Consumer health data privacy notice.
Edgewater Holdings LLC operates CallPal. Effective September 12, 2026.
Health information you may choose to share
Conversations, voice processing, optional memory and account-support descriptions may contain information you provide about physical or mental health, symptoms, treatment, medication, psychological experiences or seeking support. The source is your conversation or request. CallPal does not need these details to provide ordinary companionship. Do not share information you do not want processed. No biometric voice identification or memorial voice upload is offered in this release.
Purpose and use
Information you submit is processed to provide the conversation or support you request, retain your history and, only when you enable memory, personalize future conversation context. Optional memory begins off for new accounts and is limited to ordinary preferences and interests; filtering cannot detect every sensitive statement. We do not use health statements to create advertising audiences or commercial health profiles.
Who processes it
OpenAI processes AI messages and speech. Twilio carries phone calls and texts. Supabase stores account records and conversation history. Vercel hosts website processing and Railway hosts voice processing. Authorized CallPal operators may review support requests. These processors may receive the information necessary for the requested service under their applicable processing arrangements. No commercial sale of consumer health data is offered. No affiliate receives health information for its own independent advertising use.
Your rights and choices
Use Privacy requests without signing in to request access to health information, a list of relevant recipients, withdrawal of any applicable consent, deletion or an appeal. Choose correction or explain withdrawal in the optional details field. We verify identity or authorized-agent authority before disclosing or deleting account information. Turning memory off stops future personalization but does not itself delete retained transcripts. Provider copies and backups require separate deletion processing. The request form supplies a private reference for progress.