Voiceprint Retention & Destruction Schedule
Sollund Health publishes this retention schedule and destruction policy in compliance with applicable biometric privacy laws (including Illinois BIPA, Texas CUBI, CCPA/CPRA, and GDPR).
1. Biometric Data Collected
When a caregiver or family member chooses to set up the optional custom voice feature in Sollund, we collect an audio recording of their voice (approximately 30 seconds). From this recording, our third-party voice processor (ElevenLabs) generates a private synthetic voice model and associated voiceprint identifier.
We do not sell, lease, trade, or otherwise profit from biometric identifiers or voiceprints.
2. Specific Purpose
Biometric voice models are collected and processed solely for the purpose of generating audio speech in the Sollund companion app, enabling the person living with memory loss to hear a familiar, comforting family member's voice during conversational reminiscing sessions.
3. Retention Guidelines & Destruction Triggers
Biometric identifiers and voice models are retained only for as long as needed to serve the specific purpose outlined above, and are permanently destroyed upon the earliest occurrence of any of the following triggers:
- In-App Voice Revocation: When the user or caregiver deletes the cloned voice from within the app profile settings.
- Account Deletion: When the associated Sollund account is deleted either through the in-app deletion flow or via our public deletion request page.
- One Year of Inactivity: When an account has been inactive for a continuous period of one (1) year.
- Caregiver Deletion Request: When a non-account-holding caregiver requests destruction of their voice data by email.
4. How Destruction Is Executed
When any destruction trigger occurs, Sollund immediately calls the ElevenLabs API to permanently purge the synthetic voice model from their servers and clears the associated identifier and consent metadata from our database.
Destruction is permanent and irreversible. Once destroyed, the voice model cannot be recovered or reconstructed.
5. Exercising Your Rights
If you provided voice recordings or other caregiver information and wish to exercise your rights of access, correction, or deletion, you do not need an account. Email our privacy team at:
We respond to verified requests within two business days and complete deletion within 30 days.
Please review our privacy policy and terms of service for additional details on how we protect your data.