Trust

What happens to your words.

Nobody reflects honestly into something they don't trust. So this page is written the way we'd want it written for us: specific, plain, and without a single “military-grade.”

  1. 01

    Your raw words are stored separately, and never edited

    When you speak or type a reflection, the exact text is saved in one place. Anything Elja generates about it (a summary, a theme, a Mirror) is saved somewhere else, labeled as Elja's, and never overwrites yours. You can always see what you actually said.

  2. 02

    Encrypted in transit and at rest, and we say exactly that

    Your data is encrypted on the way to our servers and while it sits there. We do not claim “end-to-end encryption,” because our AI features read your entries on the server to write your summary, and claiming otherwise would be a lie. If we ever build a fully on-device version, we'll say so then.

  3. 03

    The AI is optional, disclosed, and never trains on you

    Transcription, summaries, themes, and your Weekly Mirror are generated by models from OpenAI under a contract that prohibits training on your content. Read-aloud audio, the daily line and your Mirror in the Elja voice, is produced by ElevenLabs from that text alone. Subscriptions are handled by RevenueCat, which sees your purchase history and an account id, never your words. You can turn AI processing off in one tap; Elja then stores your words and nothing else. When it's on, only the minimum text needed is sent, and it isn't retained by the provider. The full list is in the Privacy policy.

  4. 04

    Passwordless sign-in and email recovery

    You sign in with a link sent to your email. Lose your phone, get a new one, sign in again with the same email. No password, no security questions, no support ticket. On your phone you can add a 4-digit PIN or Face ID as a second layer.

  5. 05

    Export anytime. Delete from the live service immediately; backups are removed within 30 days.

    One tap exports everything you've ever written as a readable file. One confirmation deletes your account and every reflection from the live service immediately; encrypted backups are removed within 30 days. Neither requires emailing anyone.

  6. 06

    Sharing is explicit, previewed, and revocable

    Nothing you write is visible to anyone else unless you choose it. When we add the option to share with a trusted person or coach, you'll see exactly what they'll see before you send it, you'll choose the scope, and you'll be able to revoke it and see a log of every access.

What we will never do.

Not as a policy that could change. As the reason the company exists in this form.

  • Show you adsIn any plan, at any time.
  • Sell, rent, or share your dataIncluding “anonymized” or “aggregated” versions, including to “partners.”
  • Use your reflections to target youNot for our own marketing, not for anyone's.
  • Lock a privacy feature behind a paywallExport, delete, the AI off-switch, and vault lock are free, always.
  • Change these terms quietlyIf anything here changes, you'll hear it from us first, in plain words, with time to leave.

Questions, or something we got wrong?

Write to contact@eljaapp.com. A person reads it. The full legal versions are here: Privacy policy and Terms.