Privacy Policy

1. What We Collect

Depending on how you use Biograph, we may collect the following categories of information.

a. Contact & Account Information

• Name
• Email address
• Phone number
• Postal address (if relevant, e.g., for physical products or correspondence)
• Login details and account settings

b. Voice & Story Data

• Audio recordings of your conversations and interviews
• Transcripts of your recordings and calls
• Text, notes, photos, and other materials you choose to upload
• Biographical details, memories, preferences, and story prompts
• Information you provide about other people (e.g., family members, including children), such as names, age ranges, relationships, and descriptions

c. Device & Usage Data

When you visit our website or use our apps, we may automatically collect:

• IP address and approximate location (derived from IP)
• Device type, operating system, browser type and version
• Pages or screens viewed, time spent, links clicked, and other usage logs
• Referring/exit pages and URLs
• Cookie identifiers and similar tracking technologies

d. Messaging & Telephony Data

If you communicate with us via phone, SMS, RCS, WhatsApp or similar channels, we may collect:

• Your phone number and country
• Message content you send to us and our replies
• Opt-in and opt-out status (e.g., STOP / HELP logs)
• Technical metadata (timestamps, delivery status, carrier information, call duration and outcome, etc.)

e. Payment & Transaction Data

If you purchase a paid feature, we receive:

• Limited billing details (e.g., last digits of card, billing address)
• Transaction amounts, dates, and status

Payment card data is processed by our third-party payment processors and is not stored in full by us.

f. Information From Third Parties

We may receive information about you from:

• Payment processors (e.g., fraud checks, transaction confirmations)
• Telephony and messaging providers (e.g., status of SMS/calls)
• Analytics and infrastructure providers (aggregate usage and performance data)

2. How We Use Your Data

We use the information we collect for the following purposes:

We do not sell your personal data to third parties.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under these legal bases (as applicable):

• Contract: To provide and operate the Services you request.
• Consent: For certain uses, such as some marketing and optional features. You can withdraw consent at any time.
• Legitimate Interests: To operate, secure, and improve the Services, communicate ordinary service-related information, and develop new features, where our interests are not overridden by your rights.
• Legal Obligation: To comply with laws and lawful requests.

4. Children's Privacy

Biograph accounts are intended for adults (18+).

Adults may choose to include information about children or other individuals as part of their stories (for example, when describing family members or preparing content for future generations). In those cases:

• We rely on the adult user to ensure they have appropriate permission to provide that information.
• We use such information only to provide the Services (e.g., creating story outputs) and do not use it to independently market to children.

If we learn that we have collected personal data from a child directly without appropriate consent, we will take reasonable steps to delete that data. If you believe this has happened, please contact us at hello@biograph.ai.

5. How We Share Your Data

We may share your information in the following situations:

We do not share your personal data with third parties for their own independent advertising or marketing purposes.

6. Messaging, Calls, and SMS/RCS Compliance

This section explains how we handle phone and messaging data and aligns with common carrier/SMS compliance expectations.

6.1 Opt-in

By providing your mobile number and opting in to receive text messages, you consent to receive informational and transactional messages from Biograph via SMS, RCS, or similar messaging channels (the "Messaging Program"). These may include:

• Onboarding and account-related messages
• Story reminders and prompts
• Links to your content or recordings
• Feedback and support messages

Opt-in is not required to use the Services or to make a purchase.

6.2 Automated Technology

Messages may be sent using automated technology, such as an automatic telephone dialing system or messaging platform.

6.3 Message Frequency & Costs

• Message frequency varies, depending on how you use the Services and your preferences.
• Message and data rates may apply according to your mobile carrier plan.

6.4 Opt-out (STOP) & Help (HELP)

• You can opt out of the Messaging Program at any time by replying STOP to a message. You may receive a final confirmation message, after which you will not receive further messages (unless you later re-opt in).
• For help, reply HELP or contact us at hello@biograph.ai.

6.5 Carrier Disclaimers

Mobile carriers are not liable for delayed or undelivered messages. Delivery is not guaranteed.

6.6 Responsibility for the Phone Number

By providing a phone number, you represent and warrant that:

• You are the current subscriber or usual user of that number, or
• You are otherwise authorized to provide that number and receive messages; and
• If you provide a number for someone else, that person has consented to receive messages from us.

We maintain records of your opt-in and opt-out status as required for legal and carrier compliance.

7. Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage, pixels, and tags) to:

• Remember your preferences and settings
• Keep you logged into your account
• Analyze usage and performance of our website
• Improve functionality and personalize content

You can control cookies through your browser or device settings. If you disable certain cookies, some parts of the Services may not function properly.

In regions where required by law (for example, the EEA/UK), we may ask for your consent before placing certain cookies.

8. International Data Transfers

Biograph is operated from the United States, and your data may be processed in the U.S. and other countries that may have different data protection laws than your country of residence.

Where required (for example, for EEA/UK users), we rely on appropriate safeguards such as:

• Standard Contractual Clauses approved by relevant authorities; and/or
• Other lawful transfer mechanisms.

9. Data Security

We implement a range of technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and, where appropriate, at rest
• Access controls and role-based permissions
• Secure hosting and regular security updates
• Policies and training for our staff with access to personal data

No system is perfectly secure, and we cannot guarantee absolute security. If you believe your account or data has been compromised, please contact us immediately at hello@biograph.ai.

10. Data Retention

We keep personal data only for as long as necessary to:

• Provide and operate the Services
• Fulfill the purposes described in this Privacy Policy
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

In practice, this means, for example:

• Story and account data is retained while your account is active or as needed to provide requested outputs, unless you request deletion.
• Certain voice recordings may be retained for the time needed to generate requested outputs and quality-assure the service, or as otherwise communicated to you.
• Opt-out records (e.g., STOP messages) may be retained as required by law and carrier rules.

When data is no longer needed, we will delete or de-identify it.

11. Your Rights and Choices

11.1 General Rights

You may:

• Access and update certain account information via your account (where available)
• Request access to, or a copy of, your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to legal obligations
• Object to or restrict certain processing activities
• Opt out of marketing communications at any time (e.g., by using the unsubscribe link in emails)
• Opt out of SMS/RCS messages by replying STOP

To exercise these rights, contact us at hello@biograph.ai.

11.2 EEA/UK Users

If you are in the EEA or UK, you may have additional rights under applicable data protection laws, including:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing, including profiling based on legitimate interests
• Right to withdraw consent (where processing is based on consent)

You also have the right to lodge a complaint with your local data protection authority.

11.3 California and Other US State Residents

If you are a resident of California or another U.S. state with similar laws, you may have rights such as:

• Right to know what categories of personal information we collect, use, and disclose
• Right to request access to specific pieces of personal information
• Right to request deletion of personal information (subject to certain exceptions)
• Right to correct inaccurate personal information
• Right not to be discriminated against for exercising your privacy rights

We do not sell your personal information as "sale" is defined under the California Consumer Privacy Act (CCPA) and similar state laws.

To exercise these rights, contact us at hello@biograph.ai and state that your request concerns your state privacy rights (e.g., "CCPA request"). We may need to verify your identity to process your request.

12. Third-Party Links and Services

Our Services may contain links to or integrate with third-party websites and services (e.g., payment processors, telephony providers, analytics tools). Those third parties have their own privacy policies and practices. We encourage you to review their policies; we are not responsible for their privacy practices.

13. Legal Compliance

We design our privacy and data practices to comply with applicable data protection laws, including where relevant:

• The General Data Protection Regulation (GDPR) and UK GDPR
• The California Consumer Privacy Act (CCPA) and similar U.S. state laws
• The Children's Online Privacy Protection Act (COPPA) and other applicable children's privacy laws

Because Biograph is primarily aimed at adults, any information about children is meant to be provided by adults with appropriate permission, and is used only to provide the requested story-related Services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last updated" date at the top; and
• If changes are material, we will take reasonable steps to notify you (for example, by email or via a notice in the app or on the website).

Your continued use of the Services after the updated Privacy Policy becomes effective means you accept the changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: