Privacy Policy

Last updated: October 22, 2026

This is a preliminary policy provided for transparency and will be replaced with our finalized version. Questions? Email privacy@expressagain.com.

ExpressAgain (“we,” “us”), a ReSkillify Group company, provides a communication app for people who can understand but cannot reliably speak. This policy explains what we collect and how we handle it.

Information we collect

Account details you provide, such as name and email.
Patient profile information you choose to add, such as a name, date of birth, family contacts, care team, and hospital.
Voice recordings you make to create a custom speaking voice.
Basic usage information needed to operate and improve the app.

How we use information

We use information to provide the app's features (speaking phrases aloud, personalization, contacts, and optional custom voices), to keep the service secure, and to support you.

Voice recordings

If you create a custom voice, your recording is sent to our voice provider (ElevenLabs) to generate that voice, which is stored in the associated account. We do not sell recordings or voices. You may request deletion of a custom voice at any time.

Protected health information (HIPAA)

For agency, facility and enterprise deployments that involve protected health information (PHI), we sign a Business Associate Agreement (BAA) with the covered entity before any PHI is shared with us, and we apply the “minimum necessary” principle.

How we share information

We share information only with service providers that help us operate the app, under appropriate agreements. We do not sell your personal information. The providers we use today are:

Vercel — hosts the app and runs it.
Neon — the database that holds account, profile and care records.
Amazon Web Services (Amazon S3) — file storage for health-related photos, videos, voice notes and documents. We are moving these files here now.
Cloudflare (R2) — file storage for media that is not health-related, such as profile photos and app lesson videos. Files uploaded before the move stay here until they are copied over.
Anthropic — the AI that helps with features such as recipes, meal photos and lessons.
ElevenLabs — creates and speaks custom voices.
Paubox — sends email that contains health details.
Brevo — sends email that contains no health details, such as sign-up, invitations and password resets.
Twilio — sends text messages. Texts never contain health details; they say only that something new is waiting in the app.

Health information is kept only with providers that offer a Business Associate Agreement, and we are completing those agreements with each of them now. Email and text providers that do not sign one never receive health details.

Text message (SMS) notifications

If you opt in to text notifications — by providing your cell number and checking the text notifications box when you create your member account, or by turning texts on in your profile settings — we send you SMS notifications about activity in your family's care circle, such as new posts, replies to your posts, SOS alerts, and visit updates. Message frequency varies with your circle's activity, and we send each member at most one notification text per hour. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help; you can also turn texts off anytime in Profile & Settings. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with service providers strictly necessary to deliver the messages (our SMS carrier).

Storage and security

We use encryption in transit and reasonable safeguards to protect information. Some preferences and profile data are stored locally on your device.

Your choices

Access, update, or delete profile information you have added.
Request export or deletion of your data by contacting us.
Choose whether to create or keep a custom voice.

The account owner can also close the account inside the app, from Settings, Privacy & Security, Close this account, by typing CLOSE and the account password. Closing deletes the patient's profile, care records, feed, messages, photos, videos, voice notes and documents, ends every family member's, professional's and organization's access, asks our voice provider to delete a custom voice, and deletes the login. Three kinds of record stay: sign-in and access-audit rows with every name removed, the invoices, signed agreements and consent records that a professional or an organization legally keeps as its own, and one line saying the account was closed. What is kept and for how long is listed in the Help Center under Closing your account. Deletion requests by email, and export requests, still work exactly as above.

Children

ExpressAgain is intended for use by or on behalf of adults and their caregivers, and is not directed to children under 13.

Changes and contact

We may update this policy and will revise the date above. Questions? Email privacy@expressagain.com.