Privacy Policy

Heardstone Privacy Policy

Effective Date: June 10, 2026

Heardstone is a mobile application provided by Tukios, Inc. ("Tukios," "we," "us," or "our"). This section explains how the Heardstone app collects, uses, shares, and protects your information, and it specifically describes the data Heardstone sends to a third-party artificial intelligence service. It supplements the Tukios Privacy Policy set out below; where the two differ with respect to the Heardstone app, this section controls.

Data Heardstone Sends to OpenAI

To provide its core features, the Heardstone app sends the following user-submitted content to OpenAI, Inc. ("OpenAI"), our third-party AI processing provider:

OpenAI processes this content solely to perform speech transcription, optical character recognition (OCR), and obituary drafting, and returns the results to Heardstone. We send only the content needed to provide these features.

We Ask Your Permission Before Any AI Feature

Heardstone does not send any content to OpenAI until you agree. The first time you use a feature that relies on AI processing — recording audio, capturing a photo with the camera, uploading a photo or document, or sending a chat message — Heardstone displays a consent screen that names OpenAI, lists the categories of data that will be sent, and explains the purpose. These features stay locked until you tap Allow AI Processing. If you dismiss the screen without agreeing, no content is sent to OpenAI and those features remain unavailable, though you can continue to use the rest of the app. Because these features depend on sending content to OpenAI, they cannot work without this processing.

Who Receives Your Data and How It Is Protected

The only third-party AI service that receives your Heardstone content is OpenAI, Inc. We transmit Heardstone content to OpenAI through API endpoints configured for zero data retention. Under this configuration, OpenAI does not store your content after a request is processed and does not use your content to train its models. OpenAI is contractually obligated to protect this data and to provide privacy and security protections equivalent to those described in this policy. You can review OpenAI's practices in the OpenAI API data usage policies and the OpenAI enterprise privacy commitments. We do not sell your Heardstone content, and we do not use it for advertising.

How We Collect This Data

We collect this information directly from you within the Heardstone app at the moment you choose to record audio, upload a file, capture or select a photo, or send a chat message. We also collect basic account information (such as your Tukios login email and account identifier) so that results can sync to your Tukios account, and limited diagnostic data to keep the app working.

How We Use This Data

How Long We Keep It

OpenAI does not retain your content after processing, as described above. Tukios stores the resulting transcriptions, extracted text, drafts, and related content in your Tukios account so you can access them, until you delete them or close your account.

Your Account and Data Deletion

Heardstone is a workplace application that your organization — such as the funeral home or business that gave you access — provides to you. Your Heardstone account is created, owned, and managed by that organization, not by you individually. To deactivate your account or delete the content associated with it, contact your organization's administrator, who can manage or remove your access. Your organization or its administrator may also contact Tukios at [email protected] to request deletion. As described above, OpenAI does not retain your content after processing; content stored in your Tukios account is retained and deleted in accordance with your organization's instructions and the Tukios Privacy Policy below.

Children

The Heardstone app is intended for use by funeral professionals and other adults and is not directed to anyone under 18 years of age. We do not knowingly collect personal information from children through the Heardstone app.

Contact Us About Heardstone

If you have questions about how the Heardstone app handles your data, contact Tukios, Inc. at [email protected] or 801-682-4391.

Tukios Privacy Policy

Effective Date: March 17, 2026

Tukios, Inc. ("us", "we", or "our") operates the https://www.tukios.com website. This Privacy Policy describes how we handle your information provided or collected via this website, affiliate websites, interactive services, and email programs made available by us (collectively, the "Service"). This Privacy Policy also applies to information you may provide to us offline. Please read this Privacy Policy before using our Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. You further agree that this Privacy Policy governs your use of the Service and any dispute concerning the Service. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use. For our customers residing outside the U.S., please note that we do not market for direct sale to customers in regions outside the United States, including Canada, the European Economic Area ("EEA"), Switzerland and the United Kingdom.

Information Collection and Use

Types of Data Collected

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Below are the categories of personal information that we may collect from you (collectively, "Personal Data").

Identifiers

We may collect identifying information including name, alias, phone number, email address, mailing and delivery address (address, state, province, city, ZIP code), IP address, usage data, account name, account credentials, birth date, information relating to your relationship with a deceased individual.

Demographic Information

We may collect demographic information including age, birth date, gender, ZIP code, and other information about you.

Commercial Information

We may also collect purchase and transaction information, log-in credentials and password, payment methods, items purchased, order status, shopping bag items, and merchandise interests.

Information From Your Communications With Us and on Guestbooks

We may also collect the content of email messages, text messages, phone calls, and your guestbook posts.

Usage Data

We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Google Analytics

We use a third-party service, Google Analytics, to collect, monitor and analyze information your browser sends whenever you visit pages on our site in order to improve our website and enhance your user experience. Google Analytics may use cookies on your device to accomplish this. This data may include browser type, your computer's IP address, the pages of our site that you visit, when you visit, the page you visited right before accessing our site, time spent on our website pages, and other statistics. Google Analytics does not collect any personal identifiers such as name or address. From time to time, we may use this information collected to report, in aggregate, trends and usage of the site. A more detailed explanation of how Google uses data from your browser can be found here: https://policies.google.com/privacy. You may opt out of providing browsing information to Google Analytics here: https://tools.google.com/dlpage/gaoptout/.

How Long Your Personal Data Will Be Kept

We will keep your Personal Data while we are providing products or Service to you. Thereafter, we will keep your Personal Data for as long as is necessary:

How We Collect Personal Data

We collect Personal Data in various ways, both directly and indirectly. For example, we collect your information directly from you when you send us postal mail, contact us, fill out a form on our site, write a guestbook entry, place an order through the site, provide information to us, or sign up to receive emails. We may also collect your Personal Data indirectly through automated means. For example, when you interact with our site, we may use technologies to collect information about how you use the site. We may also receive information about you from third parties including from our affiliates and subsidiaries, social media platforms or from our partners. Third-party service providers and vendors may also provide us with information about you. Please note that we may use Stripe for payment, analytics, and other business services; Stripe may collect transaction and personally identifying information, which it analyzes and uses to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy. We may also use Pledge as our charity donation partner. Pledge may collect transaction and personally identifying information, which it analyzes and uses to operate and improve the services it provides to us. You can learn more about Pledge and read its privacy policy at https://www.pledge.to/privacy.

Tracking and Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Other internet browsing information, unique device identifiers, cookie identifiers, device and browser settings and information, interaction with our site or advertisement, Internet service provider information, date and time of visit or use, websites visited before and after, navigation and search on our site, pages visited, items viewed, items purchased may be collected. Examples of Cookies we use: Session Cookies. We use Session Cookies to operate our Service. Preference Cookies. We use Preference Cookies to remember your preferences and various settings. Performance and Functional Cookies. We may use cookies to count visits and sources of traffic on our site so we can measure and improve performance and functionality. This also helps us know metrics such as which pages on our site are most and least popular and how visitors move around the site. Security Cookies. We use Security Cookies for security purposes. Targeted Advertising Cookies. We may use Targeted Advertising Cookies set by our partners. Social Media Cookies. Social media cookies allow you to share information using social media sharing buttons on social networks like Meta/Facebook (including Meta Pixels), LinkedIn, Instagram, or X. This information may then be used by the social media network to deliver targeted advertising to you. We may combine information collected automatically (as described above) from your interactions with our Service and your activity on third-party sites with other data (including personal information). If you wish to opt out of allowing certain cookies, you may do so by changing your browser settings so that cookies from our site cannot be set. Please note that if you delete, block, or otherwise restrict cookies, or use a different computer or Internet browser, you will need to renew your cookie management choices.

Use of Data

Reasons We Use Your Personal Data

We use Personal Data to provide the best possible products, services and experiences, and in connection with our business operations. Here are the reasons we use your Personal Data:

Transfer of Data

Your information, including Personal Data, may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there. The data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. By using the Service and/or providing Personal Data to us, you consent to transfer of your information to us as described in this Privacy Policy. Tukios, Inc. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Data.

Sharing and Disclosure of Data

Tukios, Inc. may share your Personal Data with the following categories of companies:

Targeted Advertising Partners

We may work with and disclose certain personal information to third-party companies that support our advertising and marketing efforts, including to serve interest-based advertisements across the Internet; track and categorize your activity, interests and device(s) used over time on our site, and on third-party websites and mobile applications. The advertising networks and related providers gather this information to create individual profiles that are disclosed to us, which allows us the ability to match those individual customer profiles with advertisements we believe may be most relevant to a particular customer. We may also disclose other information at our discretion, including information collected by automated technologies, which may be used by third parties for their own marketing, advertising, and other purposes. Note that we do not share text messaging originator opt-in data and consent information with any third party for their own use or benefit, or for the use or benefit of another party.

Google Analytics

As discussed above, Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on linked above. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We are not responsible for the sites, content, or videos available via those links, and we have not reviewed the privacy practices of those third parties. We encourage you to review the privacy practices of any third-party sites you choose to access.

Children's Privacy

The Service is not intended for children under 18 years of age, and we do not knowingly collect information from children under 13 years of age. If you are under the age of 13, do not: use, or provide any information on, the Service; make any purchases through the Service; use any of the interactive or public comment features of the Service; or otherwise provide any information about yourself to us, including your name, address, telephone number, email address or any screen name, alias or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any personal information from or about a child under 13, please contact us.

California Consumers: Your Rights Under the CCPA/CPRA

You have the right under the CCPA, as amended by the CPRA, and certain other privacy and data protection laws, as applicable, to exercise free of charge: As a California resident, you have the right to know and request:

State Specific Privacy Information

The following section, together with the rest of this Privacy Policy, sets forth privacy information relevant to residents of specific states within the United States, including your privacy rights under the laws of these states. We describe information we collect about you and the categories of third parties and affiliates who receive your personal information above. Capitalized terms used but not otherwise defined in this section and the term personal information will have the meanings associated with them under the applicable state privacy law. Residents that are affected by the below states' privacy laws have the following rights, as further defined and limited by applicable state law: Colorado Privacy Act (CPA); Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA); Delaware Personal Data Privacy Act (DPDPA); Indiana Consumer Data Protection Act (ICDPA); Iowa Data Protection Act (IDPA); Kentucky Consumer Data Protection Act (KCDPA); Maryland Online Data Privacy Act (MODPA); Minnesota Consumer Data Privacy Act (MCDPA); Montana Consumer Data Privacy Act (MTCDPA); Nebraska Data Privacy Act (NDPA); New Hampshire Privacy Act (NHPA); New Jersey Data Protection Act (NJPDA); Oregon Consumer Privacy Act (OCPA); Rhode Island Data Transparency Act (DTPPA); Tennessee Information Protection Act (TIPA); Texas Data Privacy and Security Act (TDPSA); Utah Consumer Privacy Act (UCPA); and Virginia Consumer Data Protection Act (VCDPA)

EEA and UK DATA SUBJECTS

We do not market goods and services to individuals in the European Economic Area (EEA) or the United Kingdom (UK), and we encourage users outside of the US to place orders by telephone or postal mail. However, to the extent required by the EU General Data Protection Regulation ("EU GDPR") and UK General Data Protection Regulation ("UK GDPR"), we have implemented appropriate security measures, and data protection procedures and policies for compliance with EU GDPR and UK GDPR.

Your Rights under GDPR

You have the following rights under the EU GDPR and/or UK GDPR in relation to goods and services we provide to you in the EEA and/or UK:

Do Not Sell or Share My Personal Information

As described above, we may work with certain advertising partners to show ads that are targeted to your interests. These activities may be considered "selling" or "sharing" your personal information under California law. To opt out of these activities, you must submit a request using our online form and adjust settings for each device and browser you use with the site. You can also use the Global Privacy Control (GPC) signal in supported browsers to opt out automatically. If you use GPC, you'll need to turn it on in each browser you use, which will opt you out of the sale or sharing of your personal information. Please note that we may continue to collect and share your personal information with other third parties, including to continue providing services to you where sharing of your personal information is for purposes other than targeted advertising and permitted by law. We do not knowingly "sell" or "share" the personal information of consumers under 18 years of age. We do not collect, process or use sensitive personal information to make inferences about you and uses sensitive personal information only as set forth in this Policy and as permitted by applicable law.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time, and we may apply any changes to information previously collected, as permitted by law. We will notify you of any changes by posting the new Privacy Policy on this page. Each version of this Policy will be indicated by the last updated date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

HOW TO EXERCISE YOUR RIGHTS

If you would like to exercise any of your rights as described in this Privacy Policy or under applicable law, or if you have questions, you can do so by contacting us using any of the options listed below. Our contact details are:

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

Usage Data

We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking and Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Examples of Cookies we use: Session Cookies. We use Session Cookies to operate our Service. Preference Cookies. We use Preference Cookies to remember your preferences and various settings. Security Cookies. We use Security Cookies for security purposes.

Use of Data

Tukios, Inc. uses the collected data for various purposes: To provide and maintain the Service To notify you about changes to our Service To allow you to participate in interactive features of our Service when you choose to do so To provide customer care and support To provide analysis or valuable information so that we can improve the Service To monitor the usage of the Service To detect, prevent and address technical issues

Transfer of Data

Your information, including Personal Data, may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. Tukios, Inc. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure of Data

Legal Requirements

Tukios, Inc. may disclose your Personal Data in the good faith belief that such action is necessary to: To comply with a legal obligation To protect and defend the rights or property of Tukios, Inc. To prevent or investigate possible wrongdoing in connection with the Service To protect the personal safety of users of the Service or the public To protect against legal liability

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Changes to this Privacy Policy

If you have any questions about this Privacy Policy, please contact us: By phone at 801-682-4391 By email at [email protected]