Privacy Policy

Effective Date: 4/15/2025

Last Updated: 5/20/2026

‍

Welcome to ABOVE. Your privacy is central to everything we build. This Privacy Policy explains how Above Technologies collects, uses, stores, and protects your personal data through our wearable AI device, mobile app, and website.

By using ABOVE, you agree to the terms of this policy. We are fully committed to complying with GDPR, CCPA/CPRA, and other global privacy frameworks.

‍

Information We Collect

‍

Personal Data

  • Name, email address, and preferences provided during onboarding
  • Communication data (e.g., support requests, feedback)
  • Consent preferences (e.g., email/SMS opt-in, voice analysis)

‍

Voice & Audio Data

  • Audio captured by the ABOVE wearable and recorded by the mobile app (with explicit opt-in)
  • Transcribed and speaker-separated via pyannote.ai
  • Analyzed by Anthropic's Claude to deliver personalized, context-aware insights
  • If you choose "Keep Audio," your original recordings are also stored in encrypted cloud storage
  • We do not store or analyze your voice without your permission.

‍

Biometric Data (Voiceprints)

When you enroll, we generate a voiceprint — a mathematical embedding of your voice used to recognize who is speaking. The original voice sample is handled per your audio settings. We record your consent before creating a voiceprint, and we destroy voiceprints after a period of account inactivity.

‍

Contextual & Analytical Data

  • Transcription-derived insights are converted into vector embeddings and stored in our application database
  • Voice and emotional data are stored securely and treated as sensitive information

‍

Technical & Device Data

  • Device type, OS version, and usage logs
  • IP address and browser/device user-agent, recorded with your sign-in session
  • Bluetooth and microphone access (with consent)
  • Country/region of use (captured at registration for regional compliance)

‍

Organizational / Workplace Data

If you use ABOVE through an organization (an employer or enterprise pilot), your meeting recordings, transcripts, and related insights are owned by that organization. Organization administrators and members may be able to access this content. Contacts and voiceprints within an organization may be managed by its administrators.

‍

How We Use Your Data

‍

We use data to:

  • Provide personalized guidance, summaries, and emotional insight
  • Train and optimize our AI systems (only with anonymized or user-consented data)
  • Sync wearable and app data securely
  • Offer contextual features (e.g., memory-based feedback, voice tone reflection)
  • Support customer service and technical assistance
  • Improve system performance and experience (using aggregated, anonymized data only)

‍

User Rights & Controls

‍

We honor all user data rights under GDPR and CCPA, including:

  • Right to access: View what data we've collected
  • Right to correct: Update or fix personal info
  • Right to delete: Permanently delete your data or account (see "How Your Data Is Stored and Protected" for the deletion timeline and exceptions)
  • Right to opt out: Disable analytics, voice features, or marketing communications
  • Right to portability: Request and download your data
  • Right to withdraw consent at any time

‍

You can manage your data and permissions directly in the ABOVE app or email team@goabove.ai to submit a Data Subject Access Request (DSAR).

‍

Consent Management

‍

  • A cookie consent banner is live on our website, allowing users to opt in or out of non-essential cookies
  • Voice transcription and analysis only occur after explicit opt-in, with clear in-app explanations
  • Email updates are opt-in only, and users can unsubscribe at any time

‍

How Your Data Is Stored and Protected

‍

  • All data is encrypted in transit and at rest, across our cloud database (Neon Postgres) and audio storage (AWS S3)
  • We treat voice and emotional data as highly sensitive and store them in secure environments
  • We follow role-based access control, SSL encryption, and regular security audits
  • Data retention: We retain user data only while accounts are active. When you delete your account, deletion is confirmed via an email link and then processed. Most data is erased shortly afterward. Some residual copies persist briefly with our processors (for example, audio with pyannote.ai for up to ~48 hours and transcripts with Anthropic for up to ~30 days) before automatic deletion. A minimal record of biometric-consent history is retained where required for legal compliance. Recordings owned by an organization are retained by that organization and are not deleted by an individual account deletion.

‍

‍

Third-Party Services

‍

We work with a select group of trusted third-party services to power and enhance the ABOVE experience. All vendors we work with are bound to handle your data only as needed to only access your data when necessary to perform their specific functions:

  • pyannote.ai — transcribes and speaker-separates your audio. Receives raw audio recordings and voiceprint data.
  • Anthropic (Claude) — generates summaries, reflections, and insights from your transcripts. Receives transcript text; does not receive raw audio.
  • OpenAI — used as a fallback and for generating search embeddings. Receives transcript-derived text; does not receive raw audio.
  • Neon — hosts our cloud database, where account data, transcripts, and insights are stored.
  • Inngest — orchestrates the background jobs that process your recordings.
  • Sentry — error and performance monitoring; may receive technical context (including IP address) when an error occurs.
  • PostHog — product analytics; collects usage events and can be disabled.
  • Stripe — payment processing for subscriptions.
  • Shopify — order processing for hardware purchases.
  • Resend — delivery of transactional and account emails.

‍

We do not allow these services to use your data for advertising, model training or any external purposes beyond the functions listed above.

‍

App Permissions (Mobile)

‍

Android

Includes Bluetooth, microphone, storage, foreground/background services, and network access (for syncing and functionality).

‍

iOS

Permissions include microphone, Bluetooth, and notifications

All permissions are only activated with consent and are used strictly to enable features you opt into.

‍

Changes to This Policy

‍

We may update this policy as our services evolve. If changes are material, we will notify you via email or in-app alerts and update the effective date above.

‍

Contact Us

‍

If you have any questions about this policy or how your data is handled, contact us anytime at team@goabove.ai.