Donna is a phone assistant made by Lab798, Inc. ("Lab798", "we", "us"). Donna answers calls for you, finds out who is calling and why, asks you when something needs your decision, and, when you ask her to, places calls on your behalf.
This policy explains what information we collect when you use the Donna apps for iPhone and Android, the Donna service behind them, and the website at donna.lab798.com, and what we do with it. It also explains how we handle information about the people who call you and the people Donna calls for you, because they are part of every conversation even though they are not our users.
The short version:
- We collect what Donna needs to answer and place your calls, and we keep call records for 30 days unless you delete them sooner.
- Calls are recorded and transcribed so you can review them.
- Voice and reasoning run on OpenAI under a zero-data-retention agreement. Neither we nor OpenAI train AI models on your calls or your data.
- We host the service on Amazon Web Services in the United States.
- We do not sell your information, share it for advertising, or show ads.
- Your contacts stay on your phone. We never upload your address book.
Who this policy covers
- You, if you have a Donna account or are on our waitlist.
- Callers and call recipients: anyone who calls a Donna number, or whom Donna calls for a Donna user. See If you spoke with Donna.
- Visitors to donna.lab798.com.
Donna is currently offered as a beta to people in the United States who have been admitted from our waitlist. It is not intended for anyone under 18, and we do not knowingly collect information from children.
What we collect
Your account
- Sign-in details. You sign in with Apple or Google. We receive a stable account identifier from that provider and the email address it has verified. If you use Apple's "Hide My Email", we receive the relay address, not your real one.
- Your Donna number. We assign you a phone number from our carrier. If you forward your own number to Donna, the phone network may pass that number to us along with each forwarded call.
- Your settings. The name Donna uses for you, your time zone, your notification choices, how Donna should handle calls, and any notes you give her for calls she places (for example, "book under Sam" or "never leave a voicemail").
Calls Donna answers for you
When someone calls your Donna number:
- Call details: the caller's phone number, any caller name supplied by the phone network, the time and length of the call, and how it ended.
- Call audio. The conversation is streamed to our voice provider so Donna can listen and speak in real time. If you listen in or take over the call, your voice is part of the call audio too.
- Recordings. Answered calls are recorded, with the caller and Donna (or you) on separate channels, and Donna tells callers at the start of the call that it is recorded. Calls that are never answered are not recorded.
- Transcripts, summaries and notes. A written record of the conversation, a short summary, a category (such as message, sales or suspicious), any message the caller left, the questions Donna asked you, and your replies.
Calls Donna places for you
When you ask Donna to call someone:
- Your request, typed or spoken. If you talk to Donna to set up a call, your voice is streamed to our voice provider in the same way as call audio. Anything you paste or attach as extra context is included too.
- The plan Donna shows you before dialing: who she will call, the number, what she is trying to arrange, and what she may agree to.
- Business lookups. To find a business's number, Donna sends the business name and a location to Google Maps Platform and may run a web search through OpenAI. These lookups do not include your name or account details.
- Approximate location. If you allow location access, the app works out your city and country on your phone and sends only those, so Donna can tell which branch of a business you mean. Your precise location never leaves your device. You can say no and simply tell Donna the place.
- Contacts you choose. If you pick someone from your contacts to call, the app sends only that person's name and the number you picked.
- The call itself: the same call details, audio, recording and transcript as an answered call, plus Donna's report of what was agreed.
Donna identifies herself as an AI assistant calling for you, and says the call is recorded, at the start of every call she places.
Your contacts
The apps can name callers using the contacts on your phone. Your address book stays on your device and is never uploaded. When a call arrives, the app checks the caller's number against your contacts on your phone. If there is a match, it tells us only that the caller is a saved contact and, if you have turned this on, the name you saved for them, for that one call. Donna uses that name on the call and to recognize the same number the next time it calls you. You can erase every name you've shared at once in Settings, under Contacts.
Your devices
- Notification tokens from Apple or Google, so we can alert you. Notifications carry identifiers only. The app fetches the caller's name and details from us directly over an encrypted connection, so Apple and Google don't receive them.
- Microphone audio, only while you are listening in, taking over a call, or talking to Donna to set up a call.
- Technical information such as app version and device type, which we need to connect calls to your phone and to fix problems.
- Crash reports. If an app crashes, it sends a diagnostic report to our crash-reporting provider. These reports are not linked to your name or email and contain no call content.
The website and waitlist
- If you join the waitlist, we store your email address, the language of the page you used, and the time you signed up.
- To keep bots off the waitlist, the form uses Cloudflare Turnstile, which processes technical signals such as your IP address and browser characteristics to tell people from automated traffic.
- The website uses no cookies, analytics or advertising trackers. Cloudflare, which hosts the site, processes standard request information, such as IP addresses, to deliver pages and protect the site.
How we use information
We use the information above to:
- answer, screen and place calls for you, and pass messages between you and the other person;
- ask for your decision when a call needs it, and notify you;
- produce transcripts, summaries, categories and reports, and keep recordings, so you can review your calls;
- find the right number for a business you ask Donna to call;
- keep Donna secure and prevent abuse, including fraud, spam and misuse of calling. For example, we apply daily limits to calls Donna places and review unusual activity;
- diagnose and fix problems and improve how Donna works, using operational records that we design to leave out call content;
- communicate with you about your account, the waitlist, and changes to Donna; and
- comply with the law and enforce our terms.
No model training. We do not use your calls, recordings, transcripts, requests or other content to train AI models, and our AI provider does not either.
No selling, no ads. We do not sell personal information, share it for cross-context behavioral advertising, or use it to show you ads.
AI processing
Donna's voice and reasoning are provided by OpenAI, which we call directly through its API. OpenAI processes call audio in real time and processes text to write summaries, sort calls into categories, turn your requests into call plans, and look up businesses.
We have opted in to OpenAI's zero data retention terms. Under those terms, OpenAI does not store the audio or text we send it, or what it sends back, after it has produced a response, and it does not use that data to train its models.
Donna's judgments are automated and can be wrong: a summary may miss something, or a call may be put in the wrong category. You can always read the full transcript or listen to the recording. Donna never makes legal or similarly significant decisions about you.
Who we share information with
We share information only with service providers that help us run Donna, under contracts that limit their use of it to providing their service to us, and in the limited cases below.
| Provider | What they do for us | What they receive |
|---|---|---|
| Amazon Web Services | Hosts the Donna service, database, backups and recordings in the United States | All service data, stored encrypted |
| OpenAI | Voice and reasoning, under zero data retention | Call audio, transcripts, your requests and business lookups |
| Telnyx | Phone numbers and carrying calls to and from the phone network | Phone numbers and call audio in transit |
| Google Maps Platform | Finding a business's phone number and location | Business names and an approximate city |
| Apple and Google | Sign-in, and delivering notifications | Sign-in identifiers, notification tokens and identifier-only notifications |
| Cloudflare | Hosting the website and storing the waitlist | Website requests and waitlist emails |
| Sentry | Crash reporting for the apps, in the United States | Crash reports with app version and call or task identifiers, without call content |
We may also disclose information:
- when the law requires it, for example in response to a valid subpoena or court order, and we will notify you where we are allowed to;
- to protect people, when we believe in good faith it is necessary to prevent fraud, abuse, or harm to someone's safety;
- in a business transfer, if Lab798 is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information; and
- with your direction, for example when Donna passes your reply to a caller or states your name when booking something for you.
How long we keep information
| Information | How long |
|---|---|
| Call records: transcripts, summaries, messages, questions and your replies, caller names shared from your contacts, and call plans and reports | 30 days from the call, then deleted automatically. You can delete any call sooner. |
| Call recordings | Deleted with the call record, at 30 days or when you delete the call |
| Account and settings | Until you delete your account |
| Waitlist email | Until you are admitted and create an account, or until you ask us to remove it |
| Backups | Up to 60 days, after which deleted data is gone from backups too |
| Operational logs | Up to 30 days |
When you play a recording, the app gets a private link that works for 15 minutes. A link issued just before you delete a call keeps working until it expires.
Your choices and rights
- Delete a call at any time from the call's page in the app. The record and recording are removed.
- Forget caller names you've shared from your contacts, from Settings.
- Turn off permissions for contacts, location, microphone or notifications in your phone's settings. Donna keeps working without them, with less help.
- Delete your account from Settings in the app. This deletes your calls, recordings, settings and devices, and releases your Donna number. We keep a one-way record of your Apple or Google account identifier so that a deleted account isn't silently recreated, and we keep any records we are legally required to retain.
You can ask for a copy of your information, including your call records, by emailing [email protected] from the address on your account.
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing (we don't sell or share it). You may use an authorized agent to make a request on your behalf. We will not treat you differently for exercising these rights. To make a request, email [email protected]. We will verify your request by asking you to confirm it from the email address on your account, and we will respond within the time the law requires. If we decline your request, you may appeal by replying to our decision, and we will explain the outcome of the appeal.
If you spoke with Donna
If you called someone who uses Donna, or Donna called you on someone's behalf, we processed information about you to provide that call to the Donna user:
- your phone number and any caller name from the phone network;
- what you said, as audio and as a transcript, a summary and any message you left; and
- a recording of the call. Donna says at the start of every call that it is recorded.
The Donna user can see this information and listen to the recording. It is deleted after 30 days, or sooner if they delete the call. We don't use it for any other purpose, don't sell it, and don't train AI on it. Donna will always tell you she is an AI if you ask.
If you have questions, or want to ask about information from a call, email [email protected] with the number you called from and the approximate date and time. Because call records belong to the Donna user's account, we may need to involve them in answering your request.
Security
We protect information with encryption in transit and at rest, short-lived access credentials, and access controls that limit who at Lab798 can reach customer data. No system is perfectly secure. You can read more about how we protect Donna, and how to report a vulnerability, in our Security Policy.
Where information is stored
Donna is operated from the United States, and we store and process your information there.
Changes to this policy
When we change this policy, we will update the date at the top. If a change materially affects how we use information we already have, we will tell you in the app or by email before it takes effect.
Contact
Questions about this policy or your information: [email protected].
Lab798, Inc.
131 Continental Dr, Suite 305, Newark, New Castle County, Delaware 19713