Privacy Policy

Last updated: May 2026

Welcome to Elara. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you use our meditation and mindfulness app.

1. Information We Collect

Account Information

When you create an account, we may collect:

• Email address
• Display name
• Profile picture (if provided)
• Authentication data from Google Sign-In or Apple Sign-In

Usage Data

We collect information about how you use the app:

• Meditation sessions completed
• App preferences and settings
• Progress and achievements
• Features accessed

Wellness and Onboarding Data

During onboarding and app use, we may collect wellness-related information you voluntarily provide, such as:

• Personal wellness goals and preferences
• Mood and emotional state information
• Sleep quality indicators
• Stress and wellness self-assessments
• Conversations with the Elara AI wellness companion

Social Features

If you use social features, we collect:

• Friend connections
• Messages sent in sanctuary chat rooms
• Shared activities with friends

Purchase Information

For premium subscriptions, purchases are processed by Apple (App Store) or RevenueCat. We do not store your payment card details.

2. How We Use Your Information

We use your information to:

• Provide and improve the Elara app experience
• Save your meditation progress and preferences
• Enable social features like friend connections and group meditations
• Send notifications about your meditation practice (if enabled)
• Process premium subscriptions
• Respond to support requests

3. Data Storage and Security

Your data is stored securely using:

• Firebase (by Google) - for authentication and data storage
• Supabase - for additional backend services

We implement industry-standard security measures to protect your information. However, no method of transmission over the internet is 100% secure.

4. Data Sharing

We may share data with:

• Service providers - Firebase, Supabase, and RevenueCat to operate the app
• Other users - Only information you choose to share (display name, profile picture) in social features
• Legal requirements - If required by law or to protect rights and safety

5. Your Rights and Choices

You have the right to:

• Access your personal data
• Update your account information
• Delete your account and associated data
• Opt-out of push notifications
• Control social features and friend visibility

To delete your account, go to Settings in the app or contact us at the email below.

6. Children's Privacy

Elara is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

7. Push Notifications

With your permission, we may send push notifications for meditation reminders and encouragement. You can disable these in your device settings at any time.

8. Third-Party Services

Our app uses the following third-party services, each with their own privacy policies. Data may be processed by these services as described:

• Firebase (Google) - Authentication, data storage, push notifications, and analytics
• Supabase - Additional backend data storage
• RevenueCat - Subscription and purchase management
• ElevenLabs - Text-to-speech audio generation for meditation content
• OpenAI - AI-powered wellness companion conversations (via our secure backend)
• Vercel - Backend hosting for AI and data services

When you use the AI wellness companion feature, your conversation messages are processed by OpenAI through our backend server. We do not share your identity with OpenAI, but conversation content is sent for processing.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Upon account deletion:

• Your account data and profile information are deleted
• Your conversation history with the AI companion is deleted
• Your social connections and messages are removed
• Some anonymized, aggregated data may be retained for analytics purposes

Backup copies may persist for up to 30 days after deletion.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Firebase, OpenAI, Vercel) maintain servers. We ensure appropriate safeguards are in place for such transfers.

11. Your Rights (GDPR / CCPA)

Depending on your location, you may have additional rights including:

• Right to access - Request a copy of your personal data
• Right to rectification - Request correction of inaccurate data
• Right to erasure - Request deletion of your data
• Right to data portability - Request your data in a portable format
• Right to withdraw consent - Withdraw consent at any time
• Right to object - Object to processing of your data

To exercise any of these rights, please contact us at the email address below.

California Residents (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by email.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: support@elara.app