Effective Date: May 15, 2026
https://www.evoca-labs.com (the “Site”) is owned and operated by Evoca Labs LLC. Evoca Labs LLC can be contacted at:
info@evoca-labs.com
(708) 252-3227
401 William St. #5092, River Forest, IL, 60305
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:
This Privacy Policy applies in addition to the terms and conditions of our Site.
By using our Site users agree that they consent to:
In connection with the safety features of our service, we may send SMS text messages to a designated caregiver's phone number that you provide in our admin portal.
Daily check-in summaries to designated family members or caregivers are sent only via email, not SMS.
When you provide a caregiver's phone number or email address in our admin portal, you attest that you have authorization from that person to provide their contact information and that they consent to receive the messages described above. The caregiver's separate confirmation through the double opt-in process is the operative consent for SMS delivery.
We collect data that helps us achieve the purpose set out in this Privacy Policy.
When you, a designated family member, or a designated caregiver use our admin portal, we collect:
When you designate a caregiver, we collect that person's name, phone number, and email address so that we can deliver the caregiver notifications described in the Communications and SMS Notifications section.
Our admin portal lets the user, a designated family member, or a designated caregiver enter information the user wants the assistant to recall by voice later. This may include:
We do not require any specific item of user-provided content. Whatever is entered is stored so that the user can ask for it back later through the voice assistant.
Please do not enter government identification numbers such as Social Security numbers, driver's license numbers, or passport numbers. We do not request this information and do not need it to provide our service.
When you use our voice assistant, audio of your speech is processed in real time to operate the assistant. Most audio is not retained. Audio you record as part of the family-tree feature (for example, recorded stories) is stored so the feature can function. Transcripts of your conversations are stored — see “How Long We Store Personal Data” below.
Transcripts and other interaction data are used to deliver and improve the service and, where applicable, to perform safety analysis.
All of the data described above is collected directly from the user, from a designated family member, or from a designated caregiver. We do not collect personal data from third-party sources.
Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.
Specifically, we use personal data for the following purposes:
When you connect your Google account, Evoca requests access to events on Google Calendars you own, using the calendar.events.owned scope. We use this access solely to let you list, create, update, and delete your own calendar events through voice commands.
We do not store Google Calendar data as structured calendar records, and we do not retain the responses returned by the Google Calendar API. Because our service stores transcripts of your voice interactions, those transcripts may include calendar-related details that you spoke or that the assistant spoke back to you (for example, an appointment you asked to create). Transcripts are retained as described in “How Long We Store Personal Data.”
We do not use Google Calendar data for advertising, and we do not sell it or transfer it to third parties except as needed to provide this feature or as required by law.
Evoca Labs' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke Evoca's access to your Google account at any time through your Google account permissions at https://myaccount.google.com/permissions, and you can request deletion of stored data by contacting our privacy officer.
We use the following third-party service providers to operate our service. Each operates under their own privacy and security policies. We share only the personal data necessary for each service provider to perform its function on our behalf.
We may add, change, or remove service providers from time to time and will update this Privacy Policy when we do.
We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
When you designate a caregiver in our admin portal, the safety alert messages and digest emails described in the Communications and SMS Notifications section are sent to the caregiver's contact information you provide.
We share personal data with the third-party service providers listed in the Service Providers section above as necessary to operate our service.
We will not sell or share your data with any other third parties, except in the following cases:
Google user data accessed under the Google API Services User Data Policy is not transferred to third parties except as that policy permits, including its restrictions on transfer to a buyer.
If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.
Evoca's voice AI assistant is designed for senior citizens and may be used in connection with medical record management, medication tracking, appointment information, and similar healthcare-related tasks. While our service may store and process information that constitutes Protected Health Information (PHI) under the U.S. Health Insurance Portability and Accountability Act (HIPAA), Evoca is currently in an invite-only beta period and is not yet operating under a HIPAA Business Associate Agreement (BAA). HIPAA-grade compliance is a goal we are actively working toward as we approach general availability.
Our service is not a medical device and is not a substitute for professional medical advice, diagnosis, or treatment. The safety detection features identify observable conversational signals so that a designated caregiver can check in; they do not constitute clinical diagnosis. If you or someone in your care is experiencing a medical or psychiatric emergency, please call 911 or your local emergency number.
We retain personal data — including profile information, stored family-tree audio recordings, and conversation transcripts — until you delete it or close your account, after which it is deleted. You can request deletion of your data at any time by contacting our privacy officer.
In order to protect your security, we use the strongest available browser encryption and store all of our data on servers in secure facilities. Data in transit is encrypted using industry-standard TLS. All data is only accessible to our employees and our service providers as described in this Privacy Policy. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination and likely prosecution.
While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.
We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13 years of age, the personal data will be deleted as soon as possible. If a child under 13 years of age has provided us with personal data their parent or guardian may contact our privacy officer.
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, or if you would like your data to be deleted or modified in any way, please contact our privacy officer here:
James Murphy
jmurphy@evoca-labs.com
(708) 252-3227
401 William St. #5092, River Forest, IL, 60305
Do Not Track (“DNT”) is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals.
This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the “Effective Date” at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.
If you have any questions, concerns or complaints, you can contact our privacy officer, James Murphy, at:
jmurphy@evoca-labs.com
(708) 252-3227
401 William St. #5092, River Forest, IL, 60305
Website: https://www.evoca-labs.com
This Privacy Notice supplements the https://www.evoca-labs.com Privacy Policy and applies solely to California consumers who visit https://www.evoca-labs.com. Any terms defined in the California Consumer Privacy Act of 2018 (“CCPA”) have the same meaning when used in this Privacy Notice.
We have collected the following categories of personal information about consumers in the past twelve (12) months:
We do not request or knowingly collect Social Security numbers, driver's license or state identification card numbers, passport numbers, financial account numbers, geolocation data, or professional or employment-related information.
We collect the categories of personal information listed above from the following categories of sources:
We may use or disclose personal information for one or more of the following business purposes: We allow the user to personalize their AI experiences by inputting documents and information about themselves. We also use personal information to detect concerning safety signals in user conversations and to route alert notifications to designated caregivers as described in the Communications and SMS Notifications section above.
We share personal information with the third-party service providers listed in the Service Providers section above as necessary to operate our service. We do not otherwise disclose consumer personal information.
We have not sold consumer personal information in the past twelve (12) months.
The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how you can exercise those rights.
You have the right to request that https://www.evoca-labs.com disclose to you certain information about our collection and use of your personal information in the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we have received and confirmed your verifiable consumer request, we will delete, and direct any of our service providers to delete, your personal information from our records, unless an exception applies.
To exercise your access and deletion rights described above, please submit a verifiable consumer request to us at:
info@evoca-labs.com
You have the right to not be discriminated against in pricing and services because you exercise any of your CCPA rights. Unless permitted by the CCPA, we will not use whether or not you have exercised your CCPA rights to deny you goods or services, charge you different prices, provide different levels of service, or suggest different pricing.
We may amend this Privacy Notice from time to time to maintain compliance with the law and to reflect any changes to our data collection process. We recommend you check this Privacy Notice from time to time to ensure you are aware of any changes. If necessary, we may notify you by email of changes to this Privacy Notice.
If you have any questions or concerns, you can contact us at:
Evoca Labs LLC
(708) 252-3227
info@evoca-labs.com
401 William St. #5092, River Forest, IL, 60305