Privacy Policy
Effective 19 August 2026
Eloven is a private shared space for two people. This policy explains what the app stores and why.
Data we process
Eloven creates an account for your installation without asking for an email address. If you optionally link Sign in with Apple for recovery, Apple may provide an account identifier, relay email address and name. We store those authentication details, the name and colour you choose, locale and time zone, pairing status, device notification tokens when you allow notifications, and the relationship content you choose to add. Relationship content can include ritual responses, wishes, pet activity, words, notes, letters, fortunes, reviews, photos, stamps and voice notes. If you open or buy Eloven Pro, we also process your individual account identifier and store purchase and entitlement status.
How we use it
We use this data only to operate the shared app experience: authenticate your installation, pair two accounts, synchronize content, open time-based features, deliver notifications you permit, prevent abuse and keep the service reliable. Eloven does not sell personal data, run advertising, create public profiles or expose online status.
Sharing and infrastructure
Content is shared with the one account you pair with. The service currently runs on Convex Cloud infrastructure in the European Union. RevenueCat processes the purchaser's individual account identifier and App Store or Google Play purchase and entitlement status to provide checkout, restoration and subscription management; Eloven does not send relationship content to RevenueCat. Service providers process data only to host and operate Eloven. We may disclose data when legally required or to protect the service and its users.
Security and sealed content
Traffic is encrypted in transit and hosted data is protected by the infrastructure provider. Eloven is not end-to-end encrypted. Sealed letters and capsules are withheld by the server until their opening rules are met.
Retention and deletion
We keep account and relationship data while the account exists. You can permanently delete your account from Profile → delete account. Because relationship data is shared, deleting either member’s account also permanently deletes that shared space for both people, including uploaded media. The other person’s separate account remains and returns to an unpaired state.
A limited safety-report record may be retained after account deletion where reasonably necessary to investigate abuse, protect users or the service, or meet legal obligations. That record is limited to the report type and reason, details deliberately entered by the reporter, moderation status and timestamps. Eloven does not copy the reported private photo, voice note or message into the report. When an account or shared space is deleted, its identifier is removed from the retained report.
Your choices
You can decline notifications in system settings, remove individual content where the app offers that control, unpair, or delete your account. A private installation account can be protected with Sign in with Apple from Profile. Reinstalling or clearing app data before protecting it can make that account inaccessible.
Children
Eloven is not directed to children under 13 and does not knowingly collect their data.
Contact
For privacy or support requests, visit the Eloven support page. We may update this policy as the service changes; the effective date above will change when we do.