ElodieElodie privacy policy
Last updated [date]. Version 1.0.
Elodie is a shared diary for a family's children, kept by the adults who care for them. This policy says what Elodie stores, why, where, for how long, and what you can do about it.
Who is responsible
The controller is Maximillian Evans, [postal address], United Kingdom. ICO registration number [number]. Contact: support@elodie.day.
What Elodie stores, and why
| What | Why | Legal basis |
|---|---|---|
| Your name, email address and sign-in identifier | To run your account and your household | Contract |
| Your household: children's names and dates of birth, the week's plan, meals, notes, requests, house notes, the routine | The service itself | Contract |
| Photos you add | The service itself | Contract |
| Your home address and the places you add | To work out when to leave for an event | Contract |
| Emergency contacts: names, relationships and phone numbers | The emergency card, which you fill in | Contract. You are responsible for telling those people. |
| A child's NHS number, weight, allergies, conditions, GP and hospital, if you enter them | The emergency card | Explicit consent, given when you fill it in |
| Sleep, milk, solids, nappies and medicine records, only if a parent switches them on | The diary | Explicit consent, given on the consent screen. You can switch them off at any time. |
| Calendar events, if you connect Google Calendar or Apple Calendar | To mirror the plan into your calendar | Contract. Only the calendar named "Elodie" and days titled "Away" are read. |
| Purchase history for the household licence | To know the household is licensed | Contract |
| Push notification tokens, and Live Activity tokens when you turn Right now on | To send the evening digest and alerts, and to update the Lock Screen line | Contract |
| Security logs: sign-ins and failed requests | To keep the service safe | Legitimate interest |
| What a connected AI app reads, if a parent connects one (see "AI apps a parent connects") | To plan meals, events and requests in the AI app the parent chooses | Your instruction as a parent. For allergies, explicit consent, given only if a parent turns on sharing for that AI app |
Elodie does not collect your location, use analytics or advertising trackers, or sell data.
Health records, and the health details on the emergency card, are special category data. Elodie stores them only after you agree on the consent screen or fill in the card, and you can withdraw that agreement by switching the records off or deleting them.
Where it is kept
On servers run for us by Supabase in London, United Kingdom. Photos are stored in the same region.
Who else processes it
We use these companies to run Elodie. Each one works under a contract that limits what they may do with your data.
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage, functions | London, UK |
| RevenueCat | Checking the household licence with Apple and Google | United States, under the UK International Data Transfer Addendum |
| Resend | Sending invite, report and deletion emails | United States, under the UK International Data Transfer Addendum |
| Apple | Sign in with Apple, push notifications (APNs), purchases, Apple Maps for travel times and directions, Apple Calendar on your device | Apple's terms |
| Google sign-in, the Google Calendar API if you connect it, Firebase Cloud Messaging for push on Android, Google Places, Routes and Geocoding for travel times on Android, Google Maps for directions if you choose it on your phone | Google's terms |
Apart from an AI app a parent chooses to connect, Elodie does not share your data with anyone else.
AI apps a parent connects
A parent can connect an AI app, such as Claude, ChatGPT or Gemini, to one household. The parent signs in on a page from Elodie and approves the connection. After that, the AI app can read the children's first names and ages, the first names and roles of the adults in the household, the names of the places you have added, this week's plan and the open requests. It can add meals, events and requests. Event titles, requests and place names go to it as they were typed, so anything written in them, such as a surname or an address, goes too. It does not get dates of birth, the home address, travel times, photos, notes or the sleep, milk, solids, nappy and medicine records, and it cannot plan medicine.
The AI app reads the children's allergies only if a parent allows it for that AI app. The sign-in page has a box for this, unticked at first, and any parent can turn it on or off later in the app, under House, AI apps. While it is off, the AI app is told that allergies are not shared.
The AI app reads this data when the parent asks it to plan something. The company that runs the AI app is not our processor. It handles what it reads under the parent's own account with that company and under its own privacy terms, and its servers may be outside the United Kingdom.
Only parents can connect an AI app. Any parent can end a connection at any time in the app, under House, AI apps, and access stops at once. Ending it does not delete what the AI app already holds. To remove that, ask the company that runs it.
Who in your household sees what
Parents see everything in the household. A nanny sees the plan, the diary, the emergency card, house notes and their own settings. A cover carer sees the same while their cover is open, in the household's time. A parent can give them cover dates, which open at 18:00 the evening before the first day and close at the end of the last day. Someone who says yes to a cover link has no dates of their own. Each day they are booked for opens at 18:00 the evening before and closes at the end of that day, so the days between two booked days stay closed. A cover carer can add to the diary only during the cover itself. At other times they see only their own membership and when their cover is. When a cover period ends, the app removes the household's records and photos from that carer's phone, and they come back from 18:00 the evening before the next one. Viewers see and cannot change, except that a viewer who says yes to a cover link can add entries and photos during each booked time. When someone joins from a cover link a parent sent, the parents of that household see the name and email address they signed in with, so they can check who joined before showing them photos. Every member sees the same privacy notice before joining.
On the Lock Screen
Alerts and the Right now line can show names, notes and photos on the Lock Screen, where anyone holding the phone can read them. Each person can turn on "Hide names on the Lock Screen", under House, You. With it on, alerts and Right now show no child's, adult's or household's name, no event titles, no notes and no photos. Right now says only what kind of thing is happening and when, for example "At an event ยท until 11:45". Medicine alerts are titled "Medicine", never with the name of the medicine. The email we send when a household is deleted has no names in its subject line or its opening lines. The household's name is only in its last line.
How long it is kept
While your household exists. Deleted photos are removed from our servers promptly, and in any case within 30 days. They leave each member's phone the next time the app syncs. When you delete your account or the household, everything is removed from our systems and backups within 30 days. One thing stays when you delete only your account: the daily summaries already sent to a household keep the names they were written with, until that household is deleted. If you leave a household, your name on old entries is replaced by your initial and you keep an export.
Your rights
You can see, export, correct and delete your data inside the app, under House. You can also ask us to restrict or stop a use, object to it, or give you a copy to take elsewhere, by emailing support@elodie.day. We answer within one month. You can complain to the Information Commissioner's Office at ico.org.uk.
Children
Elodie is for adults. Children do not use it. Information about a child is entered by the adults who care for them.
Changes
We will tell you in the app before this policy changes in a way that matters.