Privacy Policy
Last updated:November 1, 2026
Data Controller
Jubilae, S.L. (hereinafter “Jubilae”) is the controller of personal data collected through this application and its associated services.
- Registered office: Available on request through support channels.
- Support email: suport@jubilae.app
- Data Protection Officer (DPO): Contact through suport@jubilae.app; designated as the contact point for privacy inquiries and exercising your rights.
Data We Collect
To provide Jubilae services, we collect the following categories of data:
- Identity and contact details of managing family members: name, email address and, where applicable, payment details processed directly by Stripe.
- Older adult's details: name, birth year or date, and any biographical information they or their family choose to share during conversations.
- Voice recordings and transcripts: audio recorded by the older adult through the Senior App and text transcripts generated using speech recognition technology.
- Personal photos and family documents: images and other materials uploaded by family members to create the memory book.
- Book context information: topics, family questions, relevant facts and other data needed to prepare the book draft.
Purposes of Processing
Data is processed for the following purposes:
- AI audio processing: transcribing voice recordings with OpenAI Whisper and generating conversational responses with language models.
- Writing the book draft: preparing, reviewing and narratively structuring family stories.
- Book design and production: designing the final document, generating print files and, if purchased, producing audiobooks.
- Voice cloning (optional): if this extra is purchased, generating a personalized synthetic voice to narrate the audiobook.
- Physical book printing: sending necessary data to the printing partner responsible for manufacturing and delivering the book.
- Account management and support: user administration, payment processing, customer support and incident resolution.
Legal Basis for Processing
The legal basis for processing your data is performance of the service contract established when purchasing Jubilae, together with the explicit consent of the user or responsible family member for specific processing of special data such as voice recordings, personal photos and sensitive biographical information.
At purchase, the family will be transparently informed of the categories of data processed and associated purposes, and must confirm consent before the process begins.
Data Retention
Voice recordings, transcripts and book drafts are securely retained throughout book creation and while the user's account remains active.
The family can request full or partial deletion of their data at any time by emailing suport@jubilae.app. Once the request is verified, we will securely delete the information unless a legal retention obligation applies.
Recipients and Service Providers
To deliver its services, Jubilae may use trusted technology providers with confidentiality and data processing agreements:
- OpenAI: speech-to-text processing (Whisper) and text generation (GPT-4o) for conversations and book creation.
- Supabase: secure database, authentication and file storage in the application's infrastructure.
- Stripe: payment processing with PCI DSS security.
- Printing partner: printing, manufacturing and physical delivery when purchased. The printing partner may vary according to production volume and availability and only receives data strictly necessary to produce and deliver the book.
These providers only access data strictly necessary for their role and may not use it for their own purposes.
User Rights
The user or responsible family member may exercise the following rights regarding personal data:
- Right of access: learn what data we process and how we use it.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure (right to be forgotten): request deletion of data when it is no longer necessary.
- Right to restriction of processing: request that we flag data while a request is being resolved.
- Right to data portability: receive data in a structured, commonly used format.
- Right to object: object to data processing for certain purposes.
To exercise these rights, email suport@jubilae.app with the subject “Exercise of ARCO+ rights”. We will respond within the maximum period established by applicable law.
Two types of conversation with Clara
Book creation conversations (“Tell my life story”): original audio and transcripts are saved to write chapters. The family managing the book can access them through the Family Portal.
Free-form chats (Conversation Mode): audio is deleted once transcribed and neither text nor Clara's replies are saved. Only usage time is retained to count purchased hours. If the person explicitly asks to save a memory, only that excerpt is added to their book.
Help in risk situations (Conversation Mode)
What is detected: AI assesses whether the person expresses serious danger, such as self-harm thoughts, a medical emergency or abuse. Ordinary sadness or tiredness is not considered a risk. This automated assessment can be wrong.
What happens: Clara responds calmly and shows buttons to call the emergency contact and 112. A call only happens if the person taps the button.
What is shared and with whom: Nothing. Jubilae does not automatically notify anyone, send conversations to contacts or professionals, or keep a record of the situation.
How the contact is designated: the subscribing family member provides the emergency contact's name, phone and optional email and can update them in the Family Portal. These details are only used to show the call button.
Limitations: this is not an emergency or monitoring service, does not replace medical or psychological care, and may not detect every situation. In an emergency, call 112 directly.
Information Security
Jubilae applies technical and organizational measures to protect family information:
- Encryption in transit: all communication between the application and servers uses HTTPS/SSL.
- Encryption at rest: stored data and media files use the applicable Supabase security standards.
- Access control: secure authentication, row-level security (RLS) and role-based permissions.
- Ongoing auditing: we regularly review access and providers to ensure privacy measures are followed.
If you have questions about this privacy policy, contact us at suport@jubilae.app.
