Biometric Data Policy — Callio

Effective date: 2026-06-04 · Last updated: 2026-06-16

This Biometric Data Policy explains Callio's position on voice biometric data. It supplements the Privacy Policy and is provided by Wojciech Szymański (Alchemicy AI) ("Callio", "we", "us") for the Callio AI voice receptionist service (the "Service").

1. No voiceprints, no voice biometric identifiers

Callio does not collect, capture, generate, derive, or store voiceprints or any voice biometric identifiers, and does not use any caller's voice to identify, verify, or authenticate that person. We do not create or store a biometric template from a caller's voice, and we do not enroll callers in any voice-recognition, speaker-recognition, or voice-authentication system.

2. Why transcription and diarization are not biometric

• Speech-to-text transcription converts spoken words into text so the call can be documented and summarised. It does not measure or store the unique physical or behavioral characteristics of a person's voice.
• Diarization (labelling who is speaking — e.g., "caller" vs "assistant") is performed only for transcript readability. It does not measure, derive, compare, or store the unique vocal geometry of a speaker, and it is not used to identify a specific individual.
• Under biometric-privacy laws such as the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI), a "voiceprint" is a template that is measured or analysed for the purpose of identifying a specific individual. Because Callio performs neither the measurement nor the identification, no biometric identifier is created and no biometric-consent obligation attaches to the Service on this basis.

3. How we recognise returning callers

Callio recognises returning callers using phone number / CRM-style data (e.g., the calling number and prior-call facts stored in the per-caller profile), never by analysing voice characteristics. This is a data-matching function, not a biometric one.

4. Operational guardrails

To keep the statements above true, Callio:

• does not enable any voice-ID, speaker-recognition, or voice-authentication feature;
• does not build a returning-caller identity model from voice characteristics; and
• does not export call audio to any third party for the purpose of creating a voiceprint.

5. If this ever changes

If Callio ever introduces a feature that would create or use a voiceprint or other biometric identifier, we will first obtain the written notice and opt-in consent required by applicable biometric-privacy law (e.g., BIPA, CUBI), adopt the required retention-and-destruction schedule, and update this Policy and the Privacy Policy before that feature is enabled.

6. Note for Customers (clinics and businesses)

Because Callio does not create voiceprints, your caller notice does not need to include BIPA/CUBI-style biometric-consent language on account of the Service. You remain responsible for call-recording consent and general privacy notices to your callers (see the Terms of Service and the clinic caller-notice template). This Policy is provided for convenience and is not legal advice.

Wojciech Szymański (Alchemicy AI), Poznań, Poland · [email protected]