Privacy Policy

Last updated: June 2026

This Privacy Policy explains what data Elio collects, why, and how you can control it. We are committed to your privacy and to compliance with the EU General Data Protection Regulation (GDPR).

1. Who We Are

Elio is operated by Daniel Reiter ("Developer", "we", "us"). For privacy enquiries, contact: d.boening@hotmail.de.

2. What Data We Collect

Data	Purpose	Legal basis (GDPR)
Email address	Account creation and authentication	Contract performance
Chat messages and goal content	Delivering the coaching service; generating AI responses	Contract performance
Goal profiles (AI-generated summaries)	Maintaining coaching context across sessions	Contract performance
Check-in schedules and notification preferences	Sending goal-specific reminders	Contract performance
Usage data (app interactions, error logs)	Improving stability and performance	Legitimate interests

We do not collect health or clinical data. Elio is not a medical product.

3. How We Use Your Data

Your data is used solely to operate the Elio service:

Authenticating your account
Sending your messages to the AI model to generate coaching responses
Storing your goal history so Elio can remember context across sessions
Delivering push notifications for check-in reminders you have set up

We do not sell your data. We do not use your conversations for advertising.

4. AI Processing

Your chat messages and goal summaries are sent to OpenAI to generate Elio's responses. OpenAI processes this data under their API data usage policies. API data is not used to train OpenAI's models by default. For details, see OpenAI's API Data Usage Policy.

5. Data Storage and Location

Your data is stored in the following locations:

Database (Supabase / PostgreSQL): EU region
Backend server (Fly.io): Frankfurt, Germany (eu-central)

All data is encrypted in transit (TLS). Data stored with Supabase is encrypted at rest at the infrastructure level per Supabase's platform security.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data — including your chat history, goal profiles, and email — is permanently and immediately deleted. There is no recovery once deletion is initiated.

7. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights:

Access: Request a copy of the data we hold about you.
Rectification: Ask us to correct inaccurate data.
Erasure: Delete your account and all associated data from within the App, or by emailing us.
Portability: Request an export of your data in a machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at d.boening@hotmail.de. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

8. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Authentication and database	supabase.com/privacy
OpenAI	AI language model (chat responses)	openai.com/privacy
Fly.io	Backend hosting	fly.io/legal/privacy-policy
Apple / Google	Payment processing (subscriptions)	Apple Privacy Policy / Google Privacy Policy

9. Children's Privacy

Elio is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For any privacy-related questions or requests: d.boening@hotmail.de