Privacy policy
Version 2026-09-13.
What Wren is
Wren is a daily check-in, medication reminder and companion service for an older adult, set up and looked after by a family member or friend. It is a wellness service. It is not a medical device, it does not give medical advice, and it is not an emergency service — in an emergency, always call your local emergency number.
Who is responsible
Wolfram and Hart is responsible for the personal information described here and is the organisation accountable for it under Canada's privacy law (PIPEDA); for people in the European Union and the United Kingdom, Wolfram and Hart is the data controller. Questions and requests go to the contact at the end of this page.
What we collect, and why
- About the family member who sets things up: name, email address and password (held by our sign-in provider, never by us in plain text), and the language they read in. Needed to run the account.
- About the person being looked after: the name they like to be called, their timezone and language, their chat-app identity (for example a Telegram chat id) or phone number, their check-in times, the medicines and schedules their family enters or they tell us about, calendar events, and the messages exchanged with the companion — including transcripts of voice notes and what the companion made of a photo or a short video. The audio, image and video files themselves are read once and not kept. Needed to send check-ins and reminders, to answer them, and to tell the family when there is no reply.
- About family contacts: name, relationship, and how to reach them (a chat app or a phone number). Needed to alert the right people, in the right order.
- What the companion remembers: short facts the person shares in conversation — a grandchild's name, a programme they are watching — kept so it does not ask the same question twice. Shown to the family on the Remembered tab, where any of it can be removed at any time.
- Calls with the companion: when the person calls it on a chat app that carries calls, what is said is written down as a transcript and kept like any other message, so the family can see that a call happened and how long it lasted. The audio itself is never stored.
- Usage records: when messages were sent and answered, delivery outcomes, and counts of what the service did. Needed to keep the service reliable and to apply fair-use limits.
Medicines and how they are taken are health-related information, which is sensitive. We hold it only because the family or the person entered it so that reminders can be sent, we use it for nothing else, and the family can remove it at any time.
Where it comes from
From the family member who sets things up, from the person in conversation, and from the chat app or phone network they use (a chat id, an account name, delivery receipts). We do not buy personal information or gather it from other sources.
Why we may use it
We use personal information with consent, to provide the service that was asked for, and — in a limited way — for our legitimate interest in keeping the service secure and reliable, such as rate limits and audit records. Where the law asks us to name a legal basis, as in the European Union and the United Kingdom, those are: consent, performance of our agreement with you, and the legitimate interests described here.
Consent
The family member who sets up the service confirms that the person being looked after has agreed to receive daily messages from it, and that they are authorised to set it up on that person's behalf. We record when that confirmation was given and which version of this page it referred to. Either of them can withdraw it: the person by replying STOP on SMS or by asking their family to remove them, the family member from the dashboard.
Who can see it
- The family members linked to the person, on the dashboard.
- Our support staff, only when needed to run the service or answer a request, under an audit trail that records each time a person's record is opened.
- The service providers that make it work, acting on our instructions under contracts that allow them to use the information only to provide their service to us: a hosting provider (Vercel), a database and sign-in provider (Supabase), a scheduling provider (Inngest), the messaging channel the person uses (Telegram; Meta for WhatsApp and Messenger; Twilio for SMS, where enabled), and a language-model provider (Google Gemini, or another provider we name in the settings) that reads messages to reply to them, transcribes voice notes, and reads photos and short videos.
We do not sell personal information, we do not share it for advertising, and we do not use it to advertise. The language model is given only what a reply needs, and it does not train on your conversations under our agreements with the provider.
Where it is kept
On our providers' servers in the United States (the Oregon region of our hosting and database providers). If you are in Canada, the European Union or the United Kingdom, your information therefore leaves your country. It is protected by the contracts described above and, for the European Union and the United Kingdom, by the standard contractual clauses our providers offer. Authorities in the country where it is held may be able to require access to it under that country's laws.
Automated decisions
Whether to alert the family is decided by fixed rules — a reply within a set time, or none — not by the language model. The language model drafts the companion's replies and reads what was said; it does not decide anything that affects a person's rights, and every change to a medicine or a schedule is read back and confirmed by a person first. Anyone can ask a family member, or us, to review anything the service did.
How long we keep it
Account details for as long as the account exists. Messages and transcripts for up to one year, so the history page can show how things have been going. Remembered facts until the family removes them or they stop coming up. Delivery records for one year, and the audit trail of who opened a record for as long as the account exists. Everything is deleted when the account is deleted, and on request.
Your rights
You can see, correct, export and delete the information we hold about you or the person you look after, take a copy of it with you, object to a use of it, and withdraw consent. Most of this can be done from the dashboard — the Account menu holds Download my data and Delete my account; anything else, ask us using the contact below and we will act within thirty days. We will not treat you differently for exercising a right.
If you are in Canada you may also complain to the Office of the Privacy Commissioner of Canada; in the European Union or the United Kingdom, to your data-protection authority. If you live in California, you have the rights the CCPA gives you, including the right to know, to delete, and to opt out of any sale or sharing — which we do not do.
Security
Data is encrypted in transit and at rest, access is limited by role and recorded, and staff sign in with a second factor. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities the law requires, without undue delay and within the time the law sets.
Cookies
We use only the cookies the service needs: your sign-in session and the language you chose. No advertising or analytics cookies, and no third-party trackers. Our hosting provider counts page views for us without cookies — the page, the country and the browser type, never who you are — so we can see which pages are read.
Children
This service is for adults and is not directed at children under eighteen.
Changes
When this page changes in a way that matters, we will say so on the dashboard and update the version at the top; consent you gave refers to the version you saw.
Contact
Write to Wolfram and Hart at privacy@wolframandhart.ca
We reply within thirty days, usually much sooner.