Privacy policy
Effective September 9, 2026 · Elja App LLC
Who we are: Elja App LLC, a Delaware limited liability company (“Elja,” “we,” “us”). Contact: contact@eljaapp.com.
Elja is a self-trust practice: one honest question a day, one small promise, and a record of whether you kept it. What you write and say inside Elja is the most personal thing we handle. This policy explains, in plain language, what we collect, why, where it goes, and how to take it back. It applies to the Elja apps (iOS, Android, web at app.eljaapp.com), the website eljaapp.com, and our emails.
Account. Your email address, a sign-in token, the language you chose, your time zone and reminder hour, your plan, and a record that you accepted these terms and confirmed you are 18 or older.
Your practice. The text of each reflection; a voice recording when you choose to speak instead of type; the transcript of that recording; each promise and whether you marked it kept, revised or released; the mission you are on and the day you are on; anything you import from another journal.
What Elja writes back. The short summary and themes after an entry, the Weekly Mirror, Proof of Becoming, reminders and check-ins. These are generated from your entries and stored separately from them.
Time Capsule (Elja Studio). A short video or audio message to yourself, sealed until Day 30. It is stored in a private bucket, is never transcribed, summarized or read by any AI, and is included in export and delete.
Sharing you choose. If you invite a Witness, we store their name and email and a record of each time they viewed your dots. A Witness sees only kept / revised / released by date — never a word you wrote. If you join an organization on Elja for Teams, your organization sees participation for groups of ten or more people only, never an individual and never an entry; this is enforced in our database, not just in policy.
Email course. If you sign up for Keep One Promise by email on our website, we store your email address, which day you are on, and an unsubscribe token. We never store your replies.
Device and usage. Push notification token (if you allow notifications), app version, device type and operating system, crash reports, and product events such as “reflection saved” or “mirror viewed.” Events never contain the content of an entry.
Payments. Subscriptions are bought through Apple or Google. We receive a confirmation of what you bought and when it renews or ends. We never see your card number.
We use your information to run Elja and keep your practice in one place (performance of our contract with you); to generate the read-back, Mirrors and Proof when AI processing is on (your consent, which you can withdraw in Settings); to send the reminders and emails you asked for (consent); to keep the service secure, fix crashes and understand which features are used (our legitimate interests, balanced against yours); and to comply with the law.
We do not use your reflections, recordings, promises, Mirrors or Time Capsules for advertising, for profiling, or to train or improve any machine-learning model, ours or anyone else’s.
We use a small number of service providers, each under a contract that limits them to doing the job described. None of them may use your content for their own purposes.
| Provider | What they do | What they receive |
|---|---|---|
| Supabase (United States) | Database, sign-in, file storage | Everything in section 2, encrypted in transit and at rest |
| Railway (United States) | Runs our server | Requests between the app and our server |
| OpenAI (United States) | Transcribes voice recordings; writes the read-back, Weekly Mirror and Proof | The recording or text being processed. We use settings that do not retain data for training. Only when AI processing is on |
| ElevenLabs (United States) | Reads Elja’s own lines aloud; on Practice Plus, reads your Weekly Mirror aloud if you tap play | The daily line (not personal); your Mirror text only when you choose to hear it |
| RevenueCat (United States) | Manages subscriptions with Apple and Google | An anonymous user id and purchase status |
| Resend (United States) | Sends sign-in links and emails you asked for | Your email address and the email content |
| Sentry (United States) | Crash reporting | Technical error details, never entry content |
| PostHog (United States) | Product analytics | Usage events with a random user id, never entry content |
| Webflow (United States) | Hosts eljaapp.com | Website visits and form submissions |
| Apple, Google | App distribution and payments | Governed by their own policies |
We may also disclose information if the law requires it, to protect someone’s safety, or in a merger or acquisition (in which case this policy continues to apply to your data, and we will tell you).
Our servers are in the United States. If you use Elja from elsewhere, your information is transferred to and processed in the United States under standard contractual safeguards.
We keep your data for as long as your account exists. When you delete your account, your account row, entries, recordings, Mirrors, Proofs, promises, Witness grants, Time Capsules and consent records are deleted immediately from our live database and purged from backups within 30 days. Subscription records are kept by Apple, Google and RevenueCat as long as they require for tax and fraud purposes. Email-course subscriptions are deleted when you unsubscribe or on request.
All of these are inside the app, under Settings, and work instantly without emailing anyone:
Depending on where you live, the law may also give you the rights to access, correct, restrict, port or object to how we use your information, and to complain to a data protection authority. You can exercise any of these by using the controls above or by emailing contact@eljaapp.com. We will answer within 30 days and we do not discriminate against you for using your rights.
California residents. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the past twelve months. The categories we collect are listed in section 2.
European Economic Area and United Kingdom residents. Elja App LLC is the controller. Our legal bases are in section 3. Transfers to the United States rely on the Standard Contractual Clauses and the UK Addendum.
Everything is encrypted in transit (TLS) and at rest. Your recordings and Time Capsules live in private storage that only your account can open. Access to production systems is limited to the people who run Elja and is logged. Elja is not end-to-end encrypted: our server has to read an entry to generate a Mirror from it, and we say so plainly rather than promise something we can’t keep. If we ever have a breach that affects you, we will tell you and the relevant authorities as the law requires.
Elja is a reflection practice. It is not therapy, medical care, or crisis support, and nothing it writes to you is a diagnosis or treatment. If you write about wanting to hurt yourself, Elja will show you resources and a way to reach a person instead of a generated reply. If you are in danger, contact local emergency services.
Elja is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it. If you believe a minor has an account, email contact@eljaapp.com.
When we change this policy in a way that matters, we will tell you in the app or by email before it takes effect, and we will keep the previous version available on request. The effective date at the top always tells you which version you are reading.
Elja App LLC · contact@eljaapp.com