Privacy Policy

This Privacy Policy explains how Computer Biology Labs (“ConstantLife,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the ConstantLife mobile app, watch app, websites, APIs, beta releases, and related services (collectively, the “Service”).

1. What ConstantLife Does

ConstantLife is an AI memory and persona platform. The Service may let you create or interact with AI companions or personas, speak with them by voice, save memories and files in a Vault, generate or clone voice/avatar experiences, review diary or fact summaries, use local device actions, and invite other people to view, contribute to, administer, or serve as a legacy trustee for a persona.

Because ConstantLife handles deeply personal content, this policy is intended to describe our practices plainly.

2. Information We Collect

Account and profile information

We collect information you provide when you create or use an account, such as your email address, name, username, avatar, password credentials handled through our authentication provider, profile settings, account type, plan or subscription status, and account timestamps.

Authentication and security information

We process authentication tokens, session information, password reset activity, email confirmation status, and related security signals. If you use Face ID or device biometrics, Apple processes the biometric template on your device. ConstantLife receives only the result needed to unlock protected app areas.

Voice, audio, conversation, and transcript information

When you enable or use voice features, we may process microphone audio, wake-word or command audio, conversation audio, voice samples, transcripts, text prompts, assistant responses, speaker verification data, voiceprint embeddings, and related metadata. Some audio processing may happen on device, and some may be streamed or uploaded to our backend or service providers to provide transcription, real-time conversation, voice generation, speaker verification, or memory features.

Personas, memories, Vault content, and generated content

We collect content you create, upload, or generate in the Service, including persona names, descriptions, system prompts, facts, diary additions, notes, documents, photos, videos, audio recordings, transcripts, conversation history, tags, titles, descriptions, knowledge files, avatar source media, voice samples, generated audio or video, and metadata such as file name, file size, file type, source, timestamps, approval status, and related identifiers.

Sharing, invites, memberships, and legacy trustee information

If you share a persona or invite someone to collaborate, we collect invitee email addresses, invite tokens, invite status, role assignments, membership records, display names or partial email displays, access permissions, pending upload review records, ownership transfer records, and legacy trustee information. If you designate a legacy trustee, we may process trustee email addresses, user identifiers, owner inactivity status, warning timestamps, handoff status, and recovery-window information.

Contacts, location, HealthKit, reminders, music, camera, and photos

With your permission, the app may access device resources to perform actions you request:

• Contacts: to find people for calls, texts, FaceTime, email, location sharing, safety check-ins, or other requested actions.
• Location: to provide directions, nearby search, one-time location or ETA sharing, or context for a request.
• HealthKit: to read health metrics you ask about, such as steps, heart rate, active calories, walking distance, or sleep. We do not write Health data, and we do not use HealthKit data for advertising, marketing, or data mining.
• Reminders, notifications, music, camera, microphone, speech recognition, and photo library: to perform the specific app functions you enable or request.

Unless a feature requires server processing, this device permission data is used locally to complete your request. For example, one-time location sharing places a location link into a message you choose to send; it is not continuous live tracking.

Connected account information

If you connect external services, such as email, calendar, file storage, or productivity accounts, we collect connection status, authorization tokens or references, account identifiers, and the information needed to perform the actions you request. Depending on the feature, this may include email, calendar, file, document, message, or metadata content from connected services.

Device, diagnostics, and app activity information

We may collect device type, operating system, app version, build, crash reports, error logs, performance traces, network request status, feature usage, and security or abuse-prevention information. We try to avoid collecting sensitive user content in logs and redact user content where practical.

TestFlight and beta feedback

If you test ConstantLife through Apple TestFlight, Apple may collect and provide us crash reports, diagnostics, feedback, screenshots, and information associated with your beta testing activity, according to Apple's TestFlight terms and privacy practices.

3. How We Use Information

We use information to:

• Provide, maintain, secure, and improve the Service.
• Authenticate users and protect accounts, voiceprints, personas, Vault content, and private conversations.
• Create, train, configure, operate, and personalize AI companions and personas.
• Process voice, transcript, chat, memory, diary, fact, people, and Vault workflows.
• Generate AI responses, summaries, transcriptions, voice output, avatar output, and related media.
• Enable sharing, collaboration, access control, invite acceptance, ownership transfer, and legacy trustee workflows.
• Perform user-requested local actions, such as calls, texts, reminders, maps, HealthKit queries, music playback, safety check-ins, and account connections.
• Provide support, debug issues, measure reliability, prevent abuse, enforce our terms, and comply with legal obligations.
• Communicate with you about your account, security, product updates, support, beta testing, and changes to our policies.

We do not sell your personal information. We do not use HealthKit data for advertising, marketing, or data mining. We do not use your personal content for cross-app tracking.

4. How We Disclose Information

We may disclose information in the following ways.

Service providers and infrastructure

We use third-party providers to operate the Service. These may include authentication, cloud hosting, storage, database, transcription, speech, AI model, voice generation, avatar generation, real-time audio/video transport, email delivery, analytics, crash reporting, support, and security providers. Current or planned providers may include Supabase, AWS, Sentry, LiveKit, Deepgram or other speech-to-text providers, ElevenLabs, HeyGen or LiveAvatar providers, and AI model infrastructure providers.

We require service providers to use information only to provide services for us and to protect user information in a manner consistent with this Privacy Policy and applicable law.

Other users you choose to involve

If you share a persona, invite collaborators, assign roles, transfer ownership, designate a legacy trustee, or approve shared uploads, information associated with that persona may be visible to those users according to their role and the choices you make.

User-directed disclosures

We disclose information when you direct us or the app to do so. For example, if you choose to text your location to a contact, the message recipient receives the location link. If you connect an external account or use a third-party communication service, information may be shared with that service to complete your request.

Legal, safety, and rights protection

We may disclose information if we believe it is reasonably necessary to comply with law, legal process, or government requests; protect the rights, safety, and security of users, the public, ConstantLife, or others; investigate abuse or security issues; or enforce our Terms of Service.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

5. AI Processing and Sensitive Content

ConstantLife may process highly personal content, including audio, transcripts, memories, relationship information, diary entries, photos, documents, health-related queries, and persona configuration. You should only upload or share content that you have the right and consent to use.

AI outputs may be inaccurate, incomplete, or inappropriate. Do not rely on ConstantLife for medical, legal, financial, emergency, or safety-critical decisions.

6. Health, Location, and Safety Features

HealthKit data is used only to provide the health-related feature you request. We do not use HealthKit data for advertising, marketing, or data mining.

Location features are used only when relevant to requested functionality, such as maps, nearby search, ETA, or one-time location sharing. ConstantLife is not an emergency services provider and should not be used as a substitute for calling emergency services.

Safety check-in features, if enabled, rely on device notifications, contacts, telephony or FaceTime links, and device/network availability. They may fail or be delayed and are not a replacement for emergency services.

7. Your Choices and Controls

You can control many data practices directly:

• Revoke app permissions in iOS Settings, such as microphone, speech recognition, contacts, location, Health, camera, photos, reminders, notifications, and music.
• Delete or edit personas, Vault uploads, facts, people records, diary additions, documents, voiceprints, and other content where the app provides controls.
• Revoke invites, remove members, leave shared personas, or change roles where permitted.
• Disconnect connected third-party accounts where supported.
• Sign out of the app.
• Request account deletion by contacting admin@computerbiologylabs.com. The app may sign you out immediately, but server-side deletion requires support processing. We aim to remove account data within 30 days unless we need to retain certain information for legal, security, fraud-prevention, backup, or dispute-resolution purposes.

8. Retention

We keep information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and preserve security. Retention periods vary by data type:

• Account and profile data is retained while your account is active.
• Persona, Vault, voice, avatar, knowledge, conversation, diary, fact, and sharing data is retained until you delete it, your account is deleted, or retention is no longer necessary.
• Invite tokens and beta/test links may expire or be revoked.
• Rejected Vault uploads may be permanently deleted from storage and database records.
• Crash, diagnostic, security, and backup records may persist for a limited period after deletion.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authentication, access controls, encrypted transport, provider security controls, and redaction practices. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Children

ConstantLife is not intended for children under 13, and we do not knowingly collect personal information from children under 13. Because the Service may process sensitive memory, voice, health, location, and communication data, users must meet the age requirements in our Terms of Service. If you believe a child provided personal information to us, contact admin@computerbiologylabs.com.

11. International Users

We may process and store information in the United States and other countries where we or our providers operate. These countries may have privacy laws different from those in your location.

12. Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to appeal a decision we make about a request. To exercise rights, contact admin@computerbiologylabs.com. We may need to verify your identity before responding.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service, by email, or by other appropriate means. The “Last updated” date shows when this policy was last revised.

14. Contact Us

© 2026 ConstantLife. All rights reserved.