Privacy Policy

At Elstori, what you share with us is sacred. You trust us with your most vulnerable moments; your fears, your struggles, your 3am thoughts. We take that trust
very seriously. Here's exactly
how we protect it.

We never sell your data. Ever.
Your conversations are private and encrypted.
You can delete your account and all your data at any time.
We collect only what we need to support you.
We never use your data for third-party advertising.
Your health and wellness data stays yours.

If you are in crisis — please reach out immediately

National Suicide Prevention Lifeline: call or text 988
Crisis Text Line: text HOME to 741741
Postpartum Support International Helpline: 1-800-944-4773

Elstori is not a substitute for professional mental health care. If you are experiencing a mental health crisis, please contact one of the resources above or your healthcare provider.

1. Information We Collect

In plain language: We collect two types of information: things you actively give us (like your name and email when you sign up) and things your device automatically sends us (like basic usage data). We only collect what we need to give you the best possible experience.

Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.

Log Data

When you access our servers via our app, we may automatically log the standard data provided by your device. It may include your device's Internet Protocol (IP) address, your device type and version, your activity within the app, time and date, and other details about your usage. Additionally, when you encounter certain errors while using the app, we automatically collect data about the error and the circumstances surrounding its occurrence.

Device Data

Our app may access and collect data via your device's in-built tools, including: Your Identity, Microphone, Calendar, Phone/SMS, Storage, photos and/or media, Notifications, Voice assistant, Background data refresh, Mobile data, Device/app history, and Bluetooth. When you install the app or use your device's tools within the app, we request permission to access this information.

Personal Information

We may ask for personal information — for example, when you submit content to us, subscribe to our newsletter, register an account, or contact us — which may include: Name, Email, and Phone/mobile number.

Sensitive Information

Sensitive information includes sexual practices or sex life and health information. We will not collect sensitive information about you without first obtaining your consent, and we will only use or disclose your sensitive information as permitted, required, or authorized by law.

Elstori-Specific Data Collection

Account Information: When you create an account, we collect your name, email address, and
parenting stage (e.g., due date or baby's birth date).

Self-Reported Wellness Data: Through our mood check-in and journaling features, you may voluntarily provide mood selections, contributing factors, and written reflections. This data is treated as protected health information under the California Confidential Medical Information Act (CMIA).

Intake Responses: During onboarding, we collect your answers to our intake questionnaire to personalize your experience. This may include information about your emotional state, support needs, and parenting challenges.

Chat & AI Interactions: Messages you send to Elstori's AI companion are processed to generate responses and improve your experience. Chat history is stored to maintain conversational context.

Voice Data: If you use voice input features, your audio is transmitted to ElevenLabs solely for speech-to-text transcription. Audio is not stored after transcription. Voice data is not used for biometric identification, in compliance with the Illinois Biometric Information Privacy Act (BIPA).

Community Data: If you participate in Circles (group chat) or direct messaging, your messages and profile information (name, avatar) are visible to other group members.

Usage & Analytics: We collect anonymized usage data including feature interactions, session
information, and device type to improve
the Service.

2. Legitimate Reasons for Processing Your Personal Information

In plain language: We only collect your information when we have a real, legitimate reason,
specifically to provide you with the best possible postpartum support experience.

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

3. Collection and Use of Information

In plain language: We use your information to power the app, personalize your experience, and communicate with you. We never use it to sell you things or make automated decisions about you.
What we do with your data is always in
your best interest.

We may collect personal information from you when you:

Register for an account

Sign up to receive updates from us via email or social media channels
Use a mobile device or web browser
to access our content
Contact us via email, social media, or on any similar technologies
Mention us on social media

We use your information to:

Personalize AI responses and emotional support based on your intake and mood data
Provide and maintain the Service,
including community features
Generate insights and recommendations
tailored to your parenting stage
Improve and develop new features
Communicate with you about your account and Service updates Ensure safety and enforce our Terms of Service

We do NOT use your information to:

Sell your data to third parties
Target you with third-party advertising
Make automated decisions that produce
legal effects


4. Disclosure of Personal Information to Third Parties

In plain language: We only share your information with the services that help us run the app, like our hosting provider and payment processor. We never share your health or wellness data with third parties for marketing or advertising. Ever.

We may disclose personal information to:

Third-party service providers for the purpose of enabling them to provide their services
(IT, data storage, hosting, maintenance, payment processing) Our employees, contractors, and/or related entities

Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
An entity that buys, or to which we transfer all or substantially all of our assets and business

Third parties we currently use include:
Brevo, Stripe.

Elstori-Specific Sharing

AI Processing: Your messages and intake data are sent to AI providers (Gemini and Google) to generate responses. These providers process data according to their respective data processing agreements and do not use your data to train
their models.

Voice Transcription: Audio data is sent to ElevenLabs solely for transcription purposes.

Community Features: Your profile name and avatar are visible to members of your Circle. Messages you send in Circles or via direct message are visible to recipients.

We do not share your health or wellness data with third parties for marketing or advertising purposes.

5. International Transfers of Personal Information

In plain language: Your data is stored and processed in the United States. We ensure any transfers of your information meet applicable legal standards and maintain the same level of protection described in this policy.

The personal information we collect is stored and/or processed in the United States of America, or where we or our partners, affiliates, and third-party providers maintain facilities. If we transfer your personal information to third parties in other countries, we will perform those transfers in accordance with the requirements of applicable law and will protect the transferred personal information in accordance with this privacy policy.

6. Data Storage & Security

In plain language: Your data lives on secure, encrypted servers. We use industry-standard security measures to protect it. While no system is 100% foolproof, we take every reasonable precaution to keep your information safe.

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access,
disclosure, copying, use or modification.

Our security measures include:

Encryption in transit (TLS) and at rest
Row-level security policies ensuring users can only access their own data
Secure authentication with email verification


7. How Long We Keep Your Personal Information

In plain language: We only keep your information for as long as we need it. If you delete your account, your personal data is removed within 30 days. We never hold onto your data longer
than necessary.

We keep your personal information only for as long as we need to. Upon account deletion, personal data is removed within 30 days, except where retention is required by applicable law. Anonymized, aggregated data may be retained for analytics purposes.

8. Children's Privacy

In plain language: Elstori is for adults 18 and older. We never knowingly collect information from anyone under 18. If we discover we have,
we delete it immediately.

Elstori is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it promptly. This is in compliance with the Children's Online Privacy Protection Act (COPPA).

9. Your Rights and Controlling Your Personal Information

In plain language: You are in control of your data. You can access it, correct it, download it, or delete it at any time. You can also opt out of marketing communications or optional features whenever you choose. We will never discriminate against you for exercising these rights.

Your rights include:

Access — request details of the personal information we hold about you
Correction — ask us to correct any inaccurate or incomplete information
Deletion — delete your account and all associated data at any time via Settings
Download — request a copy
of your personal data
Opt out — opt out of optional features like mood journaling, voice input, and
 community participation
Unsubscribe — opt out of marketing communications at any time
Non-discrimination — we will never treat you differently for exercising these rights

10. Business Transfers

In plain language: In the unlikely event Elstori is acquired or transferred, your data may be part
of that transfer. Any new owner would be required to honor this privacy policy.

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. Any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume.

11. Consent & Withdrawal

In plain language: Before you use our AI-powered features, we'll ask for your consent. You can withdraw that consent at any time simply by stopping use of the service or deleting
your account.

Before accessing AI-powered features, you will be asked to provide informed consent acknowledging the nature and limitations of the Service. Consent is logged with a timestamp for record-keeping. You may withdraw consent at any time by discontinuing use of the Service or deleting your account.

12. Astrology Features

In plain language: Our Playbook feature uses your birth data to generate astrological readings for self-reflection and entertainment. This data is for your use only and is never shared with third parties.

The Playbook feature uses your voluntarily provided birth data (date, time, location) to generate astrological readings for entertainment and self-reflection purposes only. This data is processed locally where possible and is not shared with third parties.

13. Limits of Our Policy

In plain language: If you click links to other websites from within Elstori, those sites have their own privacy policies. We're not responsible for what happens on those sites.

Our app may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

14. Changes to This Policy

In plain language: If we make significant changes to this policy, we'll tell you, in the app and by email. We'll always give you the chance to review any meaningful changes before they take effect.

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here and notify you within the app. If the changes are significant, we will contact you and all our registered users with the new details.

15. Additional Disclosures for U.S.
State Privacy Laws

In plain language: This section covers your rights under state privacy laws including California (CCPA), Colorado, Delaware, Florida, Virginia, and Utah. We do not sell personal information.
California residents have additional rights described below.

The following provisions comply with the privacy laws of California, Colorado, Delaware, Florida, Virginia, and Utah and apply only to residents of those states.

Do Not Track

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browser "Do Not Track" signals.

California Privacy Laws — CCPA

Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family, or household purposes, you may ask us about the information we release to other organizations for their marketing purposes. We do not sell personal information.

Right to Know and Delete

You have rights to delete your personal information we collected and know certain information about our data practices in the preceding 12 months. To exercise any of these rights, please contact us
using the details provided in this privacy policy.

Shine the Light

You have the right to request information from us regarding the manner in which we share certain personal information with third parties and affiliates for their own direct marketing purposes. Requests must include "Privacy Rights Request" in the first line of the description and include your name, street address, city, state, and ZIP code.

Questions? We're here.

Questions about your privacy? We're
real humans and we're here for you.
Reach us at support@elstori.com, we'll
respond within 48 hours.

Elstori, Inc. · support@elstori.com

We never sell your data. Ever.

Your conversations are private
and encrypted.

You can delete your account and
all your data at any time.

We collect only what we need
to support you.

We never use your data for
third-party advertising.

Your health and wellness data
stays yours.

At Elstori, what you share with us is sacred. You trust us with your most vulnerable moments; your fears, your struggles, your 3am thoughts. We take that trust
very seriously. Here's exactly how we protect it.

If you are in crisis — please reach out immediately

National Suicide Prevention Lifeline:
call or text 988

Crisis Text Line:
text HOME to 741741

Postpartum Support International Helpline:
1-800-944-4773

Elstori is not a substitute for professional mental health care. If you are experiencing a mental health crisis, please contact one of the resources above or your healthcare provider.

1. Information We Collect

In plain language: We collect two types of information: things you actively give us (like your name and email when you sign up) and things your device automatically sends us (like basic usage data). We only collect what we need to give you the best possible experience.

Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.

Log Data

When you access our servers via our app, we may automatically log the standard data provided by your device. It may include your device's Internet Protocol (IP) address, your device type and version, your activity within the app, time and date, and other details about your usage. Additionally, when you encounter certain errors while using the app, we automatically collect data about the error and the circumstances surrounding its occurrence.

Device Data

Our app may access and collect data via your device's in-built tools, including: Your Identity, Microphone, Calendar, Phone/SMS, Storage, photos and/or media, Notifications, Voice assistant, Background data refresh, Mobile data, Device/app history, and Bluetooth. When you install the app or use your device's tools within the app, we request permission to access this information.

Personal Information

We may ask for personal information — for example, when you submit content to us, subscribe to our newsletter, register an account, or contact us — which may include: Name, Email, and Phone/mobile number.

Sensitive Information

Sensitive information includes sexual practices or sex life and health information. We will not collect sensitive information about you without first obtaining your consent, and we will only use or disclose your sensitive information as permitted, required, or authorized by law.

Elstori-Specific Data Collection

Account Information: When you create an account, we collect your name, email address, and
parenting stage (e.g., due date or baby's birth date).

Self-Reported Wellness Data: Through our mood check-in and journaling features, you may voluntarily provide mood selections, contributing factors, and written reflections. This data is treated as protected health
information under the California Confidential Medical Information Act (CMIA).

Intake Responses: During onboarding, we collect your answers to our intake questionnaire to personalize your experience. This may include information about your emotional state, support needs, and parenting challenges.

Chat & AI Interactions: Messages you send to Elstori's AI companion are processed to generate responses and improve your experience. Chat history is stored to maintain conversational context.

Voice Data: If you use voice input features, your audio is transmitted to ElevenLabs solely for speech-to-text transcription. Audio is not stored after transcription. Voice data is not used for biometric identification, in compliance with the Illinois Biometric Information Privacy Act (BIPA).

Community Data: If you participate in Circles (group chat) or direct messaging, your messages and
profile information (name, avatar) are visible to other group members.

Usage & Analytics: We collect anonymized usage data including feature interactions, session
information, and device type to improve the Service.

2. Legitimate Reasons for Processing Your Personal Information

In plain language: We only collect your information when we have a real, legitimate reason,
specifically to provide you with the best possible postpartum support experience.

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

3. Collection and Use of Information

In plain language: We use your information to power the app, personalize your experience, and communicate with you. We never use it to sell you things or make automated decisions about you.
What we do with your data is always in your best interest.

We may collect personal information from you when you:

Register for an account

Sign up to receive updates from us via email or social media channels
Use a mobile device or web browser to access our content
Contact us via email, social media, or on any similar technologies
Mention us on social media

We use your information to:

Personalize AI responses and emotional support based on your intake and mood data
Provide and maintain the Service, including community features
Generate insights and recommendations tailored to your parenting stage
Improve and develop new features
Communicate with you about your account and Service updates
Ensure safety and enforce our Terms of Service

We do NOT use your information to:

Sell your data to third parties
Target you with third-party advertising
Make automated decisions that produce legal effects


4. Disclosure of Personal Information to Third Parties

In plain language: We only share your information with the services that help us run the app, like our hosting provider and payment processor. We never share your health or wellness data with third parties for marketing or advertising. Ever.

We may disclose personal information to:

Third-party service providers for the purpose of enabling them to provide their services
(IT, data storage, hosting, maintenance, payment processing)
Our employees, contractors, and/or related entities
Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
An entity that buys, or to which we transfer all or substantially all of our assets and business

Third parties we currently use include: Brevo, Stripe.
Elstori-Specific Sharing

AI Processing: Your messages and intake data are sent to AI providers (Gemini and Google) to generate responses. These providers process data according to their respective data processing agreements and do not use your data to train their models.

Voice Transcription: Audio data is sent to ElevenLabs solely for transcription purposes.

Community Features: Your profile name and avatar are visible to members of your Circle. Messages you send in Circles or via direct message are visible to recipients.

We do not share your health or wellness data with third parties for marketing or advertising purposes.

5. International Transfers of Personal Information

In plain language: Your data is stored and processed in the United States. We ensure any transfers of your information meet applicable legal standards and maintain the same level of protection described in this policy.

The personal information we collect is stored and/or processed in the United States of America, or where we or our partners, affiliates, and third-party providers maintain facilities. If we transfer your personal information to third parties in other countries, we will perform those transfers in accordance with the requirements of applicable law and will protect the transferred personal information in accordance with this privacy policy.

6. Data Storage & Security

In plain language: Your data lives on secure, encrypted servers. We use industry-standard security measures to protect it. While no system is 100% foolproof, we take every reasonable precaution to keep your information safe.

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access,
disclosure, copying, use or modification.

Our security measures include:

Encryption in transit (TLS) and at rest
Row-level security policies ensuring users can only access their own data
Secure authentication with email verification


7. How Long We Keep Your Personal Information

In plain language: We only keep your information for as long as we need it. If you delete your account, your personal data is removed within 30 days. We never hold onto your data longer than necessary.

We keep your personal information only for as long as we need to. Upon account deletion, personal data is removed within 30 days, except where retention is required by applicable law. Anonymized, aggregated data may be retained for analytics purposes.

8. Children's Privacy

In plain language: Elstori is for adults 18 and older. We never knowingly collect information from anyone
under 18. If we discover we have, we delete it immediately.

Elstori is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it promptly. This is in compliance with the Children's Online Privacy Protection Act (COPPA).

9. Your Rights and Controlling Your Personal Information

In plain language: You are in control of your data. You can access it, correct it, download it, or delete it at any time. You can also opt out of marketing communications or optional features whenever you choose.
We will never discriminate against you for exercising these rights.

Your rights include:

Access — request details of the personal information we hold about you
Correction — ask us to correct any inaccurate or incomplete information
Deletion — delete your account and all associated data at any time via Settings
Download — request a copy of your personal data
Opt out — opt out of optional features like mood journaling, voice input, and community participation
Unsubscribe — opt out of marketing communications at any time
Non-discrimination — we will never treat you differently for exercising these rights


10. Business Transfers

In plain language: In the unlikely event Elstori is acquired or transferred, your data may be part
of that transfer. Any new owner would be required to honor this privacy policy.

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. Any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume.

11. Consent & Withdrawal

In plain language: Before you use our AI-powered features, we'll ask for your consent. You can withdraw that consent at any time simply by stopping use of the service or deleting your account.

Before accessing AI-powered features, you will be asked to provide informed consent acknowledging the nature and limitations of the Service. Consent is logged with a timestamp for record-keeping. You may withdraw consent at any time by discontinuing use of the Service or deleting your account.

12. Astrology Features

In plain language: Our Playbook feature uses your birth data to generate astrological readings for self-reflection and entertainment. This data is for your use only and is never shared with third parties.

The Playbook feature uses your voluntarily provided birth data (date, time, location) to generate astrological readings for entertainment and self-reflection purposes only. This data is processed locally where possible and is not shared with third parties.

13. Limits of Our Policy
In plain language: If you click links to other websites from within Elstori, those sites have their own privacy policies. We're not responsible for what happens on those sites.

Our app may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

14. Changes to This Policy
In plain language: If we make significant changes to this policy, we'll tell you, in the app and by email. We'll always give you the chance to review any meaningful changes before they take effect.

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here and notify you within the app. If the changes are significant, we will contact you and all our registered users with the new details.

15. Additional Disclosures for U.S. State Privacy Laws
In plain language: This section covers your rights under state privacy laws including California (CCPA), Colorado, Delaware, Florida, Virginia, and Utah. We do not sell personal information.
California residents have additional rights described below.

The following provisions comply with the privacy laws of California, Colorado, Delaware, Florida, Virginia, and Utah and apply only to residents of those states.

Do Not Track

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browser "Do Not Track" signals.

California Privacy Laws — CCPA

Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family, or household purposes, you may ask us about the information we release to other organizations for their marketing purposes. We do not sell personal information.

Right to Know and Delete

You have rights to delete your personal information we collected and know certain information about our data practices in the preceding 12 months. To exercise any of these rights, please contact us
using the details provided in this privacy policy.

Shine the Light

You have the right to request information from us regarding the manner in which we share certain personal information with third parties and affiliates for their own direct marketing purposes. Requests must include "Privacy Rights Request" in the first line of the description and include your name,
street address, city, state, and ZIP code.

Questions? We're here.

Questions about your privacy? We're real humans and we're here for you.
Reach us at support@elstori.com, we'll respond within 48 hours.

Elstori, Inc. · support@elstori.com