Built for families & care teams
Legal

Privacy Policy

A voice is the most personal thing a family can entrust to anyone. This policy explains, in plain language, what we collect, why, and the control you keep over it.

Last updated: October 16, 2026 · Applies to hamton.co and the Hamton apps

Plain-language summary: we collect what we need to run Hamton, keep voices and memories private to your circle of care, never sell them, and never use them to train public AI models. You can delete any recording, profile, or your whole account at any time, and deletion takes effect immediately.

1. Who this policy covers

This Privacy Policy describes how Hamton, based in Minneapolis, Minnesota ("Hamton," "we," "us") handles personal information when you use our website, mobile or web applications, and related services (the "Service"). It applies to family members and caregivers who create accounts, people whose voices and memories are recorded ("care recipients"), and visitors to our site.

By using the Service, you agree to this policy. If you record another person's voice or information, you confirm you have the authority and consent to do so, as described in our Consent Policy.

2. Information we collect

Information you give us

  • Account details — name, email address, password, and (for paid plans) billing information processed by our payment provider.
  • Care-recipient details — the name and information you choose to add about the person receiving care.
  • Voice recordings & memories — audio you record, transcripts generated from it, and the stories and notes you add. See Section 3.
  • Communications — messages you send us through forms, email, or support.

Information we collect automatically

  • Usage data — features used, calls started, and general activity, used to operate and improve the Service.
  • Device & log data — device type, browser, IP address, and timestamps.
  • Cookies & similar technologies — used for sign-in, security, and remembering preferences. You can control cookies in your browser settings.

3. Voice recordings & memory data

Voice and memory data is the heart of Hamton and the most sensitive information we hold. We treat it accordingly:

  • Consent is required. Every voice profile requires explicit permission from the person recorded or their authorized representative. See our Consent Policy.
  • It belongs to your family. Recordings, transcripts, voice profiles, and memories are private to your account and the people you invite.
  • It is used to deliver the Service — to build a recognizable voice profile and to power familiar, consented de-escalation calls.
  • Depending on your jurisdiction, voiceprints may be treated as biometric or special-category/health-related data subject to additional legal protections, such as the Illinois Biometric Information Privacy Act, the Texas and Washington biometric laws, and the GDPR. Where those laws apply, we collect voice data only with the written or recorded consent they require, and we honor the deletion rights they grant.

4. How we use information

  • To provide, maintain, and operate the Service, including building voice profiles and powering calls.
  • To create and secure your account and process payments.
  • To respond to your requests and provide support.
  • To improve reliability, safety, and quality of the Service.
  • To send you service-related messages (and, only with your consent, optional updates).
  • To detect, prevent, and address fraud, abuse, and security issues.
  • To comply with legal obligations.

Where this law applies, we rely on: consent (for voice/biometric and any health-related data, and optional communications); contract (to deliver the Service you sign up for); legitimate interests (to secure and improve the Service, balanced against your rights); and legal obligation (to meet our compliance duties).

6. When we share information

We do not sell your personal information, voice recordings, or memories. We share information only:

  • With people you invite — family members or caregivers you add to your account, and (for facility plans) authorized staff.
  • With service providers — vendors who host, process, or support the Service (for example, cloud hosting, speech processing, and payment processing) under contracts that require them to protect your data and use it only for us. Our current providers are Hetzner (cloud hosting), Twilio (phone calls and call audio), OpenAI (speech recognition and conversation), Fish Audio (voice synthesis), and Stripe (payments). We will update this list before adding a provider that handles voice or memory data.
  • For legal reasons — to comply with the law, enforce our Terms, or protect the rights, safety, and security of users and the public.
  • In a business transfer — if we are involved in a merger, acquisition, or sale of assets, with notice to you and continued protection of your data.

7. AI processing and model training

Hamton uses automated speech and language technology to create voice profiles and conduct calls. We do not use your voice recordings, transcripts, or memories to train public or general-purpose AI models, and we do not sell them. Any processing is performed to deliver the Service to your family. Recordings and memories are stored on servers we control. During a call, audio is processed in real time by our speech providers (currently OpenAI for speech recognition and conversation, and Fish Audio for voice synthesis) under contracts that prohibit them from using your data to train their models or for any purpose other than serving your family.

8. How long we keep information

We keep personal information only as long as needed to provide the Service and for legitimate, lawful purposes such as security, dispute resolution, and legal compliance. You can delete recordings, memories, voice profiles, or your entire account at any time. When you delete data or close your account, we delete or de-identify the associated personal information immediately from our live systems and within 30 days from encrypted backups, except where we must retain limited records to meet legal obligations. Call logs and transcripts are automatically removed 90 days after a call unless you delete them sooner, and security audit logs (which record access to data, not the data itself) are kept for six years as healthcare regulations require.

9. How we protect information

  • Encryption in transit and at rest.
  • Access controls limiting who can access data, with role-based permissions for facility accounts.
  • Operational safeguards including monitoring and least-privilege practices.

No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and regulators of any breach as required by law. If we learn of a breach affecting your personal information, we will contain it, investigate, and notify affected account holders by email without undue delay, and in any case within the deadlines that apply to us (for example, 72 hours under the GDPR and 60 days under HIPAA).

10. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent at any time. For voice and biometric data, you may withdraw consent and request deletion as described in our Consent Policy.

To exercise any right, email privacy@hamton.co. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority. We will not discriminate against you for exercising your rights.

California residents: you have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sharing" for cross-context advertising. We do not sell or share personal information in that sense, and we have not done so in the preceding 12 months. We also do not use or disclose sensitive personal information for purposes other than providing the Service. You may exercise your rights, or appoint an authorized agent to do so, by emailing privacy@hamton.co; we verify requests by confirming control of the account email address.

11. Children

The Service is intended for adults. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you (for example, by email or an in-app notice) and update the "Last updated" date above. Continued use of the Service after changes take effect means you accept the updated policy.

13. Contact us

Questions or requests about privacy? Reach our team:

  • Email: privacy@hamton.co
  • Mail: Hamton, 1500 Jackson St NE, Minneapolis, MN 55413, United States
  • Data protection questions: we have not appointed a formal Data Protection Officer; our privacy team at privacy@hamton.co handles all data-protection matters.

Hamton is a support tool and does not provide medical advice, diagnosis, or treatment. See our Terms of Service and Consent Policy.

Start your free voice profile