Aile içinde kalır
Privacy.
Your family memories are sensitive. Here we transparently explain how we handle them — from consent to deletion.
Who can see the archive?
Only people the family admin has explicitly invited can see the archive. There is no public feed, no search engine indexing and no way for strangers to find your family. The archive is a private vault — not a social network.
How does WhatsApp consent work?
Currently, you send questions from your own WhatsApp account to Dede, Nine or your parents. Aile Hafızası prepares the text, you ask the person actively yourself — and our app only processes incoming voice messages once the person's consent is documented (e.g. via a short consent voice message). Whoever does not consent receives no further questions — you simply remove the person from your archive. Automatic sending with opt-in confirmation through a central Aile Hafızası number is planned as a comfort feature and will be connected with DPA and 360dialog (Germany-EU) before activation.
What happens to audio?
Original voice messages are stored encrypted in European data centers (Frankfurt). They are not used for advertising, not sold to third parties and not released for AI training. Audios remain the property of your family.
What happens to photos?
Photos you upload follow the same rules as audio — encrypted, EU storage, private, deletable any time. They are only shared with family members you have explicitly invited.
Can data be deleted?
Yes, any time. The family admin can permanently delete individual memories or the whole archive via the dashboard. If Dede, Nine or another narrator withdraws consent (via WhatsApp or email to us), you tell us — or you delete the affected content yourself from the archive. After a deletion we mark the archive as deleted immediately (read and write access blocked), and a cron job removes the record including audio and photos fully from our live system within at most 30 days. Backups at our hosting providers (database snapshots / storage versions) rotate per provider retention and are overwritten — pointwise removal from historical snapshots is not technically possible, but they expire within a limited time.
Is an AI clone created?
No. Aile Hafızası does not create an AI clone of your relatives. We do not produce a synthetic voice, no avatar and no chatbot that pretends to be Dede, Nine or your parents. Invited family members see only real stored memories — as original voice or original transcript.
Who can export?
The family admin can download the entire archive at any time — as JSON data export, as ZIP full backup with original audios and photos, as locally readable offline archive (HTML) or as a formatted PDF memory book (in paid packages). Other family members can view and listen to individual memories but not bulk-export. Data export belongs to the product — even in the free memory sample.
Do we use AI?
Yes — but transparently and only for structuring: audio-to-text transcription (OpenAI Whisper), summarizing content and linking it with people, places and years (Anthropic Claude). Original data stays unchanged. Families can correct transcripts and summaries at any time.
Sub-processors
We work with the following services — all under GDPR-compliant Data Processing Agreements (DPA) and, where offered, EU region:
| Service | Purpose | Region | Data |
|---|---|---|---|
| Vercel Inc. | Website hosting + edge functions | Frankfurt (fra1) — EU | Page views, IP address, sessions |
| Supabase EU | Database, authentication, storage | Frankfurt — EU | Account data, audios, photos, transcripts, metadata |
| Stripe Payments Europe | Payment processing (Checkout) | Ireland — EU | Name, email, billing address, payment data |
| OpenAI | Audio transcription (Whisper API) | USA — data transfer with DPA, no model training | Voice messages (for transcription, not stored at OpenAI) |
| Anthropic | Summarization + topic extraction (Claude API) | USA — data transfer with DPA, no model training | Transcripts (for summarizing, not stored at Anthropic) |
| 360dialog | WhatsApp Business API: receives voice messages and Leyla's replies within the 24-hour customer-service window, after the person has messaged Leyla first. No cold outbound, no automatic first contact. | Germany — EU (with DPA) | Phone number, incoming voice messages, Leyla's outgoing replies within the 24h window. |
| Sentry | Error monitoring (technical, no content data) | EU region (Frankfurt) | Stack traces, technical metadata, no audios/transcripts |
| Resend | Email delivery (double-opt-in for lead-magnet, confirmations, Heritage-Reel share to family members). | EU region (with DPA) | Recipient email, content of the message sent. |
| OpenStreetMap Foundation | Map tiles for the family map (only when the map view is opened) | United Kingdom / global tile servers | IP address + tile coordinates of the map. No archive contents. |
Responsible
Aile Hafızası — contact and imprint details, see Imprint. Requests regarding privacy, access, deletion or data portability: hallo@ailehafizasi.com.