Trust

Your family's memories, kept safe.

A plain-English record of what we store, where it lives, how it is protected, and how you can take it all with you whenever you want.

1. What we store

Account details: your name, email, your relationship to the child, and the child's first name.
Child profiles: first name, optional age, avatar and an optional 4-digit PIN.
Memories: photos, written notes and questionnaire answers.
Voice: the recordings you make, saved as audio files in private storage.
Conversations: the messages exchanged in listener mode, so you can review them.
Orders and plan status: what you have bought and whether your plan is active. No card numbers.

2. Where it lives

A managed cloud database for text records, and private cloud storage buckets for photos and audio.
Private files are never public — they are served through short-lived links created only for your signed-in session.
Payments are processed by Stripe; bear orders are processed by Shopify. Card details stay with them.

3. How it is protected

Encrypted in transit (TLS) and encrypted at rest.
Row-level security: each request can only touch rows belonging to the signed-in account.
Server-side checks on every read and write — the browser is never trusted on its own.
Secret keys are stored server-side and never shipped to the browser.
Automated security scanning of the database, dependencies and code.
Hosting certified to ISO 27001:2022 and SOC 2 Type II, and GDPR-compliant.

4. Your rights and controls

Export everything as a single file, at any time, from Grown-ups → Controls → Export.
Delete any memory, recording, child profile or conversation yourself.
Request full account deletion by emailing info@amaratas.ai — actioned within 30 days.
We do not sell your data and do not send marketing without consent.

5. Who we share with

Cloud hosting for the database and file storage.
AI and voice providers, used only to generate replies and speech when you use those features.
Stripe and Apple for payments; Shopify for bear orders.
No one else. Never advertisers, never data brokers.

Questions & answers

Where is my data stored?+

Everything you create — your profile, questionnaire answers, notes, photos and voice recordings — is stored in our secure cloud backend, hosted on enterprise infrastructure. Photos and voice recordings live in private storage that can only be opened through a temporary link generated for your own signed-in account. Bear orders are handled by Shopify and card payments by Stripe, so we never see or store your card details.

How safe is it?+

Your data is encrypted while travelling to us and encrypted while stored. Every table is protected by row-level access rules, meaning your account can only ever read and write its own family's records — not anyone else's. Our hosting is GDPR-compliant and holds ISO 27001:2022 and SOC 2 Type II certifications. We run automated security scans on the database and code, and the most recent scan found no vulnerabilities.

Who can see my recordings?+

Only you and the people you sign in to your family account. Each child can have their own profile and optional 4-digit PIN, so children only see what is meant for them. We never sell your data, and your recordings are not used to train outside AI models.

How do I download my data?+

Sign in, open the Grown-ups area, go to Controls, scroll to Export and press "Export all data". You will instantly get a file containing your profile, questionnaire answers, memories, voice recordings, conversations and messages. You can do this as often as you like.

How do I delete my data?+

You can delete individual memories, recordings, children and conversations from the Grown-ups area at any time. If you want your whole account removed, email info@amaratas.ai and we will action it within 30 days.

What happens to my data if I stop paying?+

Your memories stay yours. Cancelling a plan may limit some features, but your content is not deleted, and you can still export everything you have created.

Is my child's information handled differently?+

Yes. The account holder is always an adult parent or guardian. Child profiles hold only a first name, an optional age, an avatar and an optional PIN — no separate email address or contact details.

Read the privacy policy More FAQs