Privacy Policy

Effective date: June 29, 2026

The short version: we don't store audio, we don't sell or share your data for advertising, we don't use your words to train AI models, and almost everything stays on your device. The few things that leave it are listed below, with reasons. One toggle in the app cuts all personal context out of AI features. We also collect basic, anonymous usage and crash diagnostics to make Rejoin more reliable — never the words you speak — and you can turn that off in one tap.

1. Who we are

Rejoin is made by Sevira, LLC ("Sevira," "we," "us"), the company behind a family of apps for people living with chronic and progressive illness. We make the Rejoin app for iPhone and iPad, operate rejoinvoice.com, and are the data controller for the personal information described here. For anything in this policy, write to privacy@rejoinvoice.com — a person answers.

This policy covers the Rejoin app and this website. It does not cover Apple's own services (like Personal Voice, App Store billing, or iCloud), which are governed by Apple's terms and privacy policy.

2. What stays on your device

Rejoin is built device-first. The following never reaches our servers as stored data:

Audio. Conversation around you is transcribed by Apple's on-device speech recognition. The sound is processed in memory and discarded. We never record, store, transmit, or have access to audio. There is no recording — on your device or anywhere else.
Camera and face. If you turn on hands-free control, Rejoin can use the front camera to notice your head movements (a nod, shake, or tilt), a deliberate blink, a facial expression, or, optionally, where you are looking, so you can answer or speak without using your hands. On Face ID devices it can use more precise on-device face tracking for the same controls. All camera and face processing happens entirely on your device, in memory. No images or video are ever recorded, stored, transmitted, or accessible to us. The camera runs only while these features are turned on.
Live transcripts and conversation memory. What Rejoin heard, and the record of your conversations, are stored only on your device. You can read every line in the app and clear it in one tap.
Your About-me profile (people, interests, humor) and the sound-to-intent patterns Rejoin learns from your confirmed taps.
Your Personal Voice. Personal Voice is an Apple feature that lives entirely in iOS. Rejoin asks iOS to speak with it; the voice model itself never passes through us.

If you use Rejoin without an account and without AI features, nothing about you reaches us at all.

3. What we collect, and why

Account information (optional). Rejoin works fully without an account. If you create one — with email, Google, or Apple — we store your email address and a sign-in identifier so you can sync and restore your data.
Synced content (optional). With an account, your sayings, speech history, and care log entries are stored in our cloud database so they survive a lost device and can sync across your devices. They are transmitted encrypted, and access controls ensure only your account can read your rows. Conversation memory and transcripts are not synced — they stay on the device.
AI request text (transient). See section 4.
Product analytics & diagnostics (first-party, optional). To understand which features help and to catch crashes, the app records anonymous usage events (for example, "opened the Speak screen" or "played a routine") and crash/error diagnostics. This is strictly limited to what was used and whether something failed — never the words you type or speak, your sayings, your messages, or your care entries. It is processed by us alone (no third-party analytics or advertising SDKs) and used only to improve Rejoin. It is on by default and you can turn it off in Me → Your data → "Share anonymous usage"; turning it off stops all of it.

We collect nothing else, and we use no third-party analytics or advertising SDKs. This website still sets no cookies and runs no trackers — which is why it has no cookie banner.

4. AI features: what leaves your device, and when

When you use an AI feature — reply suggestions, sentence expansion, spelling repair, phrase drafting, care summaries — the relevant text (a heard sentence, your typed fragment, the day's logged care facts, and, if enabled, relevant parts of your About-me profile) is sent over an encrypted connection through our server to our AI provider (Anthropic), which generates the result and returns it.

This text is used only to generate your result. Neither we nor our provider use it to train models.
We do not keep a store of your AI requests; they are processed and discarded in the normal operation of the service.
Turning off Personalized suggestions (Me tab) removes all personal context from these requests. Turning off listening (tap the orb) stops heard speech from being processed at all.
Offline, nothing is sent and Rejoin falls back to on-device behavior.

Your own voice (ElevenLabs). Rejoin+ can speak in a voice clone you created with ElevenLabs (for example, through the free voice program for people with ALS). If you connect your ElevenLabs voice, the text you choose to speak is sent over an encrypted connection through our server to ElevenLabs to generate the audio, which is returned and played; the generated audio is cached so repeats are instant and available on your devices. Your ElevenLabs key is stored encrypted and used only to speak in your voice. This happens only when you have connected an ElevenLabs voice and turned it on; offline, Rejoin falls back to your Apple/Personal Voice. ElevenLabs processes this text as a service provider under its own terms; it is not used to train models.

5. Care data

If you enable the Care tab, your care log entries and check-ins are stored on your device and, if you use an account, sync to your own account across your devices. They are not shared with anyone else. Handoff notes are generated only from what you logged. Turning the Care tab off stops and hides all of it. Care data is health-related and we treat it with corresponding care; note that Rejoin is a consumer app and not a HIPAA-covered entity or business associate.

6. Payments

Rejoin+ subscriptions are billed by Apple through your App Store account. We never see or store your payment details. We receive only what Apple provides to developers: anonymized transaction records that tell us a subscription is active.

7. Retention and deletion

On-device data is yours to clear in the app at any time, and is removed when you delete the app.
Synced data is kept while your account exists. Deleting your account (Me → Your data) permanently deletes your synced data from our database — no retention period, no questions.
Export everything first if you wish, from the same place.

8. Sharing

We do not sell personal information, and we do not share it for advertising — as defined under any law, including the CCPA. The only parties that touch your data are the service providers that run Rejoin's infrastructure (cloud database hosting, AI text processing, transactional email delivery via Resend for account and subscription messages, and — if you connect it — ElevenLabs voice synthesis), under contracts that limit them to providing the service. We would disclose data if a valid legal process compelled it — though because audio is never stored and transcripts stay on your device, there is very little to compel.

9. Your rights

Wherever you live, we offer the same rights: access what we hold about you (it's the synced content and email described above), export it, correct it, and delete it — all available directly in the app, no request form needed. You can also turn product analytics & diagnostics on or off any time in Me → Your data; when off, the app sends none. If you prefer, or if something doesn't work, email privacy@rejoinvoice.com. If you're in the EU/EEA, UK, or a US state with a privacy law, these are the rights those laws describe; you also have the right to complain to your local authority, though we'd appreciate the chance to fix things first.

10. Children

Rejoin is not directed at children under 13, and we don't knowingly collect personal information from them. Rejoin may be set up for a person of any age by a parent or legal guardian who manages the account and data on their behalf.

11. Security

Data syncs over encrypted connections (TLS) and is stored encrypted at rest with per-account access controls. The optional caregiver PIN protects settings and the care log on the device itself. No system is perfectly secure; if a breach ever affects your data, we will tell you promptly and plainly.

12. Changes to this policy

If we change this policy, we'll update the date at the top and, for meaningful changes, tell you in the app before they take effect. We will never change the four promises in the short version at the top — those are the point of the product.

13. Contact

privacy@rejoinvoice.com — a person answers.