Privacy Policy

Messages. The texts you send to Carlene and the replies she sends you, so the conversation has continuity.

Your phone number (or other channel identity), so we can reply to you and recognize you next time.

Things you choose to share that Carlene remembers: where you are in the process, dates, what helps, your name, your timezone, and reminders you ask for. You control this — see “Your controls” below.

Consent records (that you confirmed you are 18+, understand Carlene is an AI, and agreed to memory), and minimal delivery metadata (message ids, timestamps, delivery status).

Portal sign-in. If you link the web portal, we receive your Google account email and identifier from Firebase Authentication.

We do not collect payment information. We do not run ads or sell data.

To reply to you, remember what you asked us to remember, send reminders and check-ins you requested, keep you safe (honoring STOP, pause, and urgent-keyword handling), and keep the service running (deduplication, rate limits, abuse prevention).

Carlene provides education and organization only. She does not diagnose, prescribe, choose treatments, or monitor emergencies. What you tell her is treated as your own statement, not a verified medical record.

Carlene runs on a small set of service providers acting on our instructions:

• Meta / WhatsApp — message transport when you use WhatsApp. Subject to WhatsApp’s own terms and retention.
• Vercel — application hosting and AI Gateway (request routing).
• Google Firebase — database (Firestore), authentication, and file storage.
• AI model providers — reached through Vercel AI Gateway to generate replies. We configure providers so your conversations are not used to train their models where the provider offers that setting.

We do not share your information with clinics, insurers, employers, or advertisers. Any future connection (for example a calendar or wearable) will only be made with your explicit, separate consent.

We keep your messages, memories, and reminders while your account is active so Carlene can be useful to you. When you delete your data, we delete it from our systems promptly. Service providers may retain operational logs or backups for a limited window under their own policies (WhatsApp delivery metadata, hosting logs, database backups).

• Text “what do you remember” to see what Carlene has saved.
• Ask her to forget something, or text “forget” with the item.
• Text STOP to end proactive messages, or pause to pause them.
• Export or delete everything from the portal privacy page, or follow the data deletion instructions.

Data is encrypted in transit and at rest by our providers, access is limited to what the service needs, and message bodies are not written to application logs. WhatsApp encrypts messages between your phone and WhatsApp; once a message reaches Carlene it is processed by the services above. We do not claim HIPAA compliance, anonymity, or end-to-end encryption across the full processing chain.

Carlene is for adults 18 and over. We ask you to confirm this before she remembers anything. If we learn we hold data from someone under 18, we delete it.

If this policy changes materially, we will tell you in the conversation before the change takes effect. Questions or requests: support@carlene.ai.