Privacy notice

1. Who we are and how to contact us

Cognolite Limited (“Cognolite”, “we”, “us”) is the data controller for the Amy service and this website. For anything about your information, email contact@cognolite.comEmail usCopy

When Amy is provided through an organisation such as a council, NHS team or care provider, that organisation may be the data controller, and its own privacy notice will explain how your information is used.

2. Information we use

If you buy Amy, or Amy calls you

• Purchaser and participant names, contact details, relationship, subscription and set-up information.
• Call scheduling preferences and, where provided, age group and location.
• Background you choose to give us, such as interests, routines, important people and topics Amy should avoid.
• Call audio, transcripts, dates, duration, prompts and technical logs.
• Summaries, non-diagnostic wellbeing observations, patterns, family updates, alerts and safeguarding notes created from calls.
• Feedback, and any health, wellbeing or other special-category information shared in, or inferred from, conversations.

If you receive family updates

• Your name, email address and your relationship to the person Amy calls.

If you visit this website

• Information you type into our forms.
• If you accept cookies: pages visited, how you arrived (for example, which advert), device and browser type, and approximate location. See Cookies.

If you contact us about Amy for an organisation

• Your name, work email, organisation, role and what you tell us when you book a call or email us.

Payments are handled by Stripe. We don’t see or store your full card number.

3. Why we use it, and our lawful basis

We use information to administer subscriptions, set Amy up, schedule and personalise calls, run Amy, create family updates and alerts, check quality and safety, and investigate technical problems.

Recording, transcription and conversational analysis, and the processing of health, wellbeing or other special-category information, are carried out only where the person receiving Amy’s calls has given consent. When someone arranges Amy for another person, they must get that person’s agreement before the calls begin and confirm it to us when they set Amy up. The person receiving the calls can also give consent to us directly in writing, and can withdraw it at any time by telling Amy or emailing us.

AI training and improvement is a separate, optional choice. If the person Amy calls opts in, Cognolite may use relevant call audio, transcripts, derived wellbeing information and feedback to train, test and improve Amy and the AI systems used by Cognolite and its specialist technology providers, including through authorised human review. Amy works fully without agreeing to this.

• Account administration and delivering a subscription: performance of a contract, UK GDPR Article 6(1)(b).
• Processing covered by consent, including recording calls, family updates, the US founding list, and analytics and advertising cookies: consent, Article 6(1)(a).
• Health, wellbeing and other special-category information: explicit consent, Article 9(2)(a).
• Replying to organisations and keeping our service secure: our legitimate interests, Article 6(1)(f).
• Where there is a serious risk to someone’s safety, we may share information to protect their vital interests or where the law allows.

We never sell personal information. Nothing said on Amy’s calls is used for advertising.

4. Family updates

Buying Amy for someone does not give the purchaser access to that person’s conversations. Family updates are short summaries, not transcripts. They go only to people the person receiving Amy’s calls has agreed to, and that person can change or stop them at any time. Full transcripts are not shared by default.

5. Who receives the information

• Authorised Cognolite staff and contractors who need it to run, support, evaluate or improve Amy.
• Our service providers for cloud storage, voice AI and calling, transcription and analysis, website hosting and forms (Netlify), payments (Stripe), call booking, email, security and technical support.
• If you accept cookies: Google (Google Analytics) and Meta (Meta Pixel). See Cookies.
• Family update recipients, only where the person receiving calls has agreed.
• A safeguarding service, healthcare professional or emergency service where agreed, or where necessary and lawful to address a serious safety concern.
• For organisation services, the organisation and the teams it authorises.

6. Cookies and similar technologies

We only use analytics and advertising cookies if you choose Accept. If you choose Reject, or make no choice, they don’t load. You can change your mind at any time with Cookie settings, also in the footer of every page.

Name	What it does	Kept for
cg_consent (browser storage)	Remembers your cookie choice. Always used.	Until you clear it or change your choice
cg_attrib (browser storage)	Only if you accept: remembers which advert or link brought you here, so we can tell which campaigns work.	Until you close the browser tab
_ga, _ga_* (Google Analytics)	Only if you accept: counts visits and how people use the site.	Up to 2 years
_fbp, _fbc (Meta Pixel)	Only if you accept, and only on our family and US pages: measures how well our Facebook and Instagram adverts work.	Up to 3 months

7. US founding list

If you join our US founding list, we keep your email address, US state, any voice preference you give, whether you chose the founding plan, and how you found the page. We use this only to tell you about Amy’s US launch and to understand demand. Amy does not make calls in the US yet. Unsubscribe at any time by emailing contact@cognolite.com or using the link in our emails.

8. Processing outside the United Kingdom

Some of our providers, or their subprocessors, may process information outside the United Kingdom. Where that happens, transfers are protected by safeguards in our agreements with them, such as the UK International Data Transfer Agreement or Addendum, or adequacy regulations.

9. How long we keep information

• Set-up, contact and scheduling details: while the service is active and up to 12 months after it ends.
• Identifiable audio, transcripts, summaries, observations and feedback: up to 12 months after the service ends.
• Consent and withdrawal records: up to 12 months after the service ends.
• US founding list: until 12 months after Amy launches in the US, or until you unsubscribe.
• Organisation enquiries: up to 24 months after our last contact.
• Website analytics: up to 14 months.
• Payment records: as long as the law requires for tax and accounting, usually 6 years.
• Irreversibly anonymised information: no fixed period.

10. Your rights and withdrawing consent

You can withdraw consent at any time by telling Amy on a call or emailing contact@cognolite.com. If you withdraw consent to the service, we’ll stop future calls and future processing covered by that consent. If you withdraw only the optional AI-training consent, Amy carries on as normal and we stop using your information for training. Withdrawal does not affect processing that happened before.

You can also ask us to access, correct, erase or restrict your personal information, to object to processing, or to provide it in a portable format where that right applies.

11. Complaints

Please contact us first at contact@cognolite.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

12. Changes to this notice

We’ll update this notice when how we use information changes, and change the version number and date at the top. This version replaces version 1.2 of 16 October 2026, which replaced the Amy Privacy Notice version 1.1 of 7 August 2026. The privacy notice for our earlier individual pilot is available here (PDF).