Elah Privacy Policy

Version: 1.0.6
Effective date: November 5, 2026

Who we are

Elah is an AI coach you talk to by voice or text. It helps you set personal goals and follow through on them. Elah is run by Michael Lek, trading as Elah AI, 23, Geumbong 8-gil, Jungheung S-Class 105/307, Chungju-si, Chungcheongbuk-do 27392, Republic of Korea ("Elah", "we", "us"). We decide how your personal data is used, which makes us its "controller" under European data protection law (GDPR).

Questions about this policy: hello@elah.ai.

The short version

• We collect what you tell Elah in calls and chats, your goals and progress, and what we need to run your account.
• Your goals and progress can include health information, such as sleep, weight or exercise goals. We only use it with your explicit permission.
• Our voice provider records your calls and deletes the recordings after 30 days. We keep written transcripts.
• We use outside services to run Elah, including AI providers. They process your data for us. They are listed below, and the app asks your permission before your words go to the AI providers. They may not train their AI on what you say to Elah.
• We do not sell your data. We do not show ads. We do not use analytics or advertising trackers in the app. When the app crashes, it sends us a crash report so we can fix it, without your conversations.
• You can download your data and delete your account in the app.

What we collect

Your account

• An account id, your sign-in method (Apple, Google or email code), and the id your sign-in provider gives you.
• Your email address.
• Your name, if your sign-in provider shares it or you tell Elah.
• Your timezone, language and currency, taken from your phone's settings.

Your conversations

• Calls. Your voice is streamed live to ElevenLabs, our voice provider, so Elah can hear and answer you. ElevenLabs records each call and keeps the audio and its transcript for 30 days, then deletes them. We use these recordings only to fix problems with calls. We do not keep recordings ourselves.
• Transcripts. We keep a written transcript of each call, with its length and time.
• Summaries. We keep a short summary of each call so Elah remembers it next time.
• Chat. We keep your text messages with Elah and Elah's replies.
• Dictation. If you dictate a chat message, your phone's speech recognition (Apple or Google) turns it into text.
• Call quality. Technical details of each call's connection, such as dropouts and delays, to fix audio problems.

Your goals and progress

• Your goals, in your words: what you want, why, how much time you have, and what is in the way.
• Your bigger aims ("mission" and "north stars") that Elah picks up from your conversations. You can edit them.
• Your plan: objectives, actions, targets and milestones.
• What you check off, amounts you log, notes, reasons you skip, and your answers to habit check-ins.
• Your answers to Elah's coaching questions, such as how active you are or what equipment you have. For money goals, this can include income and expenses.
• Which how-tos you opened.

Health information

Some goals are about health habits, like sleeping better, losing weight or building muscle. When they are, your goals, targets, the amounts you log, and what you say about them in calls and chats are health information. So is anything else about your health you choose to share with Elah.

We only collect and use health information if you give your explicit permission in the app. We use it only to coach you, as described in this policy. We do not sell it, and we do not use it for advertising. We do not read Apple Health or Google Health Connect.

You can withdraw your permission at any time in Profile → Account → Privacy. Because health topics can come up in any conversation, you then can no longer use calls or chat. To remove what we already hold, delete your account.

Elah coaches habits alongside your doctor. It does not diagnose, treat, or give medical or mental-health care.

Reminders, calls and partners

• When and how you want Elah to call or remind you, and your quiet hours.
• Push tokens from your phone, so we can send reminders and ring you for Elah calls.
• A record of reminders and check-in calls we sent, so we do not send them twice.
• If you invite an accountability partner: the invite, who accepted it, and which goals you shared. We store nothing about the person you invite until they sign up and accept. A partner sees your name and, for each goal you share, its title, status, objectives, actions, progress and milestones. A partner never sees your goal description, the notes you add when you log, your calls or your chats. If a goal you share is about your health, your partner sees that health information. You can stop sharing a goal at any time.

Purchases

• Elah sells prepaid call minutes through the Apple App Store. Apple handles payment. We never see your card.
• We keep a record of minutes bought, granted, used, refunded and expired, with Apple's transaction and product ids.
• Apple tells us about refunds. We keep those notices.

Crash reports

If the app crashes or hits an error, it sends a crash report to Sentry, our crash-report provider, so we can fix it. A crash report holds what went wrong and where in the app's code, your phone model and iOS version, the app version, and your account id. It never holds what you say in calls or chats, your goals, your name, your email or your location. We do not keep your IP address with crash reports.

The elah.ai waitlist

If you joined the waitlist on elah.ai, we keep your email, when you signed up and confirmed, your browser type, and a scrambled (hashed) version of your IP address used only to stop spam. We never store the IP itself.

What we do not collect

Your location, contacts, photos, advertising id, or date of birth.

How we use it, and why we may

European data protection law requires a legal reason for each use of your data.

Elah does not make decisions about you by automated means that have legal or similarly significant effects on you.

When a person on our team reads your words

If you ask for a goal Elah does not have a ready plan for, a person on our team writes your plan. To do that, they read what you said about the goal, a summary of it, and a draft plan made by AI. Our team chat gets a short alert that a new goal is waiting for review. The alert holds none of your words, no goal name and nothing that identifies you. We keep a review file in our private code repository. It holds the type of goal and the AI draft plan, but none of your words, no goal name and nothing that identifies you. We delete it when your account is permanently deleted.

Who we share it with

We share data only with services that help us run Elah, and only what they need. Each of them processes your data for us under a contract.

AI providers

ElevenLabs and Anthropic receive your words so they can answer you. Before your first call or chat, the app asks your permission to send your words to them. Elah needs this to work, so you can't continue without it. If you withdraw it later, you can't use Elah until you allow it again.

We don't let our AI providers train their models on what you say to Elah. Anthropic, which powers Elah's thinking, doesn't use our data for training. ElevenLabs, which provides Elah's voice, is set not to use your calls for training.

If you tap an expert video, the app opens YouTube outside Elah. YouTube's own privacy policy applies there.

Accountability partners you invite see your name and the goals you choose to share.

We may share data if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, under this policy.

We do not sell your personal information or share it for targeted advertising.

Data sent outside Europe

We are based in the Republic of Korea, so your data is handled from there. Most of our providers are in the United States, so your data is also transferred there. Crash reports are stored in Germany. We protect these transfers with the safeguards European law requires. For Korea, that is the European Commission's decision that Korea protects personal data to the level European law requires. For our providers, it is the EU–US Data Privacy Framework where the provider is certified under it, and otherwise the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards at hello@elah.ai.

How long we keep it

• While you have an account, we keep your transcripts, chat, goals and progress so Elah can remember you. There is no automatic expiry.
• Call recordings and their transcripts at ElevenLabs are deleted after 30 days.
• Call-quality data is deleted after 90 days. Crash reports are deleted after at most 90 days. Server logs are deleted after 7 days.
• When you delete your account, it is closed at once and your push tokens are removed. You have 30 days to change your mind by signing in again. After 30 days we permanently delete your account data, including the goal-review file described above. Copies in our backups are gone within 7 days after that.
• Your sign-in identity at Auth0 is deleted at the same time. If that fails, we retry daily.
• Free minutes from an invite expire 30 days after you get them. Purchased minutes never expire.
• Answers to optional surveys are deleted at most 12 months after you give them, and the list that links survey codes to accounts is deleted at the same time.
• Some records stay after deletion: Apple refund notices, your waitlist entry, and data that our providers keep under their own retention rules.

Your choices and rights

• Download your data: Profile → Account → Export data. You get a file with what you gave Elah: your side of calls and chats, your goals, answers, check-offs and account details. For a full copy of everything we hold about you, including Elah's replies, call summaries, the aims Elah picked up, and any call recordings ElevenLabs still holds, email hello@elah.ai.
• Delete your account: Profile → Account → Delete account.
• Correct your data: edit your name, settings and aspirations in the app, or tell Elah to change a goal or plan.
• Withdraw permission: for health information or for the AI providers, in Profile → Account → Privacy. This does not affect what we did before you withdrew.
• Stop calls and reminders: in Profile → Notifications, or in your phone's settings.
• Microphone: you can turn it off in your phone's settings. Calls and dictation need it; typed chat does not.

Wherever you live, you can also ask us to:

• give you a copy of your data, or send it to another service in a common format;
• correct or delete your data;
• limit how we use it, or stop using it where we rely on our legitimate interest.

You will not be treated differently for using these rights. To make a request, email hello@elah.ai. We may ask you to confirm it from the email on your account. We answer within one month. For complex requests we may need up to two more months; if so, we will tell you why within the first month.

If you are unhappy with how we handle your data, you can complain to the data protection authority in the country where you live or work. In Korea, that is the Personal Information Protection Commission (pipc.go.kr). We would appreciate the chance to fix it first.

Do Not Track. Some browsers send a "Do Not Track" signal. Elah does not track you across other apps or websites, so the signal does not change anything we do.

Children

Elah is not for anyone under 18. We do not knowingly collect data from them. If you think someone under 18 has an account, email us and we will delete it.

Security

We protect your data with access rules that limit each user to their own data, checks on every request, encrypted connections, encrypted storage, and by keeping personal details out of our logs. No system is perfectly secure.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. We update the effective date at the top each time.

Contact

Michael Lek, trading as Elah AI, 23, Geumbong 8-gil, Jungheung S-Class 105/307, Chungju-si, Chungcheongbuk-do 27392, Republic of Korea, hello@elah.ai.