Privacy Policy

We collect the categories of information described below. We only collect what is needed to operate the Service.

a. Account & Personal Information

• Email address (used for authentication and account recovery)
• Password (stored as a salted hash by our authentication provider — never in plaintext)
• Display name or nickname you choose to provide
• Locale, language and unit preferences

b. Health & Wellness Information

Elumira is a wellness application. When you choose to log the following, we store it in your account so we can provide personalised support:

• Menstrual cycle data (period start/end, flow, cycle length, symptoms)
• Mood, energy and reflection entries
• Sleep, workouts, steps, weight and body measurements you enter manually
• Meal logs, nutrition information and portion data
• Food allergies, dislikes and life-stage information you provide
• Wellness goals and self-reported medical context

c. AI Conversation Data

When you interact with the AI coach or chat, we store the messages you send and the AI responses so we can maintain conversation history, provide continuity, and improve safety. You can clear this history at any time from Settings > Privacy.

d. Images Uploaded for Meal Scan

If you use the meal-scan feature, the image you upload is sent to our AI processor solely to detect food items and estimate nutrition. Meal-scan images are used only for that request and are not retained by us for training. Extracted nutrition data may be stored in your meal log if you save it.

e. Device & Technical Information

• Device type, operating system and browser
• Screen size and locale
• IP address (transiently, for security and abuse prevention)
• Crash and error diagnostics

f. Analytics

We collect aggregated, anonymised usage analytics (screens viewed, feature usage counts, session duration). These metrics do not contain your wellness data, chat content or health logs. See our Privacy Promise for details.

g. Cookies & Local Storage

The Service uses first-party local storage and cookies to keep you signed in, remember your language / theme preferences, and cache offline data. We do not use third-party advertising cookies or cross-site tracking pixels.

• To create and secure your account
• To provide cycle tracking, nutrition, mood and coaching features
• To generate personalised AI responses grounded in the information you provide
• To detect abuse, spam and rate-limit abuse of AI endpoints
• To improve reliability, fix bugs and monitor crashes
• To communicate essential service messages (e.g. account, security)

We do not sell your personal data or health information, and we do not use it for advertising.

We use a small number of trusted infrastructure providers, each bound by contractual data-protection obligations:

• Supabase — authentication, database and storage hosting. Data is stored in encrypted, access-controlled infrastructure.
• Google Gemini (accessed via the Lovable AI Gateway) — generates AI coach responses and meal-scan analysis. Prompts sent to Gemini include only what is needed to answer your request. Gemini providers may temporarily process request content to generate a response; we do not permit use of your content for training under our gateway configuration.
• Cloudflare — edge hosting and DDoS protection.

We do not share your data with advertisers, data brokers, or analytics vendors that build cross-app profiles.

• Consent — for optional health and wellness logging you provide.
• Contract — to deliver the Service you signed up for.
• Legitimate interests — to keep the Service secure and reliable.
• Legal obligation — to comply with applicable law.

Health data is treated as a special category of personal data and is processed based on your explicit consent, given by choosing to log it.

We retain your data for as long as your account is active. Specific categories:

• Account & profile data: retained until you delete your account.
• Wellness & cycle logs: retained until you delete individual entries or your account.
• AI chat history: retained until you clear it in Settings > Privacy or delete your account.
• Crash / error diagnostics: retained for up to 90 days.
• Aggregated analytics: retained indefinitely in anonymised form.
• Meal-scan images: not retained beyond the request.

You can permanently delete your account and all associated personal data at any time from Settings > Privacy > Delete account. Deletion removes your profile, cycle logs, mood entries, reflections, meal logs, wearable entries, chat history and any related user-owned records. Deletion is irreversible.

Backups may retain data for up to 30 days before being overwritten in the ordinary course of business.

You can export a machine-readable copy of your data (JSON) at any time from Settings > Privacy > Export my data. The export includes your profile, cycle data, mood and reflection logs, meal logs, wearable entries and other user-owned records.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to erasure")
• Export your data ("data portability")
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, use the in-app controls or email privacy@elumira.app.

Elumira is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please email privacy@elumira.app and we will delete it.

• Data is transmitted over HTTPS/TLS.
• Data at rest is stored in encrypted, access-controlled infrastructure.
• Row-level security policies restrict database access so that users can only read and write their own records.
• Passwords are salted and hashed by our authentication provider.
• AI endpoints are rate-limited to prevent abuse.
• Prompts sent to AI providers are sanitised against injection.

No system is 100% secure. If you believe your account has been compromised, contact us immediately.

Our processors may store or process data outside your country of residence, including in the United States and the European Union. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

We may update this Policy from time to time. When we do, we update the "Last updated" date at the top and, for material changes, notify you in-app or by email before the change takes effect.

Privacy questions or requests: privacy@elumira.app

General contact: hello@elumira.app