So You Know
Privacy Policy
Effective Date: May 14, 2026
So You Know is operated by So You know, Inc., a Delaware corporation ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at soyouknow.ai and use our services.
By using So You Know, you agree to the collection and use of information in accordance with this policy. Please read it carefully.
1. Information We Collect
We collect the following types of information:
- Phone number — required to verify your identity, deliver messages, and send reminders. Your primary account identifier.
- Email address — optional. Collected only for account recovery. We do not send marketing email.
- Name — to personalize your experience.
- Birth year — to verify minimum age requirement (13+) and route minors to parental consent.
- Voice recordings — messages you choose to record and send through our platform.
- Usage data — how you interact with our app, including features used and time spent.
- Device information — device type, operating system, and browser type.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the So You Know platform
- Deliver voice messages to your designated recipients via SMS link
- Send you personalized reminder SMS messages on the schedule you choose — one reminder per person in your circle, at your chosen frequency
- Send you optional SMS confirmations when your message has been heard
- Communicate with you about your account and our services
- Ensure the security and integrity of our platform
- Comply with legal obligations
We will never sell your personal information to third parties. We will never allow advertisers to target you based on the content of your messages.
3. SMS Reminders and Message Delivery
No mobile information will be shared with third parties. So You know, Inc. will not share, sell, or transfer mobile phone numbers, SMS opt-in data, or SMS consent information to any third parties or affiliates for marketing or promotional purposes. All other categories of personal data exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers collected for SMS notifications are used solely by So You Know to deliver the services you have opted in to receive.
So You Know uses SMS (text message) as its primary communication channel. By creating an account and adding people to your circle, you consent to receive the following types of SMS from us:
- Message delivery notifications — sent to recipients when a message is waiting for them
- Reminder messages — sent to you on the frequency you set per person in your circle (e.g. weekly, bi-weekly, monthly). You control the frequency and can pause or stop reminders at any time from your profile.
- Delivery confirmations — optional notifications to you when your message has been played
- Account notifications — security and account-related messages
Message frequency varies based on your reminder settings. Message and data rates may apply. SMS messaging is provided through a trusted third-party communications provider.
Recipient delivery and retries. When you send a message, we attempt SMS delivery to your recipient up to two (2) times. If both attempts fail, we will hold the message and notify you. We will not attempt a third delivery to that recipient without your explicit re-confirmation.
To opt out: Reply STOP to any SMS from So You Know at any time, or pause/disable reminders in your profile settings. For help: Reply HELP to any SMS, or contact us at team@soyouknow.ai.
4. Your Voice Messages
So You Know is built on trust. The messages you record are deeply personal. We treat them with the highest level of care:
- Your messages are encrypted in transit and at rest
- Audio files are stored with enterprise-grade cloud storage providers with restricted access
- Only your designated recipients can access messages sent to them via their unique private link
- We do not listen to or analyze the content of your personal messages
- You can delete your messages at any time from your account
- Message links never expire — a message recorded today can be heard years from now
5. How We Share Your Information
We do not sell or rent your personal information. We may share your information only in the following limited circumstances:
- Service providers — we work with trusted third-party vendors who help us operate the platform, including SMS delivery, cloud hosting and storage, database and authentication, payment processing, and transactional email. These providers receive only the information necessary to perform their services and are contractually required to protect it.
- Designated recipients — when you send a message, the recipient you choose receives it via their unique private link.
- Legal requirements — if required by law, subpoena, or to protect the rights and safety of our users.
- Business transfers — in the event of a merger or acquisition, your information may be transferred as a business asset, with notice to you.
A current list of our service providers is available on request by contacting team@soyouknow.ai.
6. Data Retention
We retain your personal information and messages for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us at team@soyouknow.ai.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- The right to access the personal information we hold about you
- The right to correct inaccurate information
- The right to request deletion of your data, including a self-service "Delete my account" option available from your profile settings
- The right to opt out of reminder SMS messages at any time
- The right to pause all reminders from your profile settings
To exercise any of these rights, please contact us at team@soyouknow.ai.
8. Cookies
Our website uses cookies to improve your browsing experience and analyze site traffic. You may disable cookies through your browser settings, though some features of our site may not function properly as a result.
9. Children's Privacy and Parental Consent
So You Know is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 to create an account on the platform.
This section addresses two distinct scenarios involving minors: (a) a minor creating their own account as a sender, and (b) an adult user sending a voice message to a minor recipient. Different protections apply to each.
9.1 Sender accounts for minors aged 13 to 17. Users between the ages of 13 and 17 may create their own account on So You Know only with verified parental or guardian consent. During account creation, users in this age range are required to provide a parent or guardian's email address. We send a verification email to that parent or guardian containing a unique confirmation link. The minor's account is not activated until the parent or guardian clicks the verification link. We retain a timestamped record of parental consent for compliance purposes. We do not knowingly allow a minor under 13 to create a sender account on the platform.
9.2 Voice messages addressed to children under 13. When an adult user records a voice message intended for a child under 13, we apply the following protections:
- We collect only the child's first name and a parent or guardian's phone number. We do not collect or store the child's phone number, email, or any other personal information about the child.
- The voice message is delivered exclusively to the parent or guardian's phone, never directly to the child. The parent or guardian decides whether to play the message for the child.
- The sender is required to acknowledge that they are a parent or guardian of the child, or that they have permission from one, before the message can be sent.
- The sender is required to record a brief audio statement (approximately 5 seconds) confirming that a parent has approved the message. This recording, which we refer to as a "voice consent affidavit," is stored alongside the message audio and serves as a parental-approval audit record. The voice consent affidavit is the sender's own voice and is not the child's voice.
- The sender may optionally provide a backup parent or guardian phone number. If the primary parent does not engage with the message within a defined window, we may attempt delivery to the backup number. The backup number is used only for this purpose.
- The parent or guardian's phone number, the optional backup phone number, and the voice consent affidavit are used solely to deliver the message and to maintain compliance records. They are not used for marketing, analytics, or any other purpose.
9.3 Voice messages addressed to recipients aged 13 to 17. When an adult user records a voice message intended for a recipient between the ages of 13 and 17, the sender chooses one of two delivery routes:
- To a parent or guardian's phone. The message is delivered to the parent or guardian, who decides whether to share it with the teen. This is the recommended route and operates similarly to the under-13 flow, except the teen's name and phone number are not required.
- To the teen's phone directly. If the sender chooses this route, we require the sender to provide a parent or guardian's phone number in addition to the teen's. On the first message delivered to that teen, we send a one-time notice to the parent's phone identifying the sender and explaining that voice messages are being sent to their teen. The parent may reply STOP at any time to halt all future messages to that teen. The sender is also required to acknowledge that a parent or guardian knows about and approves of the message.
9.4 Data retention for compliance records. Records of parental consent (verification timestamps, sender acknowledgments, voice consent affidavits, and parent phone numbers used for notice or delivery) are retained for the life of the related account and for seven (7) years thereafter, consistent with applicable record-keeping guidance for parental-consent records under COPPA. These records are not used for any purpose other than compliance and operational delivery. After the retention period expires, these records are permanently deleted.
If you believe we have inadvertently collected personal information from a child under 13 in a manner inconsistent with this policy, please contact us immediately at team@soyouknow.ai and we will promptly delete it.
10. Security
We take the security of your personal information seriously and implement industry-standard measures to protect it. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the effective date. Your continued use of So You Know after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
So You know, Inc.
Email: team@soyouknow.ai