Elska · Legal

Privacy Notice

Last revised: September 24, 2026

Summary

We collect your account details, what you do in the app, your conversations, and technical data such as your IP address. We use it to run the Service, to keep the platform safe and to improve our models. We do not sell your data. You can ask for a copy of it, or ask us to delete it.

1. Who is responsible

Harnika Bajaj is the controller of the personal data described here. For any privacy question, or to exercise your rights, write to ffan45972@gmail.com.

Data protection contact: ffan45972@gmail.com.

2. What we collect

Category	Examples	Where it comes from
Account data	email address, hashed password, account status, age confirmation, language	you, at sign-up
Content data	messages you send, memories you add, voice-call transcripts, and your profile photo if you set one	you, while using the Service
Usage data	features used, session and call timestamps, moderation outcomes, error reports	automatically
Technical data	IP address, a random device identifier created by the app, device and browser type, operating system, approximate location derived from IP	automatically

On your device. The app stores a sign-in token on your device so you stay signed in between sessions, and caches images so they load faster. It uses no analytics, advertising or attribution SDKs, and no third party collects anything through the app. Signing out or clearing the app's data removes the token. If we ever add anything beyond the strictly necessary, we will ask for your consent first and update this Notice to name it.

Microphone. Voice calls use your microphone only while a call is active, and only after you grant the permission. Your speech is streamed to our speech-recognition and voice providers to run the conversation; we keep the transcript as part of your chat history and do not keep the raw audio after the call. Voice messages are generated from text and involve no recording of you.

Photos. If you set a profile photo, you pick it with the system photo picker; the app has no access to your photo library beyond the picture you choose.

We do not ask you for, and you should not send us, government identity numbers, financial account numbers, health information, or any other sensitive category of data beyond what is described above.

3. Why we use it, and on what legal basis

Purpose	Legal basis (GDPR)
Creating and running your account; delivering the features you ask for	performance of a contract
Moderating content; detecting abuse, minors, and prohibited material; enforcing our Terms	legitimate interests; legal obligation
Security, debugging, and measuring how features are used	legitimate interests
Improving the Service, including evaluating and training models	legitimate interests; or your consent, where the law requires it
Marketing emails, where you asked for them	consent — withdrawable at any time

4. Who we share it with

We do not sell personal data and we do not share it for third-party advertising. We disclose it only to:

Processors acting on our instructions — hosting and storage, AI model providers that generate text and speech and transcribe voice calls, email delivery and error monitoring. Each is bound by contract to use the data only for the service it provides to us.
Authorities, where we are legally required to disclose, or where disclosure is necessary to report child sexual abuse material or an imminent threat to life.
A buyer or successor, if the business is sold or reorganised, subject to this Notice.

Our AI providers are: DeepInfra (language model and speech recognition), MiniMax (voice synthesis), Alibaba Cloud DashScope (speech recognition).

Your permission. The iOS app asks for your permission before any of your messages or call audio is sent to these AI providers. You can withdraw it at any time in Me → Settings → AI data sharing; chat and voice calls are unavailable until you allow it again.

5. International transfers

Our providers operate in several countries, so your data may be processed outside your own. Where data leaves the EEA or the UK we rely on an adequacy decision, or on Standard Contractual Clauses together with any additional safeguards the transfer requires. You can ask us for a copy of the mechanism we rely on.

6. How long we keep it

Data	Retention
Account and profile	while the account exists, then 30 days after you delete your account
Conversations and memories	until you delete them, or until the account is deleted
Moderation and safety records, including reports to authorities	as long as necessary for the safety purpose and any legal obligation
Server and security logs	90 days

7. Your rights

Depending on where you live, you may have the right to access your data, to correct it, to delete it, to restrict or object to processing, to withdraw consent, to receive a portable copy, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

You can delete your account and its data yourself at any time in the app: Me → Settings → Delete account (see Delete your account for what happens next).

To exercise any other right, write to ffan45972@gmail.com from the address on your account. We respond within one month, and will tell you if we need longer. We may ask you to confirm your identity first — we will not hand your conversations to someone else.

If you are unhappy with our response you may complain to a supervisory authority: the data-protection authority in your country of residence.

8. Automated moderation

We use automated systems to screen prompts and generated content. These can block a request, withhold output, or flag an account for human review. A decision to suspend or terminate an account is confirmed by a person. If your account is affected, write to ffan45972@gmail.com and ask for a review.

9. Security

We use encryption in transit, hashed passwords, access controls and logging. No system is perfectly secure. Where a breach is likely to result in a high risk to you, we will notify you and the relevant authority as the law requires.

10. Children

The Service is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete the account and its data. See the Underage Policy.

11. Changes

We will post any revised version here and update the date at the top. Where a change materially affects how we use your data we will notify you before it takes effect.