In short
Elija OS processes data about a child — often health data. We therefore treat it more strictly than the law requires: strict per-family isolation, no selling, no ads, no marketing tracking. You can export your data and delete your account yourself at any time.
1. Controller
Almos Alexander Pocs Pfarrer-Ludwig-Weg 5 86919 Utting am Ammersee Germany
E-Mail: hi@elija.life
2. What we process
- Account data: email address, sign-in times, language, role within the family.
- Family and planning data: your child's first name or nickname, day plans, routines, templates, symbols, notes.
- Health-related data (Art. 9 GDPR): sleep, vitals from connected devices, nutrition entries, logbook, uploaded reports — only as far as you enter or connect them yourself.
- Technical data: server logs, error reports, device sessions — for security and debugging.
- Support messages: the content and email address of your requests.
3. Purposes and legal bases
- Providing the app and your account: performance of a contract, Art. 6(1)(b) GDPR.
- Processing health data and data about the child: explicit consent, Art. 9(2)(a) GDPR. You may withdraw it at any time; processing then stops going forward.
- Security, abuse prevention, debugging: legitimate interest, Art. 6(1)(f) GDPR.
- Invoicing and retention duties: Art. 6(1)(c) GDPR.
4. AI processing
For plan suggestions, text recognition and the assistant ("the bear"), individual pieces of content are sent to AI models operated by our providers. That content is not used to train third-party models. Sensitive free text is reduced before transmission where possible. You can leave AI features unused; planning works without them.
5. Processors
We use carefully selected providers as processors (hosting and database, email delivery, payment processing, AI models, error monitoring). Art. 28 GDPR agreements are in place with all of them. Where processing takes place outside the EU, it is based on the EU Standard Contractual Clauses.
6. Retention
Account data exists as long as your account exists. After deletion we permanently remove family data following a short grace period (30 days, so an accidental deletion stays recoverable). Invoice data is retained for up to 10 years as required by law.
7. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent (Art. 15–21 GDPR). Export and deletion are available directly in the app under Settings — no request needed. Complaints can be filed with the Bavarian Data Protection Authority (BayLDA).
8. Cookies
We only use technically necessary cookies and local storage for sign-in, language and offline operation. No advertising tracking, no third-party ad networks.
9. Children
The app is operated by parents and carers. An account may only be created by adults with custody or care responsibility.