Privacy Policy
Last updated 12 October 2026
Most privacy policies are written to make a company's data collection sound acceptable. This one is mostly a list of things ela doesn't do, because that's genuinely how the app is built.
The short version. Your periods, symptoms, moods and notes are stored on your phone and never sent anywhere. There's no account and no server holding your cycle. The only part of ela that uses a server is Partner Mode, and only if you turn it on — it carries the cards you send and, if you switch them on, two specific cycle details. Nothing else.
1. Who we are
ela is made by Lavoro Company. Where this policy says "we", that's who it means. For data protection purposes we are the controller of the limited information described in section 3, and of nothing else, because there is nothing else.
2. What stays on your phone
Everything you track is written to storage on your device and is not transmitted to us. That includes:
- Period start and end dates
- Flow, symptoms and moods you log
- Notes you write on a day
- Your first name, birth year, what you're using ela for, and any birth control method you've entered
- Your reminder settings and which symptoms you've chosen to track
- Everything ela calculates from the above — cycle length, predictions, patterns, insights
We have no copy of any of it. We cannot read it, export it, analyse it or produce it in response to a request, because it was never sent to us. If you delete the app, it goes with it.
Backups. ela can write everything you've logged to a file that you save wherever you choose. That file is created on your device and handed to whatever app you pick — Files, iCloud Drive, email. It does not pass through us.
Reminders. Period and pill reminders are scheduled locally by your phone. They aren't push notifications, so nothing about your cycle is sent to a server in order to remind you.
The doctor summary. Generated on your device from data already on it, and shown to you before anything is shared. Where it goes next is entirely your choice.
3. Partner Mode, the one part that uses a server
Partner Mode connects two phones, so it necessarily involves something in the middle. If you never use it, nothing in this section applies to you and ela makes no network requests about your cycle at all.
When you connect with a partner, the following is stored on our backend, hosted by Supabase:
- An anonymous identifier. No email, phone number or name is required to create it. It identifies a device, not a person.
- A couple record and the six-character invite code used to join it.
- The first names you and your partner enter for yourselves. These are optional; the app works with them blank.
- The cards, flirts, care conversations, date-night answers and game answers you exchange. These are stored as encoded documents the server does not interpret.
- Two sharing switches, recording whether you've chosen to share your cycle day and phase, and your predicted next period.
- Only the cycle details whose switch is on. If "cycle day and phase" is on, a record of your current cycle day and phase is stored so your partner's phone can read it. The same for your predicted window. Both are off until you turn them on.
Your symptoms, moods, notes and logged history are never part of this. There is no code path that sends them, and no screen in your partner's app that could display them.
Access is enforced on the server, not merely hidden in the app: your partner's phone is refused the data by the database itself unless the relevant switch is on. Turning a switch off removes what you had shared.
Something we want to be straight about. Disconnecting from a partner, or using "Erase everything", clears your phone — but the cards and conversations the two of you exchanged currently remain on our backend rather than being deleted automatically. If you want them removed, email us at support@ela.app and we'll delete the couple's records. We'd rather tell you this plainly than let a policy imply otherwise.
4. What we never collect
- No advertising identifiers, and no advertising
- No third-party analytics or tracking SDKs
- No behavioural profiling, and no selling or sharing of personal information to anyone, for any purpose
- No location data
- No contacts, photos, microphone or health data from other apps
- No email address, unless you choose to give us one on our website or by writing to us
ela has never sold personal information and has no mechanism to. Under the laws that require it to be said plainly: we do not sell or share your personal information, including for cross-context behavioural advertising.
5. Other companies involved
- Supabase hosts the Partner Mode backend described in section 3. They process that data on our instructions and for no other purpose.
- Apple distributes the app and handles any purchase. We never see your payment details. Apple tells us whether a subscription is active; it doesn't tell us who you are, and we don't ask.
- Netlify hosts this website. If you give us your email for launch news, it's stored with them until we use it, and then deleted.
That's the complete list. There is no fourth company.
6. How long things are kept
Data on your phone is kept until you delete it or delete the app — it's yours and we have no say in it.
Partner Mode records are kept while the connection exists. Shared cycle details are superseded each time your phone refreshes them, and your partner's app ignores anything that hasn't been updated in 36 hours, so a stale snapshot is never presented as today's. Records are deleted when you ask us to, as described in section 3.
Invite codes expire after seven days and stop working the moment they're used once.
7. Your rights, and how to use them
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing. ela's structure makes most of these unusually direct:
- Access and portability. Settings → Your backup → Save a copy. That file is everything ela holds about your cycle, in a readable format, without asking us.
- Deletion. Settings → Erase everything removes it from your phone. For Partner Mode records held on our backend, email us and we'll delete them.
- Correction. Every entry can be edited or removed in the app, including past periods.
- Objection and restriction. Don't use Partner Mode, or switch its sharing off. The rest of the app processes nothing we can see.
You can also complain to your local data protection authority. If you're in the EU or UK and need a formal request handled, write to the address in section 10 and we'll respond within one month.
8. Children
ela is not directed at children under 13, and we don't knowingly collect anything from them. Partner Mode is intended for users aged 16 and over. If you believe a child has provided us information through Partner Mode, contact us and we'll remove it.
9. Changes
If we change this policy we'll update the date at the top, and if the change is significant we'll say so in the app rather than quietly editing the page. We won't start collecting something we've said here that we don't collect without telling you first.
10. Contact
Write to support@ela.app for anything at all, including the deletion requests described above. A person reads it.
ela is not a medical device. It doesn't diagnose, treat or prevent anything, and it isn't a method of contraception.