Privacy Policy
What we hold, and for how long
Della sits on a phone line belonging to someone who did not choose the software. That asymmetry is the reason this policy is specific about what is collected and short about everything else.
Who is who
Two people matter in this policy, and they have different rights. You are the family member who set Della up and pays for her. Your parent is the person whose line is protected — the calls, the recordings and the contacts are about them, not about you.
We treat your parent’s data as theirs. If they ask us to stop, we stop, whoever is paying.
What we collect
From you
- Your name, email address and phone number.
- How you want to be reached — which alerts go by text, which by email.
- Billing details, held by Stripe. We never see or store your card number.
- A log of the actions you take in the dashboard, so there is a record of who changed what.
About your parent’s line
- Their name, phone number, carrier and time zone, and the Della number that answers for them.
- The Trusted Circle — the names and numbers you imported, and whether each one rings straight through.
- Your family’s code word, encrypted. Described in recording and consent.
- Their settings: sensitivity, quiet hours, availability.
From each screened call
- The caller’s number, the time, and how long the call lasted.
- The recording and a transcript of what was said.
- Della’s decision — put through, message taken, turned away or blocked — with the scam pattern she matched and how suspicious she found it, sentence by sentence.
- Any correction you make afterwards. Those corrections are how she learns, and they also become test cases that stop the same mistake recurring for other families.
Who processes it
Della is not one system. A call passes through several vendors in the seconds it takes to answer, and each of them sees a slice:
| Vendor | What it does | What it sees |
|---|---|---|
| Twilio | Carries the call and sends your text alerts | Phone numbers, call audio, alert contents |
| Deepgram | Turns speech into text as the call happens | Call audio |
| Cartesia | Gives Della her voice | The words Della is about to say |
| A large language model provider | Decides what Della says next and how suspicious a caller is | The transcript so far. Never the code word, never your billing details. |
| Stripe | Takes payment | Your billing details. No call data. |
| Resend | Sends the weekly note and account email | Your email address and the contents of those emails |
| Amazon Web Services | Stores recordings, transcripts and the database | Everything above, encrypted at rest |
| Sentry, PostHog | Error reports and product analytics | Technical diagnostics and which screens get used. No recordings, no transcripts, no code word. |
Each is bound by contract to process this only on our instructions. We do not sell your data or your parent’s, and we do not share it for anyone else’s advertising.
How long we keep it
- Recordings and transcripts: ninety days by default. Change it to thirty or to a year in your account, or delete any single call immediately.
- Call decisions and the weekly note: kept while your account is open, so the history stays readable.
- Everything, on cancellation: hard-deleted within thirty days, including the stored audio.
- Billing records: retained by Stripe as long as tax law requires.
How it is protected
- Recordings are encrypted where they are stored.
- Links to play audio expire within fifteen minutes, so a copied URL stops working almost immediately.
- The code word is encrypted separately, excluded from logs and analytics, and never sent to a language model.
- Every action you take, and every time our staff access an account, is written to an audit log.
We are a young company and we will not pretend to hold certifications we have not been through. What we can tell you is how the system is built, which is what this page does.
Your choices
Whatever state you live in, you can:
- See everything we hold about you and your parent’s line.
- Get a copy of it in a portable format.
- Correct anything wrong.
- Delete individual recordings, or the whole account and everything in it.
- Turn off texts by replying STOP, and email in your settings.
- Switch Della off entirely — one code dialled on your parent’s phone puts her line back exactly as it was.
Most of these are buttons in your account. For anything that isn’t, email privacy@della.family and we’ll answer within thirty days. We will not charge you for asking, and we will not treat you differently for having asked.
If your parent wants any of this themselves, they can email us directly. We’ll verify who they are and act on it — they do not need to go through you.
Do not sell or share my personal information
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Not to data brokers, not to advertisers, not to anyone. There is no opt-out to submit here, because there is nothing to opt out of.
That is a description of how the business works, not a promise we could quietly change. If it ever changed we would have to update this page and tell you before it took effect.
We also honour Global Privacy Control signals from your browser, even though for us they change nothing.
Children
Della is for adults protecting adults. We don’t knowingly collect anything about children. If a child’s number ends up in a Trusted Circle because they call their grandmother, it is treated the same as any other contact — a name and a number, nothing more.
Changes
If we change this policy in a way that affects what we collect or who sees it, we’ll email you before it takes effect. The date at the top of this page always reflects the current version.
Questions, or a request about your data? Write to privacy@della.family and we will answer within thirty days.
Back to Della