Cara
Back to Cara

Privacy

Cara · Last updated October 3, 2026

Privacy Policy

Effective date: October 3, 2026

This Privacy Policy explains how Amrezo Inc. ("Amrezo," "we," "us," or "our") handles information when you use Cara. Amrezo Inc. is located at 6561 Western Skies Way, Mississauga, Ontario, Canada, L5W 1G4.

Cara is an AI wellness companion for adults. It is not a therapist, medical service, or emergency service.

Information Cara handles

Cara does not require a Cara account or email address. Depending on the features you choose, Cara handles:

  • Conversation content: typed messages, microphone audio during calls, AI-generated transcripts, reflections, and conversation titles. Cara does not save raw audio recordings.
  • Personalization and wellbeing information: your preferred name, conversation preferences, goals, plans, personal facts, relationships, life events, feedback, and other personal or sensitive wellbeing information you choose to share. Cara may create tentative AI-generated observations and structured understanding from this content.
  • Context information: your selected support region, local date and time, and time zone. The selected region is used to show relevant crisis resources. Cara does not request device location permission. A third-party crisis-resource website may request or infer location under its own policy if you open it.
  • App and device information: a randomly generated installation identifier stored on your device; settings such as onboarding status, device lock, captions, AI-sharing consent, haptics, and iCloud-sync preference; network availability; and identifiers associated with sessions, records, and requests.
  • Subscription information: product, entitlement, trial eligibility, expiration, restoration, and transaction-verification information supplied through Apple StoreKit. Cara does not receive your full payment-card details.
  • Usage and reliability records: content-free local metrics such as event names, timestamps, model and token usage, duration, status, estimated cost, and numeric values. These records stay on your device unless you deliberately export a diagnostics file. Exported diagnostics exclude transcripts, saved memories, and Cara account identifiers because Cara has no account system.

Cara does not integrate advertising SDKs, third-party analytics, or third-party crash-reporting services. It does not access HealthKit or your contacts. Cara does not use the camera or photo library; a camera usage description exists because the WebRTC communication library references video capabilities, but Cara uses audio functions only.

Where information is stored

Your Cara history is stored locally on your device by default using Apple data-storage frameworks. It includes full transcripts, reflections, goals, preferences, processing records, and structured understanding, and remains until you delete it. Device backups may contain local app data according to your Apple and system settings.

If you enable Sync with my iCloud, Cara stores and synchronizes this history through a private Apple CloudKit container associated with your Apple Account. Sync is off by default. Turning sync off stops future syncing after the app is reopened but does not automatically remove existing iCloud copies. Cara provides a separate control to remove its private iCloud copies after sync is disabled. Other devices that still have sync enabled may upload their local copies again.

AI processing and sharing

Cara asks for separate, explicit permission before transmitting your information for AI processing. If you decline, you can still view, export, and delete saved history and access support resources. You may withdraw permission in Settings when no conversation is active; this stops future AI requests and background learning but cannot erase information already transmitted.

When you permit AI sharing:

  • OpenAI receives microphone audio during calls and conversation data to generate and transcribe replies. OpenAI also receives typed messages, selected saved context, transcripts, support-region and time context, and proposed learning through its Live, Responses, and Moderation APIs. Moderation screens recent user transcript text for possible current safety concerns. Cara requests that optional API storage be disabled, but this does not guarantee zero provider retention. OpenAI API data controls apply to OpenAI's processing.
  • AIProxy routes protected requests to AI providers, applies Apple DeviceCheck-based app attestation, certificate pinning, and service controls, and may process your IP address, request and usage metadata, response status, and error response bodies. Request bodies can contain the content described above. See AIProxy privacy information.
  • OpenRouter and TypeSafe's Jev service, when the optional Jev feature is enabled in the released build, receive selected transcript text, saved context, and proposed memories through AIProxy to produce tentative observations, evaluate proposed learning, and support personalization. These observations and evaluations are stored with your Cara history and follow the same export, correction, sync, and deletion controls.
  • WebRTC is the real-time communication technology used to transmit call audio. It does not represent a separate Cara account or advertising service.

AI providers may retain operational information under their own terms, policies, and configured retention controls. Information sent to them may be processed outside your province or country.

Apple services

  • Apple CloudKit and iCloud process synced history only if you enable iCloud sync.
  • Apple StoreKit and the App Store process subscriptions, payments, renewals, cancellations, refunds, trial eligibility, and purchase restoration under Apple's policies.
  • Apple DeviceCheck, used through AIProxy, helps verify that requests come from an authentic instance of Cara.

How we use information

We and the service providers described above use information to:

  • Provide voice and text conversations, transcripts, and replies.
  • Personalize Cara, create reflections, maintain continuity, and generate or evaluate tentative memories.
  • Show support resources for the region you select and assess transcript text for possible immediate-safety concerns. Cara cannot contact emergency services or continuously monitor you.
  • Operate subscriptions, restore purchases, secure provider credentials, authenticate app requests, limit abuse, and maintain service reliability.
  • Let you correct, search, export, synchronize, and delete your information.

We do not sell personal information and do not use Cara data for third-party advertising.

Your choices and controls

In Cara's Settings you can:

  • Withdraw AI data-sharing permission to stop future AI processing.
  • Export readable history as Markdown or complete data as JSON.
  • Export content-free diagnostics.
  • Correct transcript text; dependent AI-generated understanding is invalidated and recalculated where applicable.
  • Delete an individual conversation and understanding derived from it.
  • Delete all Cara history, including transcripts, reflections, goals, preferences, and derived understanding.
  • Turn iCloud sync off and separately request removal of Cara's existing private iCloud copies.

When iCloud sync is active, deletions propagate as connected devices synchronize. Deletion cannot remove copies you exported, independent device backups, information already received and retained by providers, or data Apple must retain for purchases and legal obligations. Deleting Cara data does not cancel an Apple subscription. Because Cara has no account system, there is no separate Cara account to delete.

You may also contact support@messagecara.com to ask about access, correction, deletion, or a copy of personal information controlled by Amrezo. We may need enough information to understand and verify the request. Requests concerning Apple-held purchase or iCloud information may need to be directed to Apple.

Retention and security

Local history remains until you delete it. Synced copies remain in your private iCloud container until deleted through Cara or your Apple services, subject to synchronization and backup behavior. Content-free metrics and processing records are stored with Cara data. Provider retention is governed by provider settings and policies and may continue after local deletion.

Cara uses platform protections, local file protection where available, private CloudKit storage when enabled, HTTPS, certificate pinning in AIProxy's session, app attestation, and scoped provider routes. No method of storage or transmission is completely secure.

Adults and geographic availability

Cara is intended only for adults age 18 or older in the United States. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 through Cara. If you believe a minor has provided information, contact us.

Changes to this policy

We may update this policy to reflect changes to Cara, providers, or legal requirements. We will post the revised version with a new effective date and provide any additional notice required by law.

Contact

For privacy questions or requests, contact support@messagecara.com or write to:

Amrezo Inc. 6561 Western Skies Way Mississauga, Ontario, Canada, L5W 1G4