Privacy policy

Updated and effective October 23, 2026

This policy explains what personal information Narremos (“we” or “us”) collects through Narremos: narremos.com, our app, and the calls we place (“Narremos”). It also explains why we collect it, who we share it with, where it’s kept and for how long, and the choices and rights you have.

Who we are

We’re a company in Pennsylvania, in the United States, and we run Narremos. We’re responsible for the personal information this policy describes. Our Privacy Officer answers questions about it at privacy@narremos.com, or by mail at the address under Contact.

Who’s who in Narremos

• The account owner opens the family’s account, pays for the plan, and invites the others.

• Storytellers tell their stories, on calls we place. The account owner invites them, and each one says yes for themselves before we call or record them.

• Family members are adults the account owner invites. They listen, read, ask, and add photos and documents.

• Children and teenagers don’t have accounts of their own. A parent can send their child’s questions from their own account, as “Children” below says.

What we collect

• Accounts: email addresses, the names people go by in the family’s circle, and what each person needs to sign in. Amazon Cognito handles sign-in for us.

• For a storyteller’s calls: their phone number, their language, and the times they choose for calls.

• Calls: recordings of our calls with storytellers, which include everyone heard on them, and their transcripts. Also what callers leave on our callback line: their number, their message, and what they say to the line, turned into text.

• Questions: the questions family members send to a storyteller, with the name they sign them with.

• Consents and directions: each yes, with its wording, its time and how it was given: the code that confirmed the number, with the device’s IP address and browser, or the recording of a yes given on a call. Also, for each storyteller, who controls their archive after they’re gone, and the account owner’s successor.

• A storyteller’s written release for a copy of their voice. We don’t make copies yet. When we do, it’s only with that release, as “A copy of a storyteller’s voice” below says.

• Payments, if you subscribe: from Stripe and its affiliate Link, the merchant of record for your payment (terms §5), details such as your plan and payment history, the name, email address and billing address on your payment, and your card’s type, last four digits and expiry date. We never receive your full card number.

• Messages you send us, with the address or phone number they come from.

• How you use our website, through analytics, on our home page, our landing pages and sign-up: the pages you visit and what you do on them, your device and browser, your approximate location from your IP address, and the ad or link that brought you. See “Analytics and advertising”.

• How Narremos is used, from our own records: our servers record each request and call, so we can count steps such as calls placed, stories heard and questions sent, never what was said or shown.

• Technical information: what our servers record about each visit, request or call, such as an IP address, a browser, a calling number and the time.

• Cookies and similar technologies: what keeps you signed in, keeps Narremos secure, and remembers your language and your cookie choices. Where measurement is on, a note in your browser of the ad or link that first brought you, which goes with your sign-up. Also the cookies and similar technologies from Google and Meta that measure how visitors use those pages and how our ads perform, as “Analytics and advertising” says.

What a storyteller tells us can include details about their health, their beliefs, their family, and other people in their life. “Health details in stories” covers health.

Your family’s content stays inside Narremos

Your family’s content means the words and voices in your archive. It never goes to an outside analytics, session-recording or advertising company.

How we use it

We use personal information to:

• give you Narremos: accounts, calls, recordings, transcripts, the archive, family questions, and who hears what;

• with a storyteller’s release, make and use a copy of their voice, as “A copy of a storyteller’s voice” says;

• take payments, give refunds, and keep our accounting and tax records;

• send messages about your account and plan, such as receipts, and the notices our terms or the law require;

• answer your messages;

• keep Narremos and your account secure, and prevent fraud and misuse;

• notice when someone may be in crisis, and refer them to help, as our crisis protocol says;

• measure how visitors find and use our public pages and how our ads perform, improve our pages, and show our ads to people who’ve visited Narremos;

• measure how families use Narremos, to improve it;

• meet our legal obligations, and protect our rights.

AI in Narremos

• The interviewer is an AI. It talks with storytellers on our calls. It runs on Amazon Nova Sonic, through Amazon Bedrock, in the United States.

• Transcripts are made by AI too: Nova Sonic writes each call’s as the call goes. On our callback line, Twilio’s speech recognition turns what callers say into text.

• Crisis protocol. Our AI watches for signs that someone may be thinking of suicide or self-harm, and refers them to crisis services. Our published crisis protocol says how (narremos.com/crisis-protocol).

• We don’t collect, use or sell personal data to train large language models.

Recording

• The storyteller’s yes comes first. We record a storyteller only after they’ve said yes to recording themselves, separately from their other yeses.

• Every call says so at the start: “This call is recorded for your family’s archive.”

• Everyone heard is told. Anyone else on a call hears that notice.

A copy of a storyteller’s voice

• Not yet. We collect a storyteller’s written release now, and don’t make copies of voices yet. This section says how we treat a copy once we do.

• What it is. It’s a model made from a storyteller’s own recordings that can say new words in their voice. We treat it as biometric information, a voiceprint, under the laws that protect it, including those of Illinois, Texas, Colorado and Washington.

• Only with the storyteller’s written release. The release says what the copy is for and how long it’s kept. A storyteller signs it themselves, apart from everything else.

• What it’s for. Saying the storyteller’s own answers to their family’s questions, in their voice, and, if their release says so, after they’re gone, for the people and the time it names. Each clip it makes is labelled as made by AI.

• Not sold. We don’t sell, lease or trade a copy of a storyteller’s voice, or otherwise profit from it. We disclose it only with the storyteller’s consent or as the law allows.

• When it’s destroyed: “Retention schedule” below.

Retention schedule

Copies of a storyteller’s voice

We permanently destroy a copy of a storyteller’s voice at the earliest of these:

• When its purpose is met: when the storyteller asks us to delete it, when the end their release names arrives, when their controller ends it after their death, or when the archive it speaks for is deleted.

• For a storyteller in Illinois: 3 years after their last interaction with us.

• For a storyteller in Colorado: 24 months after they last interacted with us. Also within 45 days after we determine that keeping it is no longer necessary, adequate or relevant to its purpose, which we review at least once a year.

• For a storyteller in Texas: within a year after its purpose expires.

A storyteller’s recordings aren’t a copy of their voice, and they stay in the archive as “How long we keep it” says. Before we make a storyteller’s copy, we ask which state they live in, since these limits depend on it.

Children

Children and teenagers don’t have accounts of their own, and Narremos doesn’t knowingly collect personal information from a child under 13. A parent can send their child’s questions to a storyteller from their own account, and share the answers with their child. Those questions are the parent’s, and part of the parent’s account. If we learn that we’ve collected personal information from a child under 13, we delete it. If you think we have, write to privacy@narremos.com.

Analytics and advertising

These run on our home page, our landing pages and sign-up, never on a screen that shows your family’s content.

• What we use.

  • Google Analytics measures how visitors find and use those pages, and how our ads perform.

  • Google Ads’ tag tells us which of our ads on Google lead to an account.

  • The Meta Pixel measures our ads on Meta’s services, such as Facebook and Instagram.

• What they measure. The pages you visit there, how far you read, and when you start and finish signing up. We also keep a note in your browser, for 90 days, of the ad or link that first brought you, and it goes with your sign-up.

• Meta’s. The Meta Pixel sends Meta what it measures. Meta runs Facebook and Instagram, and uses what the Pixel sends to measure our ads and to decide who sees them, on Facebook, Instagram and elsewhere.

• Tracking for advertising. Third parties, including Google and Meta, may use cookies, web beacons and similar technologies to collect or receive information from Narremos and from elsewhere on the internet. They may use it to provide measurement services and to target ads. On Narremos, while these are on, each visitor’s use of those pages is tracked and shared with Google and Meta, for advertising and marketing.

• Your choice. Where the law requires your agreement first, including in the European Economic Area, the United Kingdom, Switzerland and Quebec, none of these load, and nothing is kept in your browser. Elsewhere they’re on from your first visit, and you can turn them off at any time with “Cookie choices” at the bottom of every page. The change takes effect at once. In Connecticut, we treat a Global Privacy Control signal from your browser as turning them off.

• Google’s and Meta’s own policies.

  • Google uses the information as it explains in “How Google uses information from sites or apps that use our services” (policies.google.com/technologies/partner-sites).

  • Meta explains its use in its Privacy Policy (facebook.com/privacy/policy).

• Other ways to opt out.

  • Google’s My Ad Center (myadcenter.google.com) controls the ads Google shows you.

  • Google Analytics’ opt-out browser add-on (tools.google.com/dlpage/gaoptout) stops Google Analytics on every site.

  • The ad preferences in your Facebook or Instagram settings control the ads Meta shows you.

  • To opt out of ads based on your interests from many companies at once, use the Digital Advertising Alliance’s tools (aboutads.info/choices), or, in Europe, Your Online Choices (youronlinechoices.eu).

  • Your browser can also block or delete cookies.

Who we share it with

• The family’s circle. What a storyteller says on our calls goes to the account owner and everyone in the family’s circle. A question a family member sends goes to the storyteller and the circle.

• Service providers that run Narremos for us, under contracts that require them to protect it:

  • Amazon Web Services: hosting and storage, sign-in, our emails (Amazon SES), transcription, and the AI models of the interviewer and Ask (Amazon Bedrock).

  • Twilio: the phone calls we place, which it carries to and from the storyteller’s phone; our callback line, where it records messages and turns what callers say into text; and the codes we text to confirm a phone number.

  • Stripe and its affiliate Link: payments, with Link as the merchant of record (terms §5).

  • Google: Google Analytics and Google Ads’ tag, as “Analytics and advertising” says, and the company mailbox where we read and answer what’s written to help@ and privacy@.

  • Meta: the Meta Pixel, as “Analytics and advertising” says.

• Stripe’s and Link’s own purposes. As the merchant of record, Link also uses payment information for its own purposes, such as charging sales taxes and preventing fraud. So does Stripe. Both do so under Stripe’s Privacy Policy (stripe.com/privacy), which covers Link.

• Google’s and Meta’s own purposes. They also use what they collect for their own purposes, under their own policies, as “Analytics and advertising” says.

• After a storyteller’s death, the people their directions name. See terms §11.

• Professional advisers, such as lawyers and accountants.

• Authorities and others, when the law requires it, or to protect our rights, Narremos, or someone’s safety.

• A business that takes over Narremos, or is considering it, under an agreement to protect your information.

• Others, with your consent or at your request.

Where your information goes

• Kept in the United States. We keep accounts, recordings, transcripts, the archive and copies of voices with Amazon Web Services in the United States, in its US East (N. Virginia) region. Our AI models run in the United States.

• Calls. Twilio carries our calls, in the United States, and keeps its own record of each one, with the numbers and times. When we delete a person’s information, we delete their call records at Twilio too.

• Analytics and advertising. Google and Meta process what they collect in the United States and other countries.

• Payments. Stripe and Link process payment information in the United States and other countries where they operate.

• Seen from the United States. We’re a US company, so the people who run Narremos for us may see your information from the United States, to give you support and to run the service.

• Subject to the law there. Information processed in another country is subject to that country’s laws, and its courts, law enforcement and national security authorities may be able to get it.

How long we keep it

• For as long as we have a business or legal reason to keep it. That covers, for example: while the account is open and its plan is active; while a storyteller’s directions say their archive should be kept; and for as long as we may need to show that a consent was given or a request honoured.

• Payment and tax records: as long as tax and accounting laws require.

• Where the law sets a limit, we keep to it:

  • copies of voices, as the “Retention schedule” says;

  • consumer health data, deleted on request as “Health details in stories” says.

• Analytics: Google Analytics keeps what it collects for 14 months.

How we protect it

We take reasonable steps to protect personal information. Only the people who need it to run Narremos can see it. No way of storing or sending information is perfectly secure.

Your choices and rights

• Everyone.

  • A storyteller can change or withdraw any of their yeses, or stop our calls, at any time: from the link their invitation gave them, by saying so on a call, or by writing to us.

  • A storyteller can ask us to delete any part of their stories, or all of them.

  • The family can download each call’s recording from the archive.

  • Anyone can ask us for a copy of what we hold about them, or to delete it or their account, by writing to privacy@narremos.com.

  • We then delete as “How long we keep it” says.

• Connecticut. If you live in Connecticut, you can:

  • see the personal data we hold about you, and get a copy you can take elsewhere;

  • correct it, or have it deleted;

  • get the list of third parties we’ve sold personal data to;

  • opt out of its sale, of targeted advertising, and of profiling that produces legal or similarly significant effects.

  We ask for your consent before we process your sensitive data, such as health details or a copy of your voice. We answer within 45 days, which we may extend once by 45 days. If we say no, you can appeal by writing to privacy@narremos.com. We answer an appeal within 60 days and, if we still say no, tell you how to contact Connecticut’s Attorney General. We won’t treat you differently for using these rights.

• Washington and Nevada: your rights over consumer health data are under “Health details in stories”.

• How to ask. Write to privacy@narremos.com. We may first ask you to confirm who you are. Someone you authorize can ask for you, where the law allows it.

Emails from us

• About your account and plan, such as receipts, notices of changes, and the copy of what you agreed to.

• Marketing, to account holders, with a one-click unsubscribe in each one. Each email says who it’s from and gives our postal address.

Do Not Track

Browsers’ “Do Not Track” signals don’t change what Narremos does. A Global Privacy Control signal turns analytics and advertising off where the law requires it, as “Analytics and advertising” says.

Who Narremos is for

Accounts are for adults, 18 or older, who live in the United States, and storytellers are called at phone numbers there. Children and teenagers don’t have accounts of their own, and a parent can send their questions, as “Children” says.

Changes

If we change this policy, we’ll post the new version here with its effective date, and email account holders. If a change means using your information for a new purpose, we’ll ask for your consent first where the law requires it.

Contact