Last updated: August 3, 2026 · Effective: July 24, 2026
This Privacy Policy explains how eave — operated by Northlo Software Consulting, a sole proprietorship of Bradley Logan, doing business as eave (together “eave,” “we,” “us,” or “our”) — collects, uses, discloses, stores, and deletes personal information when you use our websites (including eaveapp.ca), mobile applications, optional hardware devices (such as Puck, Clip, and Line), APIs, and related services (collectively, the “Services”).
We wrote this in plain language. If anything is unclear, email support@eaveapp.ca or our Privacy Officer at brad@eaveapp.ca.
By using the Services, you acknowledge this Policy. Where consent is required by law, we will ask for it in context (for example, microphone access, waitlist signup, or family SMS alerts).
Controller / organization: Northlo Software Consulting, a sole proprietorship operated by Bradley Logan, doing business as eave
Privacy Officer: Bradley Logan — brad@eaveapp.ca
Support: support@eaveapp.ca
Website: https://www.eaveapp.ca
Primary place of business: Moncton, New Brunswick, Canada
For privacy requests (access, correction, deletion, withdrawal of consent, or complaints), email the Privacy Officer at brad@eaveapp.ca (or support@eaveapp.ca) and include enough detail for us to verify and respond. We aim to respond within 30 days, or sooner where required by law.
This Policy applies to personal information we process in connection with:
It does not apply to third-party websites, apps, or services that we do not control, even if linked from the Services. Their privacy practices are governed by their own policies.
“Personal information” means information about an identifiable individual. What we collect depends on how you use eave.
When monitoring is active (via the app microphone, an eave device, or a connected partner source you authorize), the Services capture or receive audio from the environment or call path you are monitoring. Depending on device and setup, that may include your voice, another party’s voice, room audio, or landline audio.
Important: Marketing language such as “never recorded” refers to the absence of retained raw audio recordings for playback or sale. It does not mean that no conversation-derived text is ever stored. See Section 7 (retention).
If you link a third-party product (for example Omi), we may receive identifiers and conversation transcripts or related payloads from that partner under your authorization, so we can run scam detection and send alerts you configured.
eave is often set up by an adult child or caregiver for a parent or other loved one (the “monitored person”). Personal information about a monitored person — including audio captured during monitoring and text derived from it — belongs to that person.
We use personal information to:
We do not use personal information to build advertising profiles or to train third-party foundation models for unrelated commercial products, except as a subprocessor’s own terms may allow for operating their hosted services under our instructions and applicable agreements.
Depending on your location, we rely on one or more of the following:
Under Canadian privacy law (including PIPEDA and, where applicable, provincial laws such as Quebec’s Law 25), we collect, use, and disclose personal information for purposes a reasonable person would consider appropriate in the circumstances, and we obtain meaningful consent where required. You may withdraw consent subject to legal or contractual restrictions and reasonable notice; some features will stop working if required data cannot be processed.
If you are in California or another US state with a consumer privacy law, see Section 12 for additional disclosures and rights.
We keep personal information only as long as needed for the purposes above, unless a longer period is required or permitted by law.
Backups may persist for a short additional period before expiring. De-identified or aggregated data that cannot reasonably identify you may be kept longer.
We do not sell personal information. We share it only as described below.
We use vendors who process data on our instructions to operate eave, including:
These providers may process data in Canada, the United States, or other countries where they operate. See Section 9.
If you enable family alerts, we send alert messages to the contacts you provide. Those contacts will see that an eave alert was triggered and limited related context in the message.
We do not share personal information with third parties for their cross-context behavioural advertising. If that ever changes, we will update this Policy and provide required opt-out mechanisms.
eave is operated from Canada. Some subprocessors process data outside Canada (commonly in the United States). Where we transfer personal information internationally, we take steps designed to provide a comparable level of protection, such as contractual commitments with providers and careful vendor selection. By using the Services, you understand that your information may be processed in countries with different privacy laws than your home jurisdiction.
We use administrative, technical, and organizational measures appropriate to the sensitivity of the information, including:
No method of transmission or storage is 100% secure. If we become aware of a breach that creates a real risk of significant harm, we will notify affected individuals and regulators as required by applicable law.
Subject to verification and legal limits, you may request to:
Email support@eaveapp.ca with the subject line “Privacy request.” We may need to verify your identity (for example, by confirming control of the account email).
Account deletion removes account credentials and associated personal data from active systems within 30 days (often sooner), except information we must retain for legal, security, or dispute-resolution purposes, or that has been de-identified. Residual copies in encrypted backups expire on the backup cycle. De-identified feedback and training examples that can no longer reasonably be linked to your account may be retained to improve scam detection.
If you have a concern, contact us first. Canadian residents may also contact the Office of the Privacy Commissioner of Canada (and, where applicable, a provincial privacy commissioner). Residents of other regions may contact their local data protection authority.
If you are a resident of California or another US state with a comprehensive privacy law (such as the CCPA/CPRA and similar statutes), this section supplements the rest of this Policy.
Categories collected (depending on use): identifiers (email, account ID, IP); customer records (support content); commercial information (waitlist interests); internet / electronic activity (app diagnostics, session metadata); audio and related sensory information (processed live; transcript derivatives may be stored); and inferences related to scam-risk classification for the service.
Sensitive personal information may include account login credentials and audio information processed for the Service. We use sensitive information only to provide the Service, security, and purposes you would reasonably expect — not to infer characteristics for advertising.
Sale / sharing: We do not “sell” personal information and do not “share” it for cross-context behavioural advertising as those terms are commonly defined under US state privacy laws.
Your rights may include know/access, delete, correct, and non-discrimination for exercising rights. Submit requests to support@eaveapp.ca. Authorized agents may submit requests with proof of authority. We will respond within the time required by applicable law.
The Services are not directed to children under 13 (or under 14 where required, such as under Quebec’s rules for minors), and we do not knowingly collect personal information from children under that age. eave is intended for adults and caregivers. If you believe a child provided personal information, contact us and we will delete it.
Our marketing site is primarily static. We may use essential cookies or local storage required for basic site function, security, or remembering waitlist form state. We also use Google Analytics on eaveapp.ca to measure page views and understand how visitors use the site. Google may set cookies or use similar identifiers for this analytics purpose. We do not use Google Analytics for advertising or remarketing, and we do not operate a third-party advertising cookie stack on eaveapp.ca. Embedded content (for example a YouTube privacy-enhanced embed) may set cookies under that provider’s policies. You can control cookies through your browser settings, and you can learn more about Google’s data practices in the Google Privacy Policy.
Scam detection uses automated systems, including machine-learning / large-language-model classifiers, to estimate whether speech patterns resemble known scam scripts. Outputs can be wrong (false positives or false negatives). Alerts are assistive warnings — not legal, financial, or safety guarantees. Meaningful human review of individual live calls is not part of the standard real-time product path; you and your contacts remain responsible for how you respond to alerts.
Joining the waitlist is voluntary. We use your email and device preferences to communicate availability and launch information. It is not a paid pre-order. You may opt out at any time by emailing support@eaveapp.ca or by using the unsubscribe mechanism included in our messages.
Commercial electronic messages we send (including waitlist and product updates) identify Northlo Software Consulting / eave as the sender, include a way to contact us, and include a working unsubscribe option, consistent with Canada’s Anti-Spam Legislation (CASL) and similar rules. Unsubscribing stops marketing or waitlist messages; we may still send transactional messages needed to operate an account you keep open.
We may update this Privacy Policy to reflect product, legal, or operational changes. We will post the revised Policy on this page with an updated “Last updated” date. If changes are material, we will provide additional notice appropriate to the circumstances (for example, in-app notice or email). Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law; where consent is required, we will seek it.
Questions about privacy:
Privacy Officer: Bradley Logan — brad@eaveapp.ca
Support: support@eaveapp.ca
Related documents: Terms of Service · Delete Account