Last updated: 26 September 2025
Elora ("the App", "we", "our", "us") is a voice-first, emotionally intelligent journaling app. We are committed to protecting your privacy and ensuring your personal data is handled responsibly.
Data Controller: Samuel McCarthy
Contact Email: samrmccarthy6@gmail.com
This Privacy Policy explains what information we collect, how we use it, and the rights you have. If you do not agree with this Policy, please do not use the App.
We collect the following categories of information:
We do not collect precise location, contact lists, or advertising IDs. We do not show ads.
We use your data only to provide and improve Elora, including:
We do not sell your data or share it for advertising.
Entries are first saved locally on your device using expo-sqlite, so you can journal offline.
When online, entries/summaries/embeddings sync to a PostgreSQL database hosted on Railway.
Redis schedules summarization and analysis jobs. Authentication managed by Supabase Auth.
To deliver AI-powered journaling, we securely transmit data to trusted processors:
When you submit a journal entry, the content (text or transcribed voice) may be transmitted securely to Anthropic and/or OpenAI solely to generate summaries, insights, or prompts. These providers may retain requests and outputs temporarily for safety/abuse monitoring and operational reliability, but do not use your data to train their models when accessed via their APIs. We do not permit any processor to use your data for advertising.
Your entries, summaries, and embeddings are not used to train Anthropic, OpenAI, or any external AI models. Processing is limited to providing the App's features back to you.
Depending on your location, you may have the right to:
To exercise these rights, email samrmccarthy6@gmail.com. We will verify your identity and respond within applicable legal timeframes.
You can delete your account and associated data at any time:
Upon deletion, your journal entries, summaries, embeddings, and personal data are permanently removed from our systems within up to 30 days (subject to limited delays from backups and processor queues). Some minimal records may be retained where legally required (e.g., fraud prevention, safety logs) and are then securely deleted.
Your data may be processed in or transferred to countries outside your own (including the United States and the European Union). Where required, we rely on safeguards such as Standard Contractual Clauses (SCCs) embedded in our processors' terms to ensure an adequate level of protection.
We employ industry-standard technical and organizational measures, including TLS (HTTPS) in transit and encryption at rest where applicable (e.g., in PostgreSQL). Despite these measures, no method of transmission or storage is completely secure; you use the App at your own risk.
For users in the EEA/UK, we rely on the following legal bases:
You may withdraw consent at any time (e.g., by disabling features or deleting content/account), but this will not affect processing already performed.
Elora is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will delete it promptly.
We may update this Policy from time to time. The "Last updated" date reflects the current version. Material changes will be communicated in-app and/or by email (if you have an account). Continued use of the App after an update constitutes acceptance of the revised Policy.
Data Controller: Samuel McCarthy
Email: samrmccarthy6@gmail.com