Legal
Privacy Policy
Last updated: 21 July 2026
DeeperRoots (“we”, “us”) helps elders and younger listeners meet, stay in touch, and preserve the stories that emerge, with consent and dignity at the centre. This page explains what we collect, how we protect it, and the choices you have.
How we protect stories
Trust is the product. Here is how we keep voices private and people safe, in plain language, not legalese alone.
- Consent gates. We do not record, transcribe, or share a story without an explicit opt-in for that purpose. Each purpose is separate; withdrawing consent stops future recording and new access links.
- Organisation isolation. Data is separated so that strangers and other cohorts cannot open each other’s stories.
- Private storage. Audio is kept in a private collection, not publicly listable on the open web.
- Signed, expiring links. When someone needs to listen, we issue short-lived signed URLs. If consent is revoked, we stop issuing new links.
- Least privilege. Partner admins see call and journey status by default, not raw audio. Operational access is not the same as hearing private voices.
- Audit trail. We log who accessed what, and when, so elevated access remains accountable.
- Voice call policy. Calls never ask for banking details, passwords, one-time codes, or identity documents. Saying “stop” ends the call.
- Human escalation. Distress, confusion, or technical failure routes to a facilitator, not an endless bot loop. AI does not manage safeguarding cases.
What we collect
- Contact details you share (name, phone, email, WhatsApp)
- Story recordings, transcripts, and related materials you upload or approve, only when the relevant consent is active
- Basic usage data needed to run and secure the service
How we use it
- To match, schedule, and support consented conversations and story keepsakes
- To respond to enquiries and support requests
- To improve the service and keep accounts secure
Sharing
We do not sell family stories. We only share data with processors who help us operate the service (for example hosting, transcription, or messaging), under agreements that protect your information, or when the law requires it. Within the programme, story content follows the confirmed relationship and active consent, not a public feed.
Retention
We keep story materials for as long as your collection stays active, or until you ask us to delete them, subject to legal retention duties.
Your rights
You may request access, correction, or deletion of personal data we hold about you. Contact us at hello@treasuresbowl.com.
Contact
Privacy questions: hello@treasuresbowl.com