Privacy Policy

Who we are

Eligna is a personal life coordination app that helps you follow through on your goals, habits, and daily life. It is operated by TRANSLOGISTIKA ES Ltd (“Eligna”, “we”, “us”). This policy explains what we collect, why, who else is involved, and what control you have. It should be read together with our Terms and Conditions, our Cookie Policy and our Acceptable Use Policy. Our full company details are at the end of this policy.

Questions or requests: privacy@eligna.app.

Who can use Eligna

You must be at least 13 to use Eligna. People aged 13 to 17 can have a Teen Account once a parent or legal guardian has approved it; the section “Teen accounts” below explains what is different for them. Teen Accounts are not available in Brazil, or on our website for people in the United States.

If you tell us at sign-up that you are under 13, we do not create an account and we keep nothing you entered. If you started with Google or Apple, the sign-in record that creates on our side is deleted at the same moment. If we later learn that an account holder is under 13, we close the account and delete its data, including the record we otherwise keep to stop repeat free trials.

What we collect

• Account: your email address and display name.
• Profile picture, if you add one: a photo you upload, or, if you sign in with Google, a link to the picture on your Google account. Anyone with the link to a photo you upload can open it, which is how the other members of your household see it. We delete it when you upload a new one, remove it, or delete your account.
• Time zone: your device’s time zone, saved to your account automatically, so reminders and daily summaries arrive at the right time where you are.
• Age range, if you give it: an optional range you can choose or clear in Account and Preferences, which we only ever look at as totals across everyone, on your consent, and never work out from your date of birth.
• Date of birth: asked of everyone at sign-up, because the rules depend on age: under 13 cannot use Eligna, 13 to 17 have a Teen Account, and a Teen Account becomes an adult account on the 18th birthday. We use it for those age rules and for nothing else: not for marketing, and not for statistics about our users.
• Gender (optional): if you choose to tell us at sign-up. It is never required, and for adults it is used only in grouped totals to understand who uses Eligna. A Teen Account holder’s gender is never used that way. To change or remove it, write to privacy@eligna.app.
• Correcting your date of birth: it is not changed in the app, because the age rules depend on it. If it is wrong, write to privacy@eligna.app; we may ask for something that shows your age before we change it. On a Teen Account we ask your Parent to confirm it instead, and we never ask a teen for identity documents.
• Parent approval (Teen Accounts): your Parent’s email address if you ask them from the app, and a record of their approval: who gave it, when, and the wording they agreed to.
• Your personal content: habits, goals, tasks, journal entries, contacts, and personal finance records you create.
• Household content: chores, shopping lists, meals, plants, household finance records, admin notes, and messages in the household chat (with your replies, edits and reactions) that you create or contribute to as part of a household. The chat also records when you last read it.
• Subscription and billing data: the plan you choose, your subscription and trial status, and, for purchases made on the web, billing information processed by Stripe (we do not store your full card number). If you add a card during a free trial, Stripe keeps it and takes the first payment on the day the trial ends; nothing is charged before then. For purchases made through the Apple App Store or Google Play, Apple or Google process your payment and we receive confirmation of your subscription status, not your card details.
• Referral data: if you take part in a referral programme, your referral code and records of referrals and rewards.
• Receipt images: if you scan a shopping or bill receipt, we store the photo, and our AI provider reads it so we can show you the items and total. Receipts can be payment-adjacent, in that they may show what you bought and the amount. Only the last 10 per household are kept (see Keeping and deleting your data).
• Plant photos: if you scan a plant to check on it, our AI provider reads the photo, and it becomes that plant’s picture in your household.
• Device tokens: if you enable push notifications, a token used to deliver them.
• Cancellation answers: if you cancel a paid plan in Eligna, the reason you choose and anything you write, and the plan you left.
• Support requests: if you contact us through the support form, the topic you choose, your message, and the email address to reply to.
• Feedback card: from time to time Eligna asks, in a short pop-up, one question about what got in your way. If you answer, your answer reaches us as a support request, with your name, email, your household’s name and number of members, and, if you are on a free trial, which day of it you are on, so we can understand the answer in context.
• Feedback on AI replies: if you use the “Give feedback” link under the AI chat, your message reaches us as a support request, and we include a reference to the conversation it came from so we can look into what went wrong. The reference is an identifier for the conversation, not a copy of it. Your conversations are saved to your account (see below), but we do not open one unless your message asks us to look into it.
• How you found Eligna and how you set up: we keep how you first found Eligna (the campaign tags on the link you used, or on the Google Play link that installed the app, and whether you signed up on the web, Android or iPhone) and your answers when you set up, with your account, to see which channels and set-ups help people most. We report them only as totals. Until you create an account, the tags stay on your device. When you tap one of our links to the app stores, we count the tap with its campaign tags and the kind of device, and nothing that identifies you.
• AI credit counts: how many AI credits you use each month, counted by kind of task (chat, photo scans, insights, journal summaries), to apply your plan’s allowance and to show you where your credits went.
• Analytics and diagnostics: if you consent, product-usage events and (optionally) session replays. Error diagnostics are collected regardless of consent, and are minimised. See the sections below.

Special category data

Eligna has no fields for special category data (sometimes called sensitive data), such as health, religious or philosophical beliefs, and we do not ask you for it. However, some features are free text, notably the journal, and also AI chat, habits and goals, so you may choose to write things that touch on your health, mood or beliefs. We recognise that reflective free-text content like this can amount to special category data even though there is no field for it.

Where you enter such content, it is user-generated and stored as part of your normal personal data. We do not use it to profile you or to make automated decisions about you, and we do not share it with anyone else in your household.

Because what you write in the journal or the AI chat can reveal your health or other special category information, we store and process it on your explicit consent under Article 9(2)(a) of the UK and EU GDPR. Your journal is stored privately on your account, and only you can read it. Nobody else in your household can see it. Each of the two asks once, in its intro card the first time you open it, and we record the wording you saw, its version and when you agreed. You can withdraw it at any time in Account & preferences. Withdrawing for the journal stops new entries and, after offering you a copy, deletes the existing ones; withdrawing for the AI chat stops the chat and deletes its saved conversations. The rest of Eligna is not affected.

Letting our AI assistant read your journal entries and summarise them is a further, separate explicit consent under Article 9(2)(a), because that sends what you wrote to a third party and creates new information about you. Agreeing to keep a journal does not give it, and we obtain it properly rather than inferring it:

• It is off by default. Until you turn it on, the assistant does not read your journal, and knows only how many entries you have and how recently you wrote.
• When it is on, the assistant reads each new or edited entry once, writes a summary of two or three sentences, and saves it with that entry. You can read, edit or delete any summary. In conversations the assistant uses the summaries, never the full entries.
• Turning it on requires a separate, affirmative confirmation in the app, on its own, not bundled into accepting these policies or the Terms. The confirmation tells you what is shared, who it goes to, and that you can change your mind.
• We record that consent: the exact wording you were shown, its version, where you gave it, and when. That is how we can show the consent was informed rather than assumed.
• You can withdraw it at any time in Profile, in one tap, and it takes effect immediately. Withdrawing deletes every summary the assistant has written and stops it reading your entries. It does not delete any of your entries.

The same care applies to the statement about who you are that you can write in Profile (see AI context below). If that statement looks as though it mentions your health, beliefs, relationships or other special category information, the assistant does not receive it unless you have switched on Remember sensitive details. That switch is its own explicit consent under Article 9(2)(a), separate from journal insights, given and recorded in the same way, and you can withdraw it at any time in one tap.

You can edit or delete this content at any time, and deleting your account removes it.

Teen accounts (13 to 17)

Who approves it. A Teen Account only works once a parent or legal guardian approves it from their own adult account. Your parent must be in the household you join, and a Teen Account is in one household only; if your parent is not its admin, the admin also lets you in. Another adult with parental responsibility for you can add their own approval at any time. Until they approve, we keep only your sign-in details, your date of birth (and gender, if you gave it) and your parent’s email address. We keep a record of the approval.

What is switched off. The AI assistant and AI photo scans are designed for adults and are off on a Teen Account, so nothing you write is sent to our AI provider. Teen Accounts are excluded from product analytics, session replay, marketing emails and promotional notifications. There are no purchases, free trials or referrals.

The journal’s consent. The journal asks for explicit consent before it stores anything (see “Special category data”). On a Teen Account it is asked once, as a tick when you ask your parent, with the same sentence as the journal’s card. Below the age at which the law of your country lets you give it yourself, your parent’s approval includes it; we use 16, the highest such age in the EU, because we do not record your country. The journal’s AI layer, where the assistant reads entries to summarise them, is not available on a Teen Account.

What stays private. Your habits, goals, tasks, journal and personal finances are private to you, exactly as for adults. Your parent cannot see them.

Our lawful basis. Your parent or guardian’s approval does two things: it is their consent to you using Eligna, which the law needs below a certain age, and it is them accepting our Terms on your behalf. We rely on that and, where the law of your country lets someone your age agree for themselves, also on our contract with you.

Who runs your household. A Teen Account holder is never a household’s admin. If only Teen Account holders are left in a household, its shared things are locked and we email the parents. If your only approving parent closes their own account, you have 30 days for another adult with parental responsibility for you (your other parent, a step-parent or a guardian) to approve you; we tell you and your household’s admin by email, a phone notification and in Updates.

Your rights. You can use all the rights in “Your rights” yourself, and ask us anything directly at privacy@eligna.app. Your parent can remove your account, which deletes it and its data, or withdraw their approval (you can then download a copy of your data for 14 days). We never give your parent what is in your private spaces.

Turning 18. On your 18th birthday your account becomes an ordinary adult account. Your data stays, your parent’s approval is no longer needed, and the switched-off features become available, each one off until you choose it.

How we use your data, and our lawful bases

• To provide the Service (run the app, sync your data across devices, operate Households): to perform our contract with you.
• To keep your journal, and to keep and answer your AI chat conversations: on your explicit consent under Article 9(2)(a), asked in each one’s intro card (see Special category data above).
• To personalise the AI assistant with context relevant to you: to perform our contract, and, for reading your journal entries and using their summaries, or for sending a statement about yourself that mentions special category information, on your separate explicit consent.
• To take payment and manage subscriptions, trials and referrals: to perform our contract and to comply with legal (including tax and accounting) obligations.
• To send push notifications you have enabled, and to send you service, security and billing emails: to perform our contract; push notifications rely on your consent, which you can withdraw at any time in the app’s notification settings, or in your device or browser settings.
• To send you marketing emails (product news, tips and offers), only if you have turned this on: on your consent. It is off unless you switch it on, when you sign up, at the end of setting up Eligna, or in Account and Preferences, and it counts from the moment you tick it: we do not send a separate email asking you to confirm. It is separate from the service, security and billing emails above (which you receive regardless because they are not marketing), and you can opt out at any time in the same place, which takes effect immediately. Once you have said yes, these include a few emails in your first month about getting the most from Eligna, and one if you have been away for three weeks. They are written from how you use Eligna (which areas you have tried, a habit’s name, how many things you or your household finished, when your trial ends), never from the words of your journal or your messages. We keep a dated record of the wording you agreed to.
• To know whether our emails arrive and help: for account emails (sent through Resend) and marketing emails (sent through Brevo), we record whether each one was delivered, opened and clicked, on our legitimate interest in knowing that our emails reach you and are useful; we use this only for that, never to build a profile of you.
• To keep the app reliable and secure: for our legitimate interests in running a secure, working service.
• To run Teen Accounts: on the consent of the teen’s parent or guardian and, where local law allows, our contract with the teen (see “Teen accounts”).
• To apply the age rules (date of birth): to perform our contract and to meet our legal obligations towards children. It is used for nothing else.
• To understand who uses Eligna (gender, if given, in grouped totals, adults only): for our legitimate interest in knowing our users; you can object at any time, or simply remove it.
• To see which channels and set-ups help people (how you found Eligna and how you set up, reported only as totals): for our legitimate interest in improving the Service and in knowing where to spend our effort. It does not depend on the analytics choice, because it is kept with your account rather than sent to an analytics provider. You can object at any time by contacting us, and it is deleted with your account.

Improving Eligna

We look at how Eligna is used so we can decide what to build and fix next. This is an ongoing part of how we develop the product. Where this uses product analytics or session replay, it runs only if you have turned it on (see the next section), and we rely on your consent. Where we look at usage in an aggregated or de-identified way, or use minimised diagnostics to understand reliability, we rely on our legitimate interest in improving the Service. We do not use this to advertise to you or to make automated decisions about you, and you can object to legitimate-interest processing at any time.

Analytics, session replay, and error monitoring: you are in control

Analytics and session replay are off until you switch them on, and you can change your mind at any time in Cookie preferences. We keep what is collected to a minimum, we do not use advertising or cross-site tracking, and we do not sell your data. Teen Accounts are excluded from analytics and session replay. Error monitoring applies to everyone, because it keeps the app working, and it is kept minimal.

• Product analytics (your choice, off by default): if you turn it on, we record which pages and features are used, through PostHog (stored in the EU), so we know what to improve. To group activity into a session, this includes a device or session identifier and your account id and email. Nothing runs until you turn it on, and declining does not change how the app works.
• Session replay (a separate choice, off by default): if you turn it on, we capture a recording of how the interface responds while you use it, so we can find confusing screens and bugs. It can only be enabled if analytics is also enabled. Your text, form fields and photos are masked before anything leaves your device. It uses PostHog (EU) and Sentry (US) and stops as soon as you turn it off. We keep these recordings for a limited time, set out under Keeping and deleting your data below.
• Error monitoring (always on, kept minimal): when something crashes, a small technical error report is sent to Sentry so we can fix it. This keeps the app reliable and secure, and runs on that legitimate-interest basis rather than consent. It is deliberately minimal: no IP address, and no record of your clicks, typing, or the details in page addresses. You can object by contacting us.
• Operational events (always on, never content): a few events are recorded on our servers whatever you choose above, because they are part of running the service rather than measuring how you use it: the size and cost of each AI request, a free trial being extended when someone joins your home, a home becoming active, and a referral reward being given, refused, or flagged because one account collected several in a short time. They are linked to your account id, and for household events to your household’s id. They contain nothing you wrote and no special category data, and rest on our legitimate interest in running the service and keeping its costs in check. You can object by contacting us. Events about your subscription are recorded only if you accepted analytics.

Before you create an account. If you accept analytics, we collect anonymous product-usage and page-view events through PostHog. These are not linked to your identity. They are associated only with a temporary device identifier, never your name or email. If you go on to create an account, we connect this activity to your account. If you never create an account, these events stay anonymous and cannot be traced back to you.

Who processes your data

We use a small set of service providers to run Eligna. Each only receives what it needs for its job.

• Supabase: our database, sign-in, file storage, and backend. Receives your account and all app content. Location: European Union (Frankfurt, Germany).
• Google Cloud (Vertex AI): runs the AI assistant for us. Receives, when you use AI: your name, your message, recent chat history, your statement about who you are if you have written one, a summary of your goals, habits, tasks and this week’s reflection, what is on your Today page, the names of the people you plan to see or are due to catch up with, your household’s name and the chores, meals, plants and admin items coming up in it, a summary of your money in totals only (this month’s spending, how much of each budget is used, savings goals and your net balance in the household, never the amount of a single payment), the country your connection comes from so it can name the right helpline, and the photos you ask it to read (receipts, bills and plant photos); and, only if you have switched on journal insights, the words of new or edited journal entries (to write their summaries) and those summaries. Location: Google Cloud in the European Union. Google keeps the request and the reply for up to 30 days to check for abuse of the service, then deletes them, unless a safety investigation or the law requires otherwise. Google does not use this data to train its models. The models themselves, Anthropic’s Claude models, are built by Anthropic, but your messages go to Google rather than to Anthropic, so Anthropic is not a processor of your data.
• PostHog: product analytics and session replay (only if you consent). Receives usage events, page views, and your account id and email as an identifier. Location: European Union (EU cloud).
• Sentry: error monitoring, and session replay (only if you consent). Receives crash and error reports; session replays only with your consent. Location: United States (data stored in Sentry’s US region, even though received through an EU endpoint).
• Stripe: handles payments when you subscribe on the web. Receives your payment details, email, and name. Location: United States.
• Google (Firebase Cloud Messaging): delivers push notifications to your devices and browser, if you enable them. Receives your device token and the content of each notification (for example a chat preview or a reminder title). Location: United States / global, under Standard Contractual Clauses in the Google Cloud Data Processing Addendum.
• Google (Google Analytics), for our website only. Counts visits to our public website, and only if you allow it in the cookie banner. Receives: the pages you visit on the website, the site that sent you, your device and browser type, and your approximate country. It does not receive anything from inside the app, and Google signals and advertising features are off. Lawful basis: your consent, which you can withdraw at any time with Cookie settings at the foot of every page. Kept for 2 months. Google Ireland Limited provides the service; data may be processed by Google LLC in the United States, under Google’s data processing terms, which include the EU Standard Contractual Clauses, and Google LLC’s certification under the EU-US Data Privacy Framework.
• Resend: sends transactional email (receipts, password resets, service and billing notices, and household invites you send). Receives the recipient email address and the message content. Location: United States.
• Brevo (Sendinblue SAS): sends marketing email, and only if you have asked for it. Receives your email address, whether you are opted in and, for each email it sends you, that email itself: your first name and what the email says about how you use Eligna, such as a habit’s name, how many things you finished or when your trial ends. Location: European Union (core infrastructure in France and Belgium). Brevo uses its own providers outside the EU, covered by Standard Contractual Clauses and the EU-US Data Privacy Framework. Marketing email is entirely separate from the service email above: turning it off never affects receipts, security or account messages.
• Cloudflare: runs the anti-bot check (Turnstile) on sign-in and sign-up. Receives your IP address and interaction signals, to tell humans from bots. Location: United States / global.
• Vercel: hosts the app and runs our server functions. Receives standard request data (IP address, browser headers). Location: European Union (Frankfurt, Germany). Vercel is a US-headquartered provider, so any access from outside the EU is covered by Standard Contractual Clauses.
• Apple and Google: where you subscribe through the App Store or Google Play, they process your payment and manage the subscription under their own privacy policies.

AI context and our AI provider

The Eligna AI assistant is powered by Anthropic’s Claude models, run for us by Google Cloud (Vertex AI) on servers in the European Union. When you send a message, we send it your name and message, your recent conversation (the last exchange in full, and short notes on up to 20 exchanges before it), and a summary of your active goals, habits, pending tasks, this week’s reflection, the people you are due to see, what is coming up in your household, and your money in totals only (spending this month, budgets, savings goals and your net household balance). It replies in the language you write to it in.

If you have switched on journal insights in Profile, the assistant reads new or edited journal entries once to write a short summary of each, and uses those summaries, never the full entries, in your conversations. Without it, the assistant knows only how many journal entries you have and how recently you wrote.

If you write a statement about who you are, Eligna’s assistant receives it with your messages so its suggestions fit you. You can stop this at any time with ‘Remember things about me’ in Profile. A statement that mentions your health, beliefs, relationships or other special category information is not sent unless you have turned on ‘Remember sensitive details’.

If you speak to the assistant instead of typing, your device’s or browser’s own speech recognition (for example Apple’s or Google’s) turns your voice into text under its provider’s terms. Eligna receives only the text.

Other household members’ personal data is never included. Your conversations are saved to your account on every plan, as described below. Neither Google nor Anthropic uses this data to train their models. Google keeps the request and the reply for up to 30 days so it can check for abuse of the service, after which they are deleted, unless they are needed for a safety investigation or the law requires them to be kept. We tell you which kinds of content are AI-generated rather than labelling each item: the assistant announces itself, and the AI disclosure page names the classes (illustrations, meal and plant imagery, generated suggestions). See our Terms and the AI disclosure page.

Your conversations with the assistant are saved to your Eligna account, so they follow you to any device you sign in on. They are stored in the European Union (Supabase, Frankfurt), and only you can see them; other members of your household cannot. Each conversation is deleted automatically 12 months after its last message. You can delete any conversation sooner from the chat history, and deleting your account deletes them all. Two things are recorded on our side: how many AI credits you use each month and on what kind of task, to apply your plan’s allowance, and, if you send feedback about a reply, a reference to the conversation you were in. The chat carries a standing note that you are talking to an AI and that it can be wrong, because you are entitled to know which of the two you are dealing with.

Household data and other members

If you are part of a household, other members can see shared data: chores, shopping lists, meals, plants, household finance records, admin notes, and the household chat, including whether you have read the latest messages (shown as “Seen by”). In the same way, while you have the household chat open, and while you are typing in it, the other members of your household can see that you are there and that you are typing; this is not stored or counted. When a message in the household chat is reported, a moderator reads it, up to 10 messages before and after it from that household’s chat, with the names of who sent them, and what the person who reported it wrote, to decide. Messages already deleted are shown as deleted. Each time a moderator opens a report, that is recorded. If you edit or delete a message in your household chat, we keep its earlier wording for up to 90 days, seen only by our moderators, so we can deal with reports. If a report about that message is open, we keep it until the report is closed. We do this on the basis of our legitimate interest in keeping Eligna safe. Your personal data (habits, goals, tasks, journal, personal finance) is always private and is never visible to other members. If you enter data about other people, or invite someone to a household, please see the Terms and Conditions for your responsibilities.

Where your data is

Your account and app content are stored in the European Union (Supabase, Frankfurt), our server functions run in the EU (Vercel, Frankfurt), and product analytics is processed in the EU (PostHog).

The AI assistant runs in the European Union and your messages to it are not transferred to the United States. Some other processing still happens in the US: payments (Stripe), push notification delivery (Google Firebase Cloud Messaging), transactional email (Resend), the sign-in anti-bot check (Cloudflare), and error monitoring and session replay (Sentry, whose data is stored in the US even though received through an EU endpoint). These transfers rely on safeguards approved for transfers outside the EU. Stripe and Sentry (legal entity Functional Software, Inc.) are certified under the EU-US Data Privacy Framework. Cloudflare, Google, Resend, and Vercel rely on Standard Contractual Clauses. Supabase and PostHog store your data in the EU and use Standard Contractual Clauses for any access from outside it. Sign-in, payments, and email are needed to run those parts of the service. If you allow analytics on our website, Google may process those visit counts in the United States (see Google Analytics above).

Security

All data is encrypted in transit using HTTPS. Access to your data is restricted by row-level security tied to your account, so members of one household cannot read another’s, and your personal data stays yours.

So the app opens quickly and keeps working without a connection, it keeps a copy of your recent data on your device, together with any changes you make while offline until they are sent. That copy is cleared when you sign out.

Keeping and deleting your data

We keep your data while your account is active. When you delete your account, your personal data is permanently removed: your profile picture, habits, goals, tasks, journal entries, contacts, personal finance records, AI chat history, and device tokens.

Session replay recordings, if you turn replay on, are kept for a limited period and then deleted automatically by each processor: 30 days by PostHog (EU), and up to 30 days by Sentry (US) on our current plan. If our Sentry plan changes this may be longer, and we will update this policy. Turning replay off stops new recordings, and any existing recordings are deleted at the end of these periods or when you delete your account, whichever comes first.

Scanned receipt images are kept on a rolling basis: only the last 10 per household are stored, and older ones are deleted automatically when a newer one is scanned. They are stored in the EU (Supabase), scoped to your household, and are removed when you delete your account.

AI conversations are deleted 12 months after their last message, or sooner if you delete them or your account.

Support requests, including answers to the feedback card, are kept for 5 years after you send them, in case they relate to a question or a dispute about your account. After that we remove your name, email and household details and keep only the text, which can then no longer be linked to you.

Cancellation answers are kept after you delete your account, without the link to it, because the answer is the reason we ask.

The earlier wording of a household chat message you edit or delete is kept for up to 90 days, and longer while a report about that message is open (see Household data and other members).

If you sign up but never confirm your email address, we delete the account and everything in it 7 days after sign-up.

Teen Account approvals. We keep the record of a parent’s approval while the Teen Account exists and for 6 years after it closes or becomes an adult account, so we can show the approval was given if anyone later asks, and then delete it. A request a parent never approved is deleted as soon as the Teen Account is closed. When a parent removes a Teen Account, or we close one, its data is deleted as for any account.

We keep a limited amount of information after you leave, only where the law allows or requires it:

• Accounting and tax records, which may include your name, email and details of what you paid, kept for the periods Bulgarian law requires: payroll records for 50 years; accounting registers and financial statements for 10 years; other accounting source documents for 3 years; and VAT and tax invoices until 5 years after the statutory tax-limitation period expires (up to about 11 years).
• A minimal record to prevent abuse and fraud, including a one-way “hashed” version of your email, so that free trials and referral rewards cannot be repeatedly claimed by deleting and recreating accounts. This is kept on the basis of our legitimate interest in preventing abuse, and is not used to contact you.

Shared household items you contributed stay visible to other members, but references to you are anonymised. Text you typed into shared fields (titles, notes, descriptions) may remain as written. You can delete your account any time from Account & preferences, then Account actions, then Delete account. Backups are cycled routinely, and deleted content is removed from them within our normal backup rotation.

Anonymous data collected before you had an account. Analytics events we collect before you create an account are stored against a temporary device identifier rather than your personal details. Because of this, we cannot single you out to retrieve or delete them individually. They are held under our analytics provider’s retention schedule and are not used to build a profile of you. Once you create an account, all of your account-linked data is fully covered by your access and deletion rights.

Your rights

As a UK or EU user, you have the right to: access a copy of your personal data; correct inaccurate data; erase your account and all associated data; receive your data in a machine-readable format (portability); ask us to restrict how we process your data; object to processing based on legitimate interest, including error monitoring and abuse-prevention; withdraw consent for analytics and session replay any time in Cookie preferences; and complain to a data protection authority.

To exercise any of these, contact privacy@eligna.app. We will respond within one month, as the law provides.

Eligna is operated from Bulgaria, so our lead supervisory authority is the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg). If you are in the UK, you can also complain to the Information Commissioner’s Office (ICO, ico.org.uk), and EU users may contact their own local authority.

Our UK representative. Because we are established in Bulgaria, we have appointed a representative in the United Kingdom under Article 27 of the UK GDPR: Tihomir Svetoslavov Simeonov, privacy@eligna.app (subject line “UK representative”). You and the ICO can contact our representative about anything to do with how we process your personal data.

Users outside the UK and EU

Eligna is offered from Bulgaria and is aimed mainly at users in the UK and EU/EEA, but the app is available on global app stores. Wherever you are, we apply the same core protections to your personal data, and we honour requests to access, correct or delete your data regardless of where you live. If you are in a country with its own data-protection law (for example the United States or India), you may have additional local rights; contact us at privacy@eligna.app and we will help, and comply with any additional rights the law of your country gives you.

Changes

If we make material changes to this policy, or add or change what we store or who processes it, we will update this page and, where it affects your choices, ask you again in the app.

Contact and company details

For questions about your data or this policy, contact privacy@eligna.app.

• Company: TRANSLOGISTIKA ES Ltd
• Unified Identification Code (UIC): 200606587
• Registered office: Vazrazhdane, 66, ap. 6, Varna 9025, Bulgaria
• Data protection contact: privacy@eligna.app