Hattie CallsPrivacy policy
Last updated
This policy explains what personal data Hattie Calls collects, why, who we share it with, how long we keep it, and your rights. It covers the family members who use the app and the parent who receives the calls.
1. Who we are
Hattie Calls is provided by BLACKPEBBLE LTD ("we", "us"), a company registered in England and Wales, company number 11884353, registered office 39b Borough Street, Brighton, England, BN1 3BG. We are the controller of the personal data described here.
Contact us about privacy at hello@hattiecalls.co.uk or by post at our registered office.
2. What we collect
In this policy "family members" means the people who use the app, and "the parent" means the person Hattie calls. The parent doesn't need to use the app.
About family members
- Your name and email address, from Sign in with Apple. If you choose to hide your email, we get Apple's relay address instead.
- Your phone number, your role in the family (owner, manager or viewer), how and when you want to be alerted, and whether you agree to be connected into a call in an emergency.
- The notes you write for Hattie, and which alerts you have seen and acknowledged.
- A push notification token for your iPhone.
- Subscription status: whether the family's subscription is on a trial, active or ended, and the plan. Apple takes the payment. We never see card details.
About the parent
- Details the family enters when setting up: first name, what they like to be called, phone numbers, the time to call, interests, and any notes about hearing or about people who visit. There's an optional free-text box where the family can add health context.
- The consent call. We record this call, and keep the recording, its transcript and a record of each thing the parent agreed to. It's the only call we record.
- Daily calls. The audio is streamed in real time so it can be turned into text and Hattie can reply. It isn't recorded. We keep a written transcript for 30 days.
- What we produce from each call: a summary, the topics, facts Hattie remembers for next time (for example, a grandchild's name or an upcoming appointment), and any concerns, with the sentence that raised them.
- Call details: when calls happened, how long they lasted, and whether they were answered.
Health information
Parents often talk about how they're feeling, sleep, meals, falls or appointments. This is health data, a special category of personal data under UK GDPR. We only process it with the parent's explicit consent, given on the consent call (see section 4).
Other people
Sometimes someone else answers the phone, or the parent talks about friends, neighbours or carers. What they say, or what's said about them, may appear in a transcript for up to 30 days, and occasionally in a summary. If someone other than the parent answers, Hattie doesn't discuss the parent with them.
3. What the family can see
Everyone in the family sees call summaries, topics, which notes were used, and the list of facts Hattie remembers. They see the exact sentence behind any concern, so they can judge it themselves. They only see other quotes from the parent if the parent agreed to that on the consent call.
Family members never see transcripts or hear recordings. The parent can get their own transcripts by making a request to us (see section 10).
4. How we use it and our lawful bases
| What we do | Lawful basis |
|---|---|
| Run the family's account: sign-in, the family, settings, notes, summaries and alerts sent to family members. | Contract with the family member (UK GDPR Art. 6(1)(b)). |
| Hold the parent's contact details and call preferences so we can place the consent call. | Legitimate interests (Art. 6(1)(f)), of the family and of us, in asking the parent whether they want the service. |
| Make daily calls, talk with the parent, write summaries, remember details between calls, and tell the family about concerns. | The parent's consent (Art. 6(1)(a)). For health information, the parent's explicit consent (Art. 9(2)(a)). Both are given on the recorded consent call. |
| During an emergency on a call, offering to connect the parent to a family member and alerting the family straight away. | The parent's explicit consent. Where the parent can't give consent at that moment, vital interests (Art. 6(1)(d) and 9(2)(c)). |
| Reviewing calls that our safety checks flagged, to check the checks worked and improve them. A named member of our team does this, and every access is logged. | Legitimate interests in running a safe service (Art. 6(1)(f)). For health information, the parent's explicit consent. |
| Keeping the consent record and an audit log, to show consent was given and to handle complaints or legal claims. | Legitimate interests (Art. 6(1)(f)). For health information, establishing, exercising or defending legal claims (Art. 9(2)(f)). |
| Keeping billing records. | Legal obligation (Art. 6(1)(c)). |
| Keeping the service secure and preventing misuse. | Legitimate interests (Art. 6(1)(f)). |
We don't sell personal data, we don't use it for advertising, and we don't use calls to train AI models.
5. Automated processing
Hattie is an AI system. It holds the conversation, writes the summaries and decides which things are worth flagging to the family. Some concerns, like a fall, send an alert automatically. These decisions only decide what the family is told. They don't have legal effects on anyone, and a person in the family always decides what to do next. Summaries can contain mistakes. If you think something is wrong, tell us.
6. Who we share it with
We use these companies to run the service. They process personal data on our behalf and under contract with us.
| Provider | What they do | Where |
|---|---|---|
| Google Cloud | Hosts our servers and database | London (europe-west2) |
| Twilio | Places and receives phone calls; sends text messages and alert calls | US and other countries |
| Deepgram | Turns call audio into text, and Hattie's replies into speech | US |
| Anthropic | The AI model that runs the conversation and writes summaries | US |
| RevenueCat | Tracks subscription status from Apple | US |
| Apple | Sign in with Apple, in-app purchases, and push notifications | US and other countries |
| Resend | Sends email, such as daily summaries | US |
Within a family, information about the parent is shared with every family member, as described in section 3.
We may also disclose information if the law requires it, or to protect someone's life.
7. International transfers
Some of the providers above process data outside the UK, mainly in the United States. When they do, we protect the data with one of the safeguards UK law allows: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or, where the provider is certified, the UK Extension to the EU-US Data Privacy Framework. You can ask us for details of the safeguard for any provider.
8. How long we keep it
| Data | Kept for |
|---|---|
| Audio of daily calls | Not stored |
| Daily call transcripts | 30 days |
| Call summaries and call details | 13 months |
| Records of call attempts | 90 days |
| Facts Hattie remembers | Until they expire or are deleted, then 30 days |
| Family notes | 90 days after the note's end date |
| Concerns and alerts | 2 years |
| Weekly trends and emails sent | 13 months |
| Account, family and parent details | While the account exists |
| Consent call recording, transcript and consent record | 6 years after the account ends |
| Audit log (who did what and when, with no call content) | 6 years |
| Billing records | 6 years |
When the owner deletes the family in the app, calls stop at once. Seven days later, unless the owner cancels the deletion, we delete everything about the family and the parent, except the consent record, the audit log and billing records, which we keep for the periods above.
If a family member leaves a family, their own account and alert settings are deleted. The family's data isn't affected.
9. The parent's choices
- The parent can tell Hattie to take a break or stop for good on any call, or by ringing the same number. It takes effect straight away.
- If the parent stops the calls, the family can't restart them. Calls only start again after a new consent call that the parent agrees to.
- Stopping the calls withdraws consent. We stop using the parent's data to make calls and summaries. What we already hold is kept only for the periods in section 8, then deleted. Withdrawing consent doesn't make earlier processing unlawful.
- The parent can ask Hattie what we know about them, or ask us to delete it. We record the request and reply within one month, by post or through someone the parent names. They can also write to us or email hello@hattiecalls.co.uk.
- The parent can ask Hattie not to pass something on to the family. We respect that, except for safety concerns such as a fall, which the parent is told are always shared.
10. Your rights
Under UK data protection law, you have the right to:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it
- get data you gave us in a portable format
- withdraw consent at any time
Some rights have limits. For example, we keep the consent record even after a deletion request, because we may need it to show the parent agreed. To use any of these rights, email hello@hattiecalls.co.uk. We may need to check who you are. We reply within one month.
11. Security
Data is encrypted in transit and stored with Google Cloud in London. Only people who need it for their job can reach personal data, and every time someone reads a transcript or a concern, it's logged. No one listens to calls live.
12. Children
Hattie Calls is not for anyone under 18. Family members must be adults, and we only call adults who have agreed to the calls. If a child answers the phone, Hattie doesn't talk about the parent with them. If you think we hold a child's data, tell us and we'll delete it.
13. This website
This website doesn't use cookies or analytics. It's hosted by Google (Firebase Hosting), which sees your IP address when you visit, as any web server does. Fonts are served from this site, not from a third party.
14. Changes to this policy
If we change this policy in a way that matters, we'll tell family members in the app or by email before the change takes effect. If a change affects what the parent agreed to, we'll ask the parent again.
15. Contact and complaints
Email hello@hattiecalls.co.uk, or write to BLACKPEBBLE LTD, 39b Borough Street, Brighton, England, BN1 3BG.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd like the chance to sort it out first, so please contact us.