. Deleting the app does not delete server records. Cancel subscriptions separately as described in our Subscription Terms; we do not withhold deletion because a subscription remains active.

10Cookies and communications

The public website does not use advertising pixels or third-party behavioral analytics. Hosting services process technical requests for delivery and security. Account, checkout, and onboarding flows may use necessary cookies or local storage to maintain a session, prevent fraud, and remember choices. Any optional analytics or marketing cookies will be offered with the choices required by law before use.

You can manage cookies in your browser and notifications through device settings. We do not sell or share information for cross-context advertising and honor recognized opt-out signals, including Global Privacy Control, where applicable. We do not use “Do Not Track” as consent to any additional collection.

We send service messages about accounts, invitations you initiate, purchases, security, and important changes. Marketing messages are optional and include an unsubscribe method. A contact number does not enroll anyone in promotional SMS. If a separately opted-in text service is offered, its disclosure states frequency and possible carrier charges; reply STOP to stop those texts or HELP for help. Promotional consent is not required to purchase.

11Security

We use administrative, technical, and organizational safeguards appropriate to the information, including encryption in transit and at rest, access restrictions, and controls over service-provider access. Access to call content is limited to authorized people with a support, safety, or development need. Credentials are excluded from diagnostic content. No system is perfectly secure; we cannot promise absolute security. Report a suspected issue to support@yourrealm.com. We provide incident notices when required by law.

12Sensitive information and health privacy

Everyday conversations can reveal health conditions, disability, age, relationships, or other sensitive facts. We process information you choose to provide to carry out your requested interactions and, with separate beta-recording permission, to improve and troubleshoot the experience. We do not use sensitive information to advertise to you or make decisions about employment, credit, insurance, housing, or eligibility for essential services.

Our Consumer Health Data Privacy Notice explains health-related information, permissions, and rights in more detail. YourRealm is not a healthcare provider, medical record service, or emergency monitoring service. We do not claim that all information in YourRealm is protected by HIPAA.

13State and international privacy rights

Depending on your location, you may have rights to know the categories and specific information we hold; obtain a portable copy; correct or delete it; limit or object to certain processing; withdraw consent; and appeal a denied request. California residents may also request information about business disclosures and limit covered uses of sensitive information. The collection categories, sources, purposes, recipients, and retention periods are described above and apply to our practices during the preceding 12 months to the extent we operated those features.

We do not sell personal information or share it for targeted advertising, including information about minors. We do not make solely automated decisions with legal or similarly significant effects about you. You will not be penalized for exercising privacy rights, although a feature may not work without information necessary to provide it. An authorized agent may make a request with evidence of permission.

To appeal a decision, email support@yourrealm.com with “Privacy appeal.” We review it and respond within 45 days, or a shorter applicable deadline, with reasons. You may also complain to your state attorney general or local privacy regulator.

YourRealm is operated from the United States; providers may process information in other countries. Where European, UK, or Swiss law applies, we rely on contract for requested services, consent for optional recording or other consent-based processing, legal obligations, and legitimate interests in security and ordinary service administration, subject to your rights. We use legally required transfer protections, including appropriate contractual safeguards, rather than treating use of the website as blanket consent to international transfers. Contact us for information about safeguards or to exercise objection, restriction, or portability rights. You may complain to your local data-protection authority.

14Adults and children

YourRealm accounts and Rae calls are for adults 18 and older. We do not knowingly offer accounts to children or seek personal information from them. If we learn a child has provided information in violation of this policy, we take steps to remove it and disable the account. Contact support@yourrealm.com if you believe this has happened.

15Changes and contact

We update the date when this policy changes. We give an in-app, email, or other prominent notice before material changes take effect and seek fresh consent where required. A general policy update does not authorize a new purpose for previously collected call records.

For privacy, access, deletion, or security questions, contact YourRealm at support@yourrealm.com. General inquiries: hello@yourrealm.com.