Privacy Policy

Mitali ("Company," "we," "us," or "our") makes AI voice and chat companions for people navigating serious illness and the people who care for them — Mitali Heart (cardiac recovery) and Mitali Memory (dementia caregiving). This Privacy Policy explains, in plain language, what we collect, how we use it, and the choices you have. It covers our companion apps and websites (the "Service"). The Service is currently in beta.

1. Information We Collect

We try to collect only what the companion needs to work and to remember you.

• Account information: the email address you sign up with, and the name you choose to give us.
• Your conversations: what you say and type. When you use voice, your speech is converted to text so the companion can respond and remember earlier conversations. We keep your conversation history so the app can follow up with you over time.
• What you choose to add: in Mitali Memory, details you provide about yourself and the person you care for, and any photos or memories you upload.
• Limited usage analytics: de-identified behavioral events (for example, that a session started) so we can improve the product. These are tied to a random ID, not to your name or email, and never include the content of your conversations.

2. How We Use Your Information

• To run the companion — understand what you say, respond, and remember you across conversations.
• To keep the Service safe and reliable, and to fix problems.
• To understand, in aggregate and de-identified form, how the Service is used so we can improve it.

We do not sell your personal information. We do not use the content of your conversations for advertising, and we do not allow it to be used to train third-party AI models.

3. Service Providers We Share Data With

We do not sell, rent, or trade your personal information. To operate the Service, we share data with a small set of trusted providers ("subprocessors"), only as needed to run Mitali:

Each provider may only use the data to perform its service for Mitali. We may also disclose information if required by law, or in good faith to protect someone's safety. We do not share data with advertisers or data brokers.

4. How We Protect Your Data

We treat your conversations as sensitive, health-related information and apply strong safeguards:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls with least-privilege principles
• Audit logging and monitoring for unauthorized access

No system is perfectly secure, but we work to protect your information and to limit who can see it. (Note: a direct-to-consumer wellness app like Mitali is generally not a HIPAA "covered entity." Our separate facility Safety Alert System operates under HIPAA Business Associate Agreements — see Section 9.)

5. Data Retention & Your Control

We keep your conversations and the things you tell us so the companion can remember you and follow up — for as long as you keep your account. You are in control:

• Export: you can download your data any time in the app's Settings.
• Delete: you can delete your conversations and your account any time in the app's Settings. When you delete, we remove your data, except anything we must keep by law.

6. Your Rights & Choices

You have the following choices about your information:

• Access & Export: download a copy of your data any time in the app's Settings.
• Deletion: delete your conversations and your account any time in the app's Settings.
• Correction: update the details you've given us, in the app or by contacting us.
• Opt-out of texts: if you receive SMS from us, reply STOP to stop and HELP for help.

California residents (CCPA/CPRA): you have the right to know what we collect, to delete it, to correct it, and to opt out of "sale" or "sharing" of personal information — we do not sell or share your personal information in that sense. We will not discriminate against you for exercising these rights.

To exercise any right you can't complete in the app, email privacy@mitalihealth.com (or support@mitalihealth.com). We will respond to verified requests within 30 days.

7. Children's Privacy

Mitali is intended for adults. Mitali Memory is designed for adult caregivers. The Service is not directed at children under 18, and we do not knowingly collect personal information from them.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version here and update the "Effective Date" above, and for material changes we'll give notice in the app or by email. Your continued use of the Service after a change takes effect means you accept the updated policy.

9. Facility Safety Alert System (separate service)

Separately from the consumer companion apps, Mitali offers a facility-facing Safety Alert System that sends SMS alerts to clinical staff. That service operates under HIPAA Business Associate Agreements with the enrolling facility. Its safety-alert messages contain only de-identified event metadata (category, urgency, timestamps) — not verbatim speech or transcripts — and its session metadata is retained for 24 hours and then automatically deleted. To opt out of those texts, reply STOP.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Privacy: privacy@mitalihealth.com
• Support: support@mitalihealth.com
• Phone: +1 (833) 400-3596
• Website: https://mitali.ai