At Elaria, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information.
We collect information you provide directly to us when you create an account, use our services, or contact our support team. This may include:
Some of this information may be considered sensitive in your region (for example, data concerning health or wellbeing). We only process it to operate the features you use and as described here. Elaria is a wellness and self-reflection product; it does not provide medical care, diagnosis, or treatment.
The alignment onboarding flow may use items worded similarly to common self-report screens (for example, PHQ-2, GAD-2, and WHO-5 style questions) with a consistent "past two weeks" timeframe. Outputs are used only to personalize your in-app experience and reflection copy. They are not a clinical diagnosis, formal mental health assessment, or substitute for care from a qualified professional. If you are in crisis, contact local emergency services or a crisis line appropriate to your region.
We use cookies for authentication (for example, session cookies from Supabase) and may set a non-httpOnly CSRF token cookie so your browser can send a matching header on sensitive writes—together with origin checks and rate limits—to reduce cross-site request risks. These security tokens are not used for advertising.
We use your information to provide, maintain, and improve our services, including:
When you use features that generate personalized text (for example, interpretations or cards after a check-in), we may send relevant content you have entered—together with non-clinical context such as mood scores—to third-party AI providers to produce that output. Our prompts are designed to encourage supportive, non-diagnostic language. Providers may include OpenAI and/or Google (Gemini), depending on configuration. Those providers process data under their own terms and privacy policies as subprocessors. You can use many parts of Elaria without entering free-text notes; when AI features are off or unavailable, we do not send your text to those providers for that purpose.
We use service providers that help us run the app. Depending on how Elaria is configured in your environment, this may include:
We do not sell your personal information. We do not use your wellbeing or journal content for advertising personalization.
We retain your account and activity data for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements. Derived summaries tied to check-ins or quizzes are stored to power your history and personalization. When you delete specific content or your account, we work to remove associated personal data within a reasonable period, subject to backup and legal retention requirements.
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. You can update much of your profile in the app; for other requests (including deletion of your account or wellbeing data), contact us at the email below and we will respond within the timeframes required by applicable law.
We implement appropriate security measures to protect your personal information and treat your data with care and respect, including transport encryption and access controls on our providers. No method of transmission or storage is completely secure; we encourage you to use a strong, unique password.
If you have any questions about our privacy practices, please contact us at privacy@elaria.app