Last updated October 1, 2026 · Companion to the Privacy Policy
Two promises first. Senarra never sells your memories, and never uses them to train AI, ours or anyone else's. We make money from memberships and nothing else. Everything below exists to keep those two promises while still doing the work you asked for: turning a recording into text you can search, and a voice you can hear again.
This page lists every outside service your data can reach, what each one receives, and why. It is written to be read, not to be skimmed past. If anything here is unclear, write to privacy@senarra.app and a founder will answer.
Who touches what
Nothing leaves Senarra unless a feature you use needs it. A recording you upload is sent to a transcription service because you asked for a transcript; it is not sent to a voice service unless you build a Voice Profile.
Always on
- Google Cloud / Firebase — where your account, memories, recordings, photos and video are stored, and where Senarra's own code runs. Receives everything. Senarra's servers are in the United States.
- OpenAI — turns your audio and video into text so memories are searchable, writes the summaries, translates between languages, and answers when you Ask Senarra. Receives the recording being transcribed, and the memory text and questions involved in a chat. Sent under OpenAI's API terms, which do not permit training on your data.
- AssemblyAI — transcribes longer recordings and ones with several people speaking. Receives that audio only. Not used for training.
Only if you turn it on
- Fish Audio — builds a Voice Profile from a sample you record, and speaks memory text in that voice. Receives the voice sample and the words to be spoken. Not used for training. Only after you complete the consent step in the app (see below).
- ElevenLabs — the same job, for Voice Profiles made before Senarra moved to Fish Audio in 2026. Not used for training.
- Hedra — makes an Animated Video Story from a photo plus synthesized voice, on memberships that include it. Receives that photo and audio.
- Twilio — runs the Call Senarra phone line. Receives the caller's phone number and the call audio, and keeps a recording only when the caller agreed to it at the start of the call and you have turned recordings on.
- Daily — carries in-app video calls, and records one only when you choose to save it as a memory.
- Apify — fetches the public social-media post you paste in when you import a memory from Instagram, Facebook or TikTok. Receives that public link only.
- Google Drive — only if you connect it, to keep a backup of your archive. Senarra asks for the narrowest permission Google offers and can only see files it created.
Running the business
- Apple, Google Play, Stripe, RevenueCat — take payment and track which membership you have. They see your purchase, never your memories.
- SendGrid — sends the emails Senarra needs to send you. Receives your email address and the message.
- Expo — delivers push notifications. Receives a device token and the notification text.
- Prodigi — prints and ships Memory Books. Receives the print file of the book you approved (the stories, photos and names in it) and the delivery name, address, email address and phone number for that order. One of the founders looks at that print file first, to catch printing problems.
- Sentry — tells us when the app crashes. Receives technical details about the crash and your device, not the content of your memories.
Services we have stopped using are removed from the app's code, not just switched off. Should we ever add a service, this page and the Privacy Policy change first.
Encryption
Everything moves between your phone and Senarra, and between Senarra and the services above, over TLS. Everything stored on Google Cloud is encrypted at rest by Google's default encryption. Senarra staff do not browse your memories; access to production data is limited to the two founders and used only to fix a problem you have reported, or to check the print file of a book you have ordered before it is printed.
How long things are kept
- While your account exists: indefinitely. Stopping a paid membership never deletes anything; your archive stays viewable and exportable on the free membership.
- After you delete something: it leaves our live systems immediately. Database backups are kept for 7 days and file-storage backups for 30 days, then it is gone from those too.
- Export files: the archive Senarra builds for you to download is deleted after 1 day.
- Voice Profiles: deleted from the voice service when you delete the loved one, delete your account, or delete the voice itself.
Voice Profiles need consent
Before Senarra builds a voice for a living person, the app shows a consent statement in full, asks for that person's full name as written on their permission, and requires you to confirm it. The time, the statement you saw and the network address are recorded with the profile. For someone who has passed, you confirm that you have the standing to make that choice for them. You can revoke consent at any time from the Voice screen, which stops Senarra speaking in that voice immediately.
Record their real voice now. Your recordings can become a Voice Profile later — with their consent.
How to export
Profile → Export & Back Up. One tap builds a folder with every recording, photo, video and transcript in ordinary formats that open on any computer, plus an offline viewer, and hands it to your phone's share sheet or Google Drive. Available on every membership, including free.
How to delete
Delete a memory, a loved one, or your whole account from inside the app. Account deletion removes your files from storage, your Voice Profiles from Fish Audio and ElevenLabs, and your record from the payment services. Hedra offers no deletion API, so we ask them to remove any video material by support request. Full detail, including what to do if you no longer have the app: data deletion.
If the account holder dies
Write to support@senarra.app. A founder will work with the family directly.
See also: Privacy Policy · Ethics and commitments · Data deletion