Privacy Policy

Privacy is the foundation of trust, not an afterthought. This page tells you exactly what we collect, why, where it lives, and what we do — and don't do — with it. We try to write this in plain language so anyone can follow along.

Who we are

Lani Companion Health LLC ("Lani," "we," "us") makes Lani, a warm AI companion for older adults and the families who love them. You can reach us anytime at admin@lani.health.

What this policy covers

This policy covers our website at lani.health (including the waitlist signup form) and our mobile app, Lani Companion (currently in private beta on Apple TestFlight; iOS Bundle ID app.lani.health). When we expand to additional surfaces — for example a Family Companion App for caregivers — we'll update this policy and notify users before any change that affects them.

Information we collect on the website

When you join the waitlist, we collect your email address and, if you choose to provide it, your first name. That's it.

Website analytics. We use Vercel Web Analytics to understand basic website traffic, such as page views and general usage patterns. Vercel Web Analytics is designed to be privacy-friendly and cookie-free. We do not use advertising pixels, behavioral advertising trackers, or data brokers, and we do not sell personal data.

Your browser stores a small local flag (lani.splash.seen) so our introduction screen only shows you once. This data never leaves your device.

Information we collect through the mobile app

Account information

Lani uses email one-time codes (OTP) for sign-in. We do not collect or store passwords. To sign you in, we collect:

• your email address;
• a short-lived sign-in code that we email to you;
• basic profile fields you choose to enter during onboarding (preferred name, age range, language preference, accessibility preferences such as text size).

Conversations and reflections

What you say to Lani — by typing or speaking — is associated with your account so Lani can remember context across visits (for example, that you mentioned a grandchild's name or a recent trip to the doctor). You can review, export, or delete this information from inside the app.

Health information you choose to share

When you connect Apple Health, Lani reads only the data types you explicitly grant. Today that may include steps, heart rate, sleep, activity, blood pressure, blood glucose, oxygen saturation, irregular heart rhythm notifications, historical fall events, and several mobility metrics (walking speed, step length, double-support time, walking asymmetry, walking steadiness, and physical effort), plus high/low heart rate notifications. Lani does not currently write data back to Apple Health. You choose each data type individually in the iOS Health permission sheet.

If you fill in Medical ID inside Lani — conditions, allergies, medications, blood type, primary physician, preferred hospital, pharmacy, insurance, mobility and cognitive notes, and emergency notes — that information is stored against your account so Lani can surface it when you need it. Medical ID is owner-only by default and is not shared with anyone unless and until you explicitly opt in to a sharing surface (none is shipped today).

Reminders and notifications

Reminders you create are stored against your account. They drive local notifications on your device — we do not send remote push notifications today. iOS, Apple Watch, silent mode, Focus modes, and your in-app voice-sound preference all govern whether you actually hear the notification; we cannot bypass any of those.

Recent Activity (active-status)

If you turn on Recent Activity, Lani periodically writes a timestamp meaning "this user was recently active in the app." That timestamp is intended to be visible to family members you authorize per person in the Lani Family Companion app. Lani does not record what you were doing — only that you were active. You control the update interval and can turn the feature off at any time. This is not emergency monitoring.

Family / caregiver sharing

Sharing wellness summaries, mood updates, or health flags with family or caregivers is opt-in only, controlled per-recipient and per-data-type from inside the app. The Family Companion App that consumes these summaries is not yet launched; until it launches, no recipient receives anything. We will update this section before any sharing surface goes live.

Voice and speech

If you use voice mode, your spoken input is converted to text using on-device speech recognition (Apple's built-in) and sent to our AI provider only as text — we don't record or retain raw audio. Lani's spoken replies are generated on-demand; no audio of yours is stored on our servers.

Where your information is stored

Account, conversation, reminder, Medical ID, Recent Activity, and health-summary data are stored on Supabase, our backend database provider, on servers in the United States. Data is encrypted in transit and at rest. Access is restricted by Supabase row-level security so a row can only be read or written by the user it belongs to.

One-time-code emails are delivered through Resend, our email-delivery provider. Resend sees your email address and the contents of the message (e.g. "Your Lani sign-in code is 123456") for the time it takes to deliver. We do not use Resend for marketing.

AI responses for chat and voice mode are generated using Anthropic (Claude). The text of your message and Lani's reply are sent to Anthropic to produce the response. Per Anthropic's API terms in effect at the time of writing, this content is not used to train their models by default. We do not send your email address or any other identifier to Anthropic.

What we do not do

• We do not sell, rent, or trade your information.
• We do not share your information with advertisers or data brokers.
• We use privacy-friendly, cookie-free Vercel Web Analytics for basic website traffic measurement. We do not use advertising pixels, behavioral advertising trackers, or data brokers.
• We do not write data back to Apple Health.
• We do not share your information with family members, caregivers, healthcare providers, insurers, or anyone else unless you explicitly opt in to a feature that does so — and we tell you, before you opt in, exactly what would be shared and with whom.
• We do not record raw audio of your voice on our servers.
• Lani does not provide medical diagnosis, treatment, or prescription. Lani does not replace your doctor or therapist. Lani is not emergency dispatch.

Your choices and rights

From inside the app you can:

• turn individual Apple Health data types on or off (also available in iOS Settings → Health → Data Access & Devices → Lani);
• turn Recent Activity on or off, and change the update interval;
• turn Lani voice reminder sounds on or off;
• edit or delete reminders you've created;
• review and edit your Medical ID;
• export or delete individual conversation memories;
• delete your account, which removes your profile, conversations, memories, reminders, Medical ID, Recent Activity history, and health summaries from our backend.

You can also ask us to delete your information, send you a copy of what we have, or correct it at any time. Email admin@lani.health and we will respond within 30 days.

How long we keep information

Account data is kept while your account is active. When you delete your account, we remove the data described above from our active backend. Backups may retain the data for a short additional window before they roll off (typically 30 days). Email-delivery logs at our provider may retain delivery records (not message content) on the provider's schedule.

Children

Lani is designed for adults. We do not knowingly collect information from children under 13. If you believe a child has signed up, please write to us and we will remove the record.

Health-information posture

Lani handles personal health information that you choose to share with us, and we treat it with care: encrypted in transit and at rest, owner-only access by default, and never sold or shared with advertisers. Lani Companion Health LLC is not currently a HIPAA Covered Entity, and using Lani does not by itself create a HIPAA-protected relationship. If a future product feature places Lani in a HIPAA-covered role (for example, a Business Associate Agreement with a clinician or care organization), we will update this policy and the relevant in-app screens before that feature is enabled for you.

Changes to this policy

If we make material changes — especially when we launch new sharing surfaces, the Family Companion App, or any provider/insurance integration — we will update the effective date at the top of this page and notify users by email before the change takes effect.

Contact

Questions, concerns, or requests: admin@lani.health.