Who we are and what this covers
Elutee is operated from Belgium by an individual developer under the project name “Elutee” (“we”, “us”). The operator is the data controller for personal data collected through the Elutee mobile app and elutee.net.
This policy covers account information, diary content, AI image generation, subscriptions, product communications and use of the Elutee app and website. Separate services such as the Apple App Store and Google Play apply their own privacy terms.
Email feedback@elutee.net with a question or a request relating to your data.
Data we collect
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account data | Email, password hash when using email login, Apple or Google account identifiers | Create and secure your account | Contract |
| Diary content | Text, photos, audio, weekly summaries and saved moments | Provide the diary and weekly-cover service | Contract |
| Subscription data | Product ID, subscription status, activation and renewal dates from Apple or Google | Provide paid features and validate access | Contract |
| Usage and device data | IP address, device model, OS version, diagnostic and interaction logs | Reliability, security, debugging and abuse prevention | Legitimate interests |
| Preferences | Notification, theme, cookie and analytics choices | Remember and honour your choices | Consent or legitimate interests |
| AI processing input | Text or media selected for a weekly or optional AI image | Generate the image you requested | Contract |
We do not collect precise GPS location, contacts, the contents of your camera roll beyond files you choose to add, or data from other apps.
Where the data comes from
Most information comes directly from you when you create an account, save a moment, change a preference or contact support. Device and diagnostic information is collected automatically when you use the Service. Apple and Google provide limited account or subscription metadata when you use their sign-in or payment systems.
How we use data
We use personal data only where it is needed to:
- operate Elutee, including accounts, search, backups and its week-by-week structure;
- store the moments you choose and generate requested weekly or optional AI images;
- provide subscription features and verify payment status;
- send reminders you have chosen to receive;
- improve performance, fix errors, protect accounts and detect abuse;
- meet legal obligations and respond to valid legal requests.
Where processing is based on consent, you may withdraw that consent. Where it is based on our legitimate interests, those interests are operating a reliable, secure and understandable service without overriding your rights.
Who processes data for us
We do not sell personal data. We share only the data needed by service providers acting under our instructions, or when disclosure is required by law. Provider categories include:
- hosting, storage and database providers;
- privacy-focused or consent-based analytics and diagnostic services;
- AI processing providers used for requested image generation;
- email, push notification and crash-reporting providers;
- Apple and Google for sign-in, subscriptions and purchase validation.
Processors may not use diary content for their own marketing. Some may process data outside the European Economic Area; the safeguards for those transfers are described below.
Subscriptions and payments
Apple or Google handles all payments. Elutee does not receive or store full card or bank details. We receive only the subscription metadata needed to identify a product, activation, renewal and access status. Refund requests are handled by the platform where you purchased the subscription.
AI features
Elutee uses AI services to create weekly or optional images from moments you choose. Only the text or media required for that request is sent for processing. The output is created for your use.
- Elutee does not use diary content to train AI models.
- AI providers act as processors and may access input temporarily only to perform the request.
- You may choose not to request optional AI features or disable them where that control is available.
How long data is kept
Account data and diary content are retained while your account exists, unless you delete individual content earlier. When you delete the account, personal data is removed from active systems, except where the law requires a longer period. Backup copies disappear through routine backup rotation.
Security logs, diagnostics and aggregated analytics are retained only as long as reasonably necessary for security, reliability and statistics. Subscription records may be retained where required for accounting, fraud prevention or legal compliance.
Your privacy rights
Depending on your jurisdiction and the legal basis used, you may ask to:
- access and receive a copy of your personal data;
- correct incomplete or inaccurate data;
- delete data or your account;
- restrict or object to certain processing;
- withdraw consent for notifications, cookies or other consent-based processing;
- request human review where automated processing significantly affects you.
Email feedback@elutee.net. We aim to acknowledge and respond within one week where possible; formal response periods and permitted extensions under applicable law still apply. We may need to verify your identity before completing a request.
Security
Elutee encrypts data in transit and at rest, restricts access to personal data and monitors the Service for intrusion and abuse. No online system can guarantee absolute security. If you believe your account or data may be at risk, contact us promptly.
Children
Elutee is intended for people aged 13 or older. Where local law requires it, a person aged 13–16 must have authorization from a parent or guardian. We do not knowingly allow children under 13 to maintain accounts. If you believe a child below the applicable age has provided personal data, contact us and we will investigate and remove it where required.
International transfers
Data is stored and processed within the European Union and may also be processed by approved providers in other countries. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another legally recognized safeguard. You may contact us to ask about the safeguard relevant to a particular transfer.
Automated processing
AI-generated covers are creative outputs requested by you. Elutee does not use them to make decisions that produce legal or similarly significant effects about you.
Changes to this policy
We may update this policy as the Service, providers or law changes. The latest revision date appears at the top. Significant changes will be communicated in the app or by email before they take effect where required.
Contact and complaints
For a privacy question or rights request, email feedback@elutee.net.
You also have the right to contact a supervisory authority. Because Elutee is operated from Belgium, the lead authority is the Belgian Data Protection Authority.