Privacy policy

ai.elefant helps you save, organize, and revisit your memories with the help of an AI companion. To do that, we need to store some of your data and send parts of your chats to Google, the company that makes Gemini. Because the app is about the people in your life, some of what you store is about them, not only about you, and there's a section below on how we handle that. We don't sell anything, we don't train models on your memories, and you can delete it all whenever you want. The rest of this page is the long version.

Three things, and nothing else. First, account information: your name and email address, used to sign you in and contact you about your account. Second, your memories and chat messages, the names, facts, moments, and conversations you share with your Elefant. Third, basic app usage, which screens you open and which features you use, so we can fix what's broken and improve what isn't. We don't collect your contacts, your location, your photos, or anything you haven't explicitly handed us.

Your account information is used to operate the app and reach you when we need to. Your memories and chat messages are used to generate the AI responses you ask for, and to show your memories back to you when you return. Your app usage helps us understand which parts of ai.elefant are working and which need attention. That's it. We don't profile you, we don't build advertising audiences, and we don't share your data with third parties for their own purposes.

ai.elefant is a tool for remembering the people who matter to you, so by design it holds information about them: names, birthdays, things they like, moments you shared. Those people aren't our users, but their details still live in your account, and we take that seriously. We never use this information for anything other than running the app for you. We don't contact these people, build profiles of them, or share their details with anyone. Some of what you record may be sensitive, a friend's health, a family situation, a relationship. If you'd rather not keep sensitive details about someone in the app, simply don't add them. And if you are not one of our users but believe someone has stored information about you here, you can reach us at privacy@aielefant.com and we'll help (see Your rights below).

Under GDPR we need a clear reason for everything we do with your data. For your account and the memories you save, that reason is our agreement with you: you asked us to store and recall them, so we do. For basic app-usage analytics, we rely on your consent, which you give or withdraw from the app's settings at any time. For the details you record about other people, we rely on our legitimate interest in providing a relationship-memory tool, which by its nature holds information about the people in your life, weighed against those people's privacy. You can object to any of this, and you can ask us to stop.

Your memories are encrypted at rest on Supabase, in EU-region storage. Only you can read them. Row-level security is enforced on every table, which means even our own database can't hand your data to the wrong account.

ai.elefant's AI companion is powered by Gemini, an AI model built by Google. When you chat with your Elefant, the relevant parts of your message, and the context needed to give a good reply, are sent to Google's Gemini API to generate the response. This is the only way the AI features in the app can function.

Google processes your inputs solely to generate the response that comes back to you. Under Google's paid Gemini API terms, your inputs and outputs are not used to train or improve their models. This protection applies by default on the paid API tier that ai.elefant uses, and no opt-out is required. Google logs API inputs and outputs for a limited period, solely for abuse-monitoring and to meet legal or regulatory requirements. If you'd like to read the source, Google's terms are at ai.google.dev/gemini-api/terms. Sending your message to Gemini means it leaves our EU systems and is processed by Google, which may include processing outside the European Union. That transfer is covered by the European Commission's Standard Contractual Clauses, the safeguard GDPR requires for sending data abroad.

We keep the list of companies that process data on our behalf short and deliberate. Supabase hosts your account and memories in the EU. Google provides Gemini, as described above, and also the analytics and crash reporting that tell us what's broken. Each of them acts only on our instructions under a data processing agreement, and none of them may use your data for their own purposes. If this list changes in a way that matters, we'll update this page.

We don't sell your data. We don't share it with advertisers. We don't read your memories, except when our AI is generating a response, at which point only the relevant parts are sent, and nothing is logged on our end beyond what's needed to make the app work.

Your memories stay in your account for as long as your account exists. Delete a memory and it's removed from our active systems immediately, and from our encrypted backups within 30 days. Delete your account and everything goes: memories, chats, profile, the lot within the same window. Google's abuse-monitoring logging runs independently and is outside our control, but no new data is sent there once you delete.

Under GDPR, you can export everything you've stored, correct anything that's wrong, restrict how we process it, object to processing, or have it permanently deleted at any time, from the Settings screen in the app. We comply within 30 days. If you'd rather not use the in-app controls, email us and a human will handle it. These rights aren't only for our users: if you believe someone has stored information about you in ai.elefant, write to privacy@aielefant.com and we'll help you see, correct, or remove it, while protecting the privacy of the person who saved it. You also have the right to lodge a complaint with your local data protection authority if you think we've mishandled your data.

ai.elefant isn't designed for children. We don't knowingly collect data from anyone under 16. If you're a parent or guardian and believe your child has signed up, write to us and we'll delete the account and everything in it.

If we change anything material, we'll email you before the change takes effect and update the date at the top of this page. Small clarifications and typo fixes won't trigger a notice.

Write to privacy@aielefant.com. A real person will reply.