Sage Companion LLC ("we," "us," or "Company") operates Sage for Home (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard the information of adults who use the Service to coordinate their household.
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service. We may update this policy from time to time; material changes will be communicated by email or in-app notice.
When you create an account we collect:
Adults may enter information about their own minor children — such as names, ages, school names, activity schedules, and allergy or dietary notes — under the parent's account. This data is entered by and belongs to the adult account holder. Children do not have accounts and cannot log in.
Data you create while using the Service, including:
When an adult chooses to use the microphone, the Service temporarily receives microphone audio and sends it to OpenAI to create a text transcript. Our application server holds the audio in memory only while it validates and completes that transcription request; Sage does not intentionally save the source microphone audio as a household record after the request finishes. The resulting transcript is handled like text the adult typed and may be included in AI conversation history when submitted to Sage. When spoken replies are enabled, the text of Sage's response is also sent to OpenAI to generate speech.
OpenAI's published API data controls currently list no application-state or abuse-monitoring retention for
the /v1/audio/transcriptions endpoint. OpenAI may process other API requests under the retention
terms applicable to those endpoints. We review processor terms and update this policy when our practices change.
You may voluntarily store reference information in the Family Binder and Family Wallet, including allergy notes, medication names, doctor contact details, insurance card images, and ID card images. This data is stored for your organizational reference only; we do not analyze or act on it medically.
If you choose to connect a bank or financial account, we use Plaid Inc. to establish that connection. You enter your online-banking credentials directly into Plaid's secure interface — those credentials are never transmitted to or stored on our systems. From Plaid we receive an encrypted access token, account details, balances, and transactions needed to power the financial features you use. The token is encrypted at rest (AES-256-GCM), is never written to our logs, and is used only by our server. Bank-derived data is available to authenticated adult members of your household after they verify with a passkey or authenticator app; only the household owner can connect, reconnect, sync, or disconnect a bank. Disconnecting revokes the Plaid connection and permanently deletes imported accounts, balance snapshots, and transactions from Sage's active systems. Account deletion does the same before erasing the household. Plaid's own handling of your data is governed by the Plaid End User Privacy Policy.
When you have accepted cookies, we collect analytics data via Google Analytics 4, including pages visited, features used, session duration, device and browser type, and approximate location (country/region level). This data is aggregated and used solely to improve the Service. See Section 4 for details.
We never sell your data. We do not share your personal or household information with advertisers, data brokers, or any third party for their independent marketing or commercial purposes.
AI processing is optional and the choice is saved separately for each adult account. Before an AI feature sends data to Anthropic or OpenAI, the Service names both processors and describes the applicable data, such as messages and household context, microphone audio submitted for transcription, Sage reply text submitted for spoken output, or an image and related context used by an AI feature. You may choose Accept or Not now. The server blocks covered AI routes unless that adult's consent is on; choosing Not now does not disable calendars, groceries, reminders, budgets, or other non-AI tools.
You can withdraw this consent under Settings > Account & privacy > AI data sharing. Withdrawal stops future submissions to Anthropic and OpenAI through covered AI features. It does not by itself delete prior conversation or household records; use the conversation controls or account deletion described below for stored data.
A Report action is available on Sage-generated responses. If you submit a report, we store the response, your selected category (unsafe or offensive, inaccurate, privacy, or other), any optional details, and identifiers that bind the report to your adult account and household. We use reports to review safety, privacy, and quality concerns. Other households cannot use a response identifier to access or report your conversation.
We share data only with the following sub-processors that help us deliver the Service. Each processor handles your data according to their own terms and privacy policies.
| Processor | Purpose | Data Shared |
|---|---|---|
| Anthropic | AI assistant (Sage) — chat and reasoning | Conversation messages; household context you have entered (children's names, preferences, schedules, binder notes) |
| OpenAI | Optional voice transcription and text-to-speech output | Microphone audio submitted by an adult; text of Sage's responses used to create speech |
| Stripe | Subscription billing and payment processing | Name, email, billing details; no card numbers stored by us |
| Plaid | Optional bank account connections for financial features | You enter your bank credentials directly into Plaid — we never see or store them. We store only an encrypted Plaid access token and retrieve account balances/transactions on your behalf. See Section 1. |
| Resend | Transactional email delivery | Email address; notification content |
| Supabase | Database hosting and authentication | All account and household data; encrypted at rest |
| Google Analytics | Usage analytics — consent-gated | Aggregated analytics: pages, events, device/browser type, approximate location. Only loaded after you accept cookies. |
| Google Calendar | Optional two-way calendar sync | Calendar events you choose to sync; requires your explicit OAuth authorization |
| Apple Calendar | Optional one-way calendar feed (iCal) | Read-only calendar events exported as a standard iCal feed |
| Apple Push Notification service (APNs) | Native notifications on Apple devices, when enabled | Device push token and notification content, such as a reminder title and destination |
| Google Firebase Cloud Messaging (FCM) | Native notifications on Android devices, when enabled | Device push token and notification content, such as a reminder title and destination |
We may disclose information if required by law, court order, or government request. Where legally permitted, we will attempt to notify you before complying.
If Sage Companion LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change and any choices you have.
We use the following technologies:
When you first visit the Service, a banner asks you to Accept or Decline
analytics cookies. Your choice is stored in your browser under the key sageCookieConsent.
If you decline, Google Analytics and Google Tag Manager are not loaded. You may change your preference
by clearing your browser's localStorage for this site.
We retain your account data, household coordination data, children's profile data, care binder entries, AI consent record, response reports, and conversation history for as long as your account is active.
Sage does not intentionally retain source microphone audio after a transcription request completes. A text transcript may be retained with the conversation or household action it supports. Text sent for spoken output may also already exist in conversation history. OpenAI's processing and endpoint-specific retention are described in Section 3 and in OpenAI's published API data controls.
When you delete your account (in-app settings or via DELETE /api/account), your account is
immediately deactivated after Sage cancels any renewable Stripe subscription, deletes the Stripe customer,
and revokes any Plaid connection. If either provider cannot confirm those actions, deletion stops and your
account remains available so you can retry. Associated personal data in our active systems — including
children's profile data and stored Plaid financial-connection tokens — is then permanently deleted. Stripe
may retain transaction records required for tax, dispute, fraud-prevention, or other legal obligations. De-identified security and
financial event records may be retained for fraud prevention, dispute review, and legal compliance. Backup
retention is described below. This action cannot be undone.
We maintain encrypted backups for disaster recovery. Your data may persist in backup archives for up to 90 days after account deletion but is not accessible and is not used during that period.
We may retain certain information longer where required by law (e.g., tax records, fraud-prevention logs).
You may request a copy of the personal data we hold about you by contacting us at [email protected].
You can update or correct your account information directly in the app settings at any time.
You may export a machine-readable copy of your household data at any time via the in-app export feature
(GET /api/account/export).
You may delete your account and all associated data at any time through your account settings or by
sending a DELETE /api/account request. Visit our public
account deletion page to sign in and open the deletion controls without
reinstalling the app. See Section 5 for retention details. If you cannot sign in or the deletion fails,
contact [email protected] for identity-verified assistance.
If you previously accepted analytics cookies, you may withdraw consent by clearing the
sageCookieConsent key from your browser's localStorage and refreshing the page, then
clicking Decline on the banner.
Open Settings > Account & privacy > AI data sharing and choose Turn off AI data sharing. Covered AI and voice-processing routes remain blocked until you choose to turn consent on again. Non-AI household tools remain available.
Contact us at [email protected]. We aim to respond within 30 days.
Sage for Home is intended exclusively for adults aged 18 and over. We do not knowingly create accounts for or collect personal information directly from children.
A parent or guardian may enter information about their own minor children (such as names, school names, activity schedules, and allergy notes) under the parent's own account and with the parent's consent. Children entered this way are household records — they are not users, they do not have accounts, and they cannot log in to the Service.
Because children's data is stored under the parent's account, parents have full control. To review or update a child's profile, go to Family Binder > Children in the app. To delete a specific child's profile, use the edit/delete controls in the app. To delete all data associated with your account (including all children's profiles), delete your account as described in Section 5.
If we learn that information about a child has been collected without proper parental authority, we will work with the account holder to address the situation. You may contact us at [email protected] with concerns.
Please note: No method of internet transmission or electronic storage is 100% secure. We implement industry-standard protections, but we cannot guarantee absolute security. We do not claim third-party security certifications such as SOC 2.
To exercise any of these rights, contact us at [email protected] or 980 N Michigan Ave Ste 1085, Chicago, IL 60611-4525.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The effective date at the top of this page reflects the date of the last revision.
If we make material changes, we will notify you by email or by a prominent notice within the Service before the changes take effect. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your data, please contact us:
Email: [email protected]
Mailing Address: 980 N Michigan Ave Ste 1085, Chicago, IL 60611-4525
Website: mysagecompanion.com
We aim to respond to all privacy inquiries within 30 days.