Privacy Policy
Last updated: August 16, 2026
Vitalore keeps your family's memories, and that obliges us to treat them with more care than any other data. This policy explains, without fine print, what we keep, why, with whom, and what you can do about it.
Who is responsible
The data controller is Jorge Bravo Córdoba (Barcelona, Spain), owner of Vitalore. For any privacy matter: contact@vitalore.app.
What data we keep
- Your account (organizer): email and password. The password is stored hashed — never in plain text, and nobody at Vitalore can see it.
- The story: the narrator's name, your relationship to them (for example "your grandmother" or "my aunt Carmen"), and the language.
- The memories: the voice recordings the narrator makes, their transcripts, and the biography generated from them.
- Mail: the emails you write to vitalore.app addresses.
The narrator does not need an account: they access through a private link that only your family has. We don't ask them for an email, a phone number, or anything else — only their voice and whatever they choose to tell.
What we use it for
Only to provide the service: storing the audio, transcribing it, writing the book, and showing it to you. The legal basis is the performance of our contract with you (art. 6.1.b GDPR). Transactional emails (account verification, password recovery) are part of the service itself.
We don't sell data, we don't advertise, and we don't use your family's memories for anything else.
The providers we work with
To operate we use third-party services acting as data processors, under data-processing agreements (DPAs) and, where transfers leave the EEA, standard contractual clauses or the Data Privacy Framework:
| Provider | What it does |
|---|---|
| Railway | Hosts the application and the database. |
| Cloudflare (R2) | Stores the audio files. |
| OpenAI (Whisper) | Transcribes the audio to text. |
| Anthropic (Claude) | Writes the biography and the follow-up questions from the transcripts. |
| Resend | Sends and receives our email. |
Audio is sent to OpenAI only to be transcribed, and transcripts to Anthropic only to write the book. Both services are used via API, whose terms do not allow your data to be used to train their models.
Cookies
This website uses no tracking cookies or analytics. The application (portal.vitalore.app) stores in your browser only the technical data strictly needed to keep you signed in.
How long we keep it
For as long as your account exists. You can delete any answer from your panel whenever you want, and if you ask us to delete your account we erase the whole story: audio, transcripts, and biography.
Your rights
You can delete your account and all its content yourself, at any time, from Your account in the portal: your stories, their recordings, transcripts, books, and photos are erased, with no undo (download the memory box first if you want to keep them). We only keep an anonymous statistical summary of each deleted story — numbers such as how many answers it had or which language it was in, with no names, no text, and no identifiers: it cannot lead back to you or your family. You can also exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to contact@vitalore.app. We reply within one month at most. If you believe we're not handling your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
Changes to this policy
If we change anything relevant, we'll publish it here and update the date above. We will never reduce the protection of memories already kept without telling you.