Privacy Policy

Who we are

The controller of your personal information is:

You can contact us at this address about anything in this policy, including requests to exercise your privacy rights.

Information we collect

Information you give us

• Account information: email address, name or username and a password (stored only in hashed form) when you create an account.
• Content: information you enter, upload or create inside an app.
• Communications: messages, feedback, feature requests and bug reports you send us, including your email address and any attachments.

Information collected automatically

• Device and technical data: device model, operating system and version, app version, language, time zone and IP address.
• Diagnostics: crash logs and performance data used to find and fix problems.
• Usage data: how features of an app are used, such as screens opened and actions taken, used in aggregated form to improve the product.

Purchase information

Subscriptions and in-app purchases are processed by Apple or Google. We receive limited information from them, such as a transaction identifier, the product purchased, subscription status, dates, country and currency. We never receive or store your full payment card details.

This website

This website does not use cookies, analytics, advertising pixels or third-party trackers. Fonts and assets are served from our own server. Our web server keeps standard access logs (IP address, browser user agent, requested page and time) for security and troubleshooting.

How we use information

• to provide, operate and maintain the Services and your account;
• to process subscriptions, verify purchases and restore access on new devices;
• to respond to support requests, feedback and bug reports;
• to diagnose problems, maintain security and prevent fraud and abuse;
• to improve existing features and develop new ones, using aggregated or de-identified data where possible;
• to send service messages such as security notices or changes to these terms;
• to comply with legal obligations and enforce our terms.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

Legal bases (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Services you request); legitimate interests (security, fraud prevention, product improvement and support, balanced against your rights); consent (where we ask for it, which you may withdraw at any time); and legal obligation (for example tax and accounting records).

How we share information

We develop and operate our products in-house. We share personal information only in these cases:

• Service providers that host our infrastructure or deliver email and crash reporting on our behalf, under contracts that restrict their use of the data to providing services to us;
• Apple and Google, as the platforms that distribute our apps and process payments, under their own privacy policies;
• Legal requirements, when required by law, court order or to protect the rights, property or safety of our users, the public or us;
• Business transfers, in connection with a merger, acquisition or sale of assets, with notice to you where required.

International transfers

We are based in the United States and our infrastructure may be located in the United States and other countries. When we transfer personal information from the EEA, the UK or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Data retention

• Account data and content: kept while your account is active and deleted within 30 days after you delete your account.
• Backups: deleted data is purged from backups within 90 days.
• Purchase and transaction records: kept as long as required for tax and accounting law, generally up to 7 years.
• Support correspondence: kept for up to 2 years after the conversation ends.
• Website server logs: kept for up to 30 days.

See Account deletion for how to delete your account and data.

Security

We protect information with encryption in transit (TLS), encryption at rest where supported, strict access controls and the principle of least privilege. Because we do not outsource development or transfer infrastructure access to third parties, only our own team works on our code and systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information;
• receive your information in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting prior processing.

California and other U.S. states: you have the right to know, access, correct and delete personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any right, email owner@elizabethsolutions.com from the address linked to your account. We may need to verify your identity. We respond within 30 days (45 days where U.S. state law allows). You also have the right to lodge a complaint with your local data protection authority.

Children

Our Services are not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

Third-party services and links

Our Services may link to or rely on third-party services such as the App Store and Google Play. Their handling of your information is governed by their own privacy policies.

Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify you in the app or by email before the changes take effect.

Contact