Last updated: May 2026
Effective date: May 2026
Operator: Elsy Labs Pte. Ltd., Singapore · Contact: hello@helloelsy.com
Elsy is an AI voice companion for elderly users and their caregivers, operated by Elsy Labs Pte. Ltd. ("we," "us," or "Elsy"). This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have.
We are committed to complying with Singapore's Personal Data Protection Act 2012 (PDPA) and to handling your data with the care and transparency that a service for elderly and vulnerable users demands.
Elsy is a wellness and companionship tool. It is not a healthcare provider, medical device, or diagnostic tool. Nothing in Elsy's output should be treated as medical advice or a clinical assessment.
When you sign up as a caregiver or are invited as a member, we collect your email address, name, timezone, language preference, and your role within a Care Circle (admin or member).
If a caregiver invites you, we also record which Care Circle you belong to, who invited you, and whether consent was provided by you directly or on your behalf by your caregiver.
When you talk to Elsy, your voice is streamed in real time to an AI system that generates spoken responses. As part of this process, your speech is transcribed into text. We store these text transcripts to provide continuity across conversations, extract reminders, build your personal knowledge base, and generate wellbeing insights for your caregiver.
We also store an audio recording (MP3) of each completed conversation in our secure cloud storage, alongside the transcript. We keep these recordings so that we can investigate quality issues, verify that transcription is accurate, debug problems you report, and improve the Elsy service. Audio recordings are stored in a private storage bucket, are not publicly accessible, and are protected by the same encryption and access controls as the rest of your data (see Section 8).
From your conversations, Elsy automatically extracts personal facts (such as family members' names, hobbies, preferences, and routines), reminders you mention, and topics of interest. This extracted information is stored separately from your transcripts and is used to make future conversations more personal and relevant.
Caregivers can also add background context about you — such as your daily routine, interests, important people in your life, and topics to approach sensitively. This information helps Elsy have better conversations with you but is not visible to you within the app.
Elsy periodically analyzes your conversation transcripts using AI to generate wellbeing assessments. These assessments include estimated mood levels, confusion indicators, and conversational repetition patterns, each scored on a simple scale. These are pattern-based estimates, not clinical measurements.
If certain patterns suggesting potential safety concerns (such as references to falls, distress, or emergencies) are detected during a conversation, an alert is created for your caregiver.
Elsy extracts and stores reminders from your conversations (such as appointments and tasks). Caregivers can also add medications and reminders directly. We store medication names, dosages, schedules, and reminder details. Reminders and medication alerts may be delivered via push notification or email depending on your settings.
We collect basic usage data such as when you last had a conversation, session duration, and app interaction patterns. We collect push notification tokens for delivering notifications. We do not track your location, and we do not use cookies for advertising or tracking purposes.
We use your personal data for the following purposes:
Providing the Elsy service: Processing your voice conversations, generating AI responses, maintaining conversation continuity, extracting and delivering reminders, and building your personal knowledge base.
Wellbeing insights for caregivers: Generating aggregated wellbeing summaries for your designated caregiver. These summaries include mood trends, engagement levels, topics of interest, and potential concerns. Summaries reflect general patterns and themes. They do not include word-for-word quotes from your conversations. Caregivers do not have access to your full conversation transcripts or voice recordings.
Safety alerts: Detecting potential safety concerns in conversations and notifying your caregiver if concerning patterns are identified.
Communications: Sending you reminders, daily digest emails, and service-related notifications via email or push notifications based on your preferences.
Service improvement and engineering: Members of Elsy's technical team — bound by confidentiality obligations — may access your conversation transcripts and audio recordings to investigate bugs, diagnose issues you or your caregiver report, improve AI response quality, and develop new product features. Access is limited to the engineers who need it to operate and improve the service, and is logged at the database level.
We do not use your personal data for advertising. We do not sell your personal data to third parties. We do not use your data to train general-purpose AI models — your data is used only to improve Elsy's service for you and other Elsy users.
This section is important because Elsy operates in a space where the person having conversations (the member) and the person receiving insights (the caregiver) are different people.
What caregivers receive:
What caregivers do NOT receive:
This boundary is enforced by our system architecture, not merely by policy.
Important disclaimer: Wellbeing summaries are generated by AI based on conversation text analysis. They are not medical assessments, clinical evaluations, or diagnostic tools. They may contain errors, misinterpretations, or inaccuracies. Caregivers should always verify a member's wellbeing through direct personal contact and should never rely solely on Elsy's assessments for care decisions.
To operate Elsy, we use the following third-party services that process your data on our behalf:
All third-party providers are bound by their respective data processing terms and are used solely to deliver the Elsy service. We do not share your data with any third party for their own commercial purposes.
If you are a member of a Care Circle, your designated caregiver receives wellbeing summaries and safety alerts as described in Section 4. They do not receive your conversation transcripts or voice recordings.
We do not sell, rent, license, or otherwise share your personal data with advertisers, data brokers, pharmaceutical companies, research institutions, or any other third parties. If this ever changes in the future, we will seek your explicit, separate consent before any such sharing occurs.
Elsy is operated from Singapore, but several of our third-party service providers are based in or process data in the United States and other jurisdictions. This means your personal data — including conversation transcripts — may be transferred to and processed in countries outside Singapore.
We take steps to ensure that these transfers are protected by appropriate contractual safeguards and that the receiving parties maintain standards of data protection comparable to those required under Singapore's PDPA. Where applicable, we rely on the service providers' data processing agreements and standard contractual commitments.
Conversation transcripts and audio recordings: Retained for as long as your account is active. Transcripts allow Elsy to maintain continuity across conversations and provide personalized interactions over time. Audio recordings allow us to investigate quality issues and improve the service. When your account is deleted, your transcripts and audio recordings are deleted.
Extracted context (facts, reminders, preferences): Retained for as long as your account is active so that Elsy can stay personal over time. Deleted when your account is deleted.
Wellbeing data: Retained for as long as your account is active to allow caregivers to view trends over time.
Account information: Retained for as long as you maintain an account with Elsy. If your account is inactive for more than 12 months, we may contact you or your caregiver before deleting the account and associated data.
Reminders and medications: Active reminders are retained until completed or deleted. Completed reminders are retained for reference for as long as your account is active.
You or your caregiver can request deletion of your data at any time on our delete account page. Upon receiving a verified deletion request, we will delete your personal data within 30 days, except where we are required by law to retain it (for example, billing records held for tax compliance).
We implement reasonable security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These include:
No system is perfectly secure. While we take data protection seriously, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in significant harm, we will notify affected users and the Personal Data Protection Commission (PDPC) as required by the PDPA.
When you first use Elsy, you are presented with a consent agreement that explains what data is collected and how it is used. You must accept the Terms of Service and this Privacy Policy before you can proceed.
Elsy is designed for elderly users, some of whom may have cognitive conditions that affect their ability to understand and consent to data processing. When a caregiver sets up a patient account, they are asked to confirm that they have the authority to consent on that person's behalf — for example, as a holder of a Lasting Power of Attorney, a court-appointed deputy, or as next-of-kin acting in the person's best interest.
You may withdraw your consent to Elsy's data processing at any time by contacting us at hello@helloelsy.com or by requesting your caregiver to delete your account. Withdrawing consent means we will stop processing your data, but it does not affect the lawfulness of processing carried out before the withdrawal.
Under Singapore's Personal Data Protection Act, you have the right to:
To exercise any of these rights, contact our Data Protection Officer at the details below.
Elsy is not designed for or directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child's data has been collected through Elsy, please contact us immediately and we will delete it.
During conversations with Elsy, members may mention other people — family members, friends, neighbors, healthcare providers — by name or with identifying details. This incidental third-party data is captured in conversation transcripts and may be reflected in extracted context or wellbeing summaries.
We treat incidental third-party data with the same protections as member data. It is not shared beyond the member's Care Circle, not used for any purpose other than providing the Elsy service, and is deleted when the member's account is deleted.
To set clear expectations:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify users through the app or via email before the changes take effect.
We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 is configured with Google Consent Mode v2, which means:
_ga, _ga_*.You can change your cookie preference at any time using the link, or by clearing your browser cookies and reloading the page.
Our Data Protection Officer can be contacted for any privacy-related questions, concerns, or requests:
Email: hello@helloelsy.com
Entity: Elsy Labs Pte. Ltd.
Location: Singapore
If you are not satisfied with our response to a privacy concern, you may contact the Personal Data Protection Commission (PDPC) of Singapore at https://www.pdpc.gov.sg.
© 2026 Elsy Labs Pte. Ltd. All rights reserved.