Privacy

Sydney, in one database.

Stories, transcripts and the record of each sitting are stored in a Supabase Postgres database in the Sydney region. That is deliberate: life-story material carries health information, and it should sit under Australian law.

The conversation itself runs on an overseas voice service, which is where the recording is made and where it stays: the audio is held by that provider, outside Australia, and it is not copied into the Sydney database. What lands in Sydney is the transcript of what was said, together with the record of the sitting. The person being interviewed hears the same thing at the start of their first sitting, before anything is recorded.

Turning the transcript into readable prose is done by a language model run by Anthropic, in the United States. The transcript of a sitting is sent there for that editing step; the audio never is. That is the third and last place any of this material goes.

Never sold, never used to train a model.

Recordings and transcripts are never sold, and never used to train a voice model or a language model. What I read while editing is the transcript as it was spoken, names and all — nothing here strips it first — and what I learn from that work shapes how the interviewer and the book-making improve over time. No part of a family’s material goes anywhere beyond the three named above.

The person talking decides.

If something comes up that they would rather leave alone, the interviewer moves on. They can decline a subject, or ask at any point and without giving a reason for anything already said to be left out of the book. This is a record of what someone chose to say.

To have something left out, or to ask what is held, write to hello@haveitoldyou.app. I handle these myself. Tell me whose material it is and which part, and I will take it out of the book and out of anything made from it, and confirm when that is done. Being straight about what that does and does not touch: the words stay in the record of the sitting, and the recording stays with the voice service where it was made. What changes is that they are no longer part of what your family is given.

There are none.

There is no login, no password and no account to maintain, for you or for the person being interviewed. A sitting opens from a private link and nothing else. What you receive is plain files you keep.

One thing does run on the site itself: anonymous page-performance measurement, which records how quickly pages load and is not tied to a person or an account.

An advertising pixel, on the three selling pages only.

The home page, the reserve-a-place page and the page about recording your own life carry a Meta (Facebook) advertising pixel. It reports that a page was viewed, that someone left an email address, and that someone followed the link to reserve a place, so I can tell what it costs me to find a family against what this sells for. It is on those three and nowhere else on the site. If your browser blocks scripts, the confirmation you get back after sending the form reports that same one thing, that a form was sent, using an image rather than a script, because otherwise your sending it would go uncounted while your visit did not.

It is deliberately absent from the sitting itself. The private link a person opens to talk carries no advertising tracking of any kind. Nothing about their session, their device or their presence is reported to an advertising platform. That is not a setting I flipped. The pixel is written into each of them individually instead of into the shared layout, so it cannot reach the sitting by inheritance.

The pixel does what Meta’s pixel does elsewhere: it sets its own cookies and can recognise a browser it has seen on another site. Blocking it in your browser costs you nothing here. Every page, and the form, work the same way with it blocked.

Kept so I can write to you, and nothing more.

The form on each of them stores your email address, your first name if you give it, which page you sent it from, whether booking was open at the time, and when you sent it. That is the whole record. It is kept so I can write to you when a place opens. It is never sold and never passed on, and there is no newsletter behind it.

To come off that list, or to ask what is stored against your address, write to hello@haveitoldyou.app and I will remove it and confirm.