This notice applies to California residents and supplements our Privacy Policy. It describes your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and how CatchupLife, Inc. ("FamilyCall," "we," "us," or "our") collects, uses, and shares personal information about you.

1. Categories of Personal Information We Collect

In the last 12 months, we have collected the following categories of personal information from California residents:

CategoryExamplesCollectedIdentifiersName, email, phone number, IP address, account IDYesPersonal recordsPayment information, account historyYesProtected classificationsAge (to verify 18+)Yes (limited)Commercial informationSubscription plan, billing historyYesInternet/electronic activityPages visited, clicks, session behavior, onboarding stepsYesAudio/voice dataRecordings of Asha's callsYesInferencesConversation summaries, memory profiles generated by AshaYesSensitive personal informationVoice recordings (see Section 5)Yes

We do not collect precise geolocation, biometric identifiers, or Social Security numbers.

2. Sources of Personal Information

We collect personal information:

• Directly from you when you create an account or use our Services

• From Care Recipients through Asha's outbound calls

• Automatically through cookies and analytics tools as you use our website

• From our service providers in connection with delivering the Services

3. Business and Commercial Purposes for Collection

We use personal information to:

• Provide and operate FamilyCall, including Asha's calls and the family dashboard

• Improve Asha's conversational quality and prompt design (this applies to Conversation Data and cannot be opted out of — see Section 6)

• Compile and deliver the monthly Magazine (Family Plan, with Subscriber approval)

• Process payments and manage subscriptions

• Measure and improve our website and marketing

• Show and measure relevant advertising on third-party platforms (see Section 4)

• Send service notifications and safety alerts

• Comply with legal obligations and protect our rights

4. Sharing of Personal Information

We Do Not Sell Personal Information for Money

We do not sell your personal information in exchange for monetary consideration.

Sharing for Cross-Context Behavioral Advertising

Our use of the Meta Pixel and related advertising technologies may constitute "sharing" of personal information for cross-context behavioral advertising, or a "sale" or "share" as broadly defined under the CCPA/CPRA. The categories of personal information involved are identifiers (such as hashed email addresses and device identifiers) and internet/electronic activity data.

You have the right to opt out of this sharing. See Section 7.

Service Providers

We share personal information with service providers who process it on our behalf under written contracts:

• Amazon Web Services (cloud infrastructure)

• Twilio (telephony, US)

• Exotel (telephony, India)

• OpenAI (AI language model processing)

• Google / Vertex AI / Gemini (AI and analytics)

• Anthropic (AI language model processing)

• Sarvam AI (Indian language processing)

• Meta / WhatsApp (onboarding communications)

• MongoDB (database)

• Mixpanel (analytics and session replay)

• Usercentrics (consent management)

These providers are restricted from using your information for purposes other than providing services to us.

5. Sensitive Personal Information

We collect voice recordings from Care Recipients through Asha's calls. We treat this as sensitive personal information under the CPRA.

How we use sensitive personal information:

• Transcribing and processing calls to provide the FamilyCall service

• Generating summaries and memories to enable Asha's conversational continuity

• Improving Asha's prompt design and overall service quality

We do not use sensitive personal information to infer characteristics about individuals for advertising purposes.

Your right to limit: You may request that we limit our use of your sensitive personal information to what is necessary to provide the Services. Contact us at ccpa@familycall.care. Note that limiting this use may affect Asha's ability to remember past conversations and provide a personalized experience.

6. Important: Conversation Data Used to Improve Asha

Conversation Data — transcripts, summaries, and memories from Asha's calls — is used to improve Asha's conversational quality and overall service experience. This is a condition of using FamilyCall and cannot be opted out of.

We never sell this data or use it for advertising. This data is processed internally and shared only with service providers as described above. It is never used to build third-party advertising profiles.

7. Your CCPA/CPRA Rights

Right to Know

You have the right to request disclosure of:

• The categories and specific pieces of personal information we have collected about you

• The categories of sources from which we collected it

• The business purposes for collecting or sharing it

• The categories of third parties with whom we share it

Right to Delete

You may request that we delete your personal information, subject to certain exceptions (such as retaining records required by law, or information needed to complete transactions you have requested).

Right to Correct

You may request that we correct inaccurate personal information we hold about you.

Right to Opt Out of Sale/Sharing

You may opt out of the sharing of your personal information for cross-context behavioral advertising (our use of Meta Pixel and related tools).

To opt out:

• Use the "Cookie Settings" link on familycall.care

• Send a recognized opt-out preference signal such as Global Privacy Control (GPC) — we honor GPC signals

• Email ccpa@familycall.care with "Opt Out of Sharing" in the subject line

Right to Limit Use of Sensitive Personal Information

See Section 5.

Right to Non-Discrimination

We will not discriminate against you for exercising any CCPA/CPRA rights. We will not deny services, charge different prices, or provide a lower level of service because you exercised a privacy right. Note that some requests (such as deleting all Conversation Data) may affect Asha's ability to provide a personalized experience, which is an inherent consequence of data deletion, not discrimination.

Authorized Agents

You may designate an authorized agent to make CCPA requests on your behalf. We will require written proof of the agent's authorization and may verify your identity directly.

8. How to Submit a Request

Email: ccpa@familycall.care Subject line: CCPA Privacy Request — [type of request]

We will acknowledge your request within 10 business days and respond within 45 days. If we need an extension (up to an additional 45 days), we will notify you with the reason for the delay.

We will verify your identity before responding to access, deletion, or correction requests. Verification typically involves confirming information associated with your account.

9. Retention

Please see the Data Retention table in our Privacy Policy for retention periods by data type.

10. Contact

For CCPA-related questions or to exercise your rights:

Email: ccpa@familycall.care Mail: CatchupLife, Inc., 303 Twin Dolphin Drive, Suite 600, Redwood City, CA 94065

You may also contact the California Privacy Protection Agency (CPPA) if you have unresolved concerns about our privacy practices.

11. Changes to This Notice

We may update this CCPA Notice periodically. The "Effective Date" above reflects the most recent revision.