Voiceprint Retention & Destruction Schedule

1. Biometric Data Collected

When a caregiver in a person's care circle chooses to set up the optional AI voice, they record their own voice reading a short passage (at least 30 seconds, usually about a minute) in the Sollund caregiver portal. Each care circle has one voice. From this recording, our third-party voice processor (ElevenLabs) generates a private synthetic voice model and associated voiceprint identifier.

We do not sell, lease, trade, or otherwise profit from biometric identifiers or voiceprints.

2. Specific Purpose

Biometric voice models are collected and processed solely for the purpose of generating audio speech in the Sollund companion app for the person whose care circle it belongs to, so that the person living with memory loss hears a familiar family member's voice during conversations.

3. Retention Guidelines & Destruction Triggers

Biometric identifiers and voice models are retained only for as long as needed to serve the specific purpose outlined above, and are permanently destroyed upon the earliest occurrence of any of the following triggers:

• Deleted by the Recorder: When the caregiver who recorded the voice deletes it in the caregiver portal.
• Replaced by a New Recording: When a caregiver in the care circle records a new voice, which replaces the old one.
• Recorder Leaves the Care Circle: When the caregiver who recorded it leaves the care circle, is removed by the person or by our support team, or deletes their account.
• Account Deletion: When the person whose care circle it belongs to deletes their Sollund account, through the app or our public deletion request page.
• One Year Without Use: Deleted after one year without being used in a session. It is only used while the person has Sollund Plus. A daily job checks for these.
• Deletion Request by Email: When the caregiver who recorded it asks us by email to destroy it.

4. How Destruction Is Executed

When any destruction trigger occurs, we ask our voice AI provider, ElevenLabs, to delete the voice model right away, and we clear its identifier and consent record from our database. ElevenLabs removes it from its database immediately and from its backups within 30 days. We never store the recording ourselves. Our encrypted database backups can keep the identifier, not the voice, for up to 30 days before they age out.

Destruction is permanent and irreversible. Once destroyed, the voice model cannot be recovered or reconstructed.

5. Exercising Your Rights

If you recorded a voice, you can delete it, or your whole caregiver account, yourself in the caregiver portal. To exercise your rights of access, correction, or deletion by email instead, you do not need to sign in. Email our support team at:

support@sollundhealth.com

We complete verified requests within 30 days.