What never happens
- Audio is never stored. Conversation around you is transcribed on your device, and the sound is discarded immediately. There is no recording to leak, subpoena, or lose.
- Camera images are never stored. If you turn on hands-free control, the front camera reads your head movements, a blink, a facial expression, or your gaze entirely on your device. No images or video are ever recorded, stored, or sent anywhere.
- Nothing is spoken without your tap. AI suggests; only you decide. No auto-speak, no exceptions, no setting that changes this.
- Your data is never sold, never used for advertising, and never used to train shared models.
- A lapsed subscription never silences you. Typing, your sayings, routines, and history are free, forever, offline.
What stays on your device
- Live transcription of conversation (on-device speech recognition)
- Camera and face processing for hands-free control (head movements, blink, expression, gaze)
- Your conversation memory and everything you've said
- Your About-me profile (people, interests, humor)
- The personal sound-to-intent patterns Rejoin learns from your confirmed taps
What leaves your device, and when
When you use AI features (reply suggestions, phrase drafting, care summaries), the relevant text — a heard sentence, your draft, the day's care log — is sent to our AI provider to generate the result, then discarded by policy. It is sent as context, not stored as training data. If you turn Personalized suggestions off in Me, no personal context is ever included. If you're offline, nothing is sent and Rejoin falls back to on-device behavior.
We also collect basic, anonymous usage and crash diagnostics — never the words you type or speak — so we can see what's broken and which features help. It's on by default and off in one tap.
Your controls
- One toggle (Me → Personalized suggestions) severs all personal context from AI.
- Another toggle (Me → Your data) turns off anonymous usage & crash diagnostics.
- Read everything. Conversation memory is inspectable, line by line, and clearable in one tap.
- Export or delete everything at any time, no questions, no retention.
- The caregiver PIN protects settings and the care log — but speaking is never locked.
Care data
If you enable the Care tab, your log entries and check-ins stay on your device and, with an account, sync to your own account across your devices. They are not shared with anyone else. Handoff notes are generated strictly from what you logged. Turning the Care tab off hides and stops all of it.
The formal versions
This page is the promise in plain words. The legal documents say the same things with the precision lawyers need: the Privacy Policy and the Terms of Use.
Questions
Write to privacy@rejoinvoice.com — a person answers.