Elvou Life app privacy policy
Last updated: 13-08-2026
Elvou operates this app (the 'App'), including all related information, content, features, tools, products and Services, in order to provide you, the customer, with a personalised experience. This Privacy Policy describes how we collect, use and disclose your personal information when you use the Services or communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with respect to the collection, processing and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing the App, you indicate that you have read this Privacy Policy and that you understand the collection, use and disclosure of your information as described in this Privacy Policy.
Personal information we collect or process
When we use the term "personal information", we mean information that identifies you or another person, or that can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified in such a way that it cannot identify you or reasonably be linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the App, where you live, and as permitted or required by applicable law:
- Account and profile data: your email address, profile name, profile photo, bio, gender, date of birth and interests;
- Location data: your current position on the map;
- AI coach input: anything you share in the chat with the AI coach;
- Community data: the details of any community you start, including the banner, name, description and rules;
- Event data: the details of the events you add, including the name, description, date and location;
- Social data: all messages you send to other users or post in a community, your attendance at events and the users you have blocked;
- Cycle data: your name, age, average cycle length, average period length, the days on which you menstruate, your activity level, stress level, wearable, the types of supplements you take, your sharing code and your logged data (such as symptoms, HRV, body temperature and notes);
- Communications with us: including the information you include in your communications with us, for example when submitting a support question;
- Technical data: including information about your interaction with the App, including how and when you interact with or navigate through the App;
- Device data: including information about your device, browser or network connection, your IP address and other unique identifiers.
Sources of personal information
We may collect personal information from the following sources:
- Directly from you, including when you create an account, visit or use the App, communicate with us, or otherwise provide us with your personal information;
- Automatically through the App, when you use our App and through the use of cookies and similar technologies;
- From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
- From our partners or other third parties.
Purpose and legal basis of the processing of your personal information
We process your personal data solely for the purposes listed below and on the corresponding legal bases under Article 6 GDPR.
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Creating and managing your account and providing the App's core functionality | Account and profile data | With respect to your email address: performance of the contract; consent for the remaining information |
| Sharing your live location with other users | Live location | Consent |
| Social features (posts, comments, likes, following, clubs, challenges, DMs) | Community, event and social data | Consent |
| Use of the AI coach | AI coach input | Consent |
| Use of Elvou Cycle | Cycle data | Consent |
| Communicating with Elvou | Communications with us | Consent |
| Securing, stabilising and improving the service and preventing misuse and fraud | Technical and device data | Legitimate interest |
| Sharing (aggregated) maintenance data in order to make improvements to the App | Technical and device data | Legitimate interest |
| Complying with legal obligations | Depending on the obligation | Legal obligation |
Withdrawing consent: for all processing based on consent, you may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal. You can withdraw your consent via the relevant setting in the App (for example, by turning off the sharing of your live location or your cycle data) or by contacting us. We keep a record of consent given or withdrawn as evidence.
Legitimate interest: for processing based on legitimate interest, our specific interest is: safeguarding the security, stability and reliability of the App and preventing misuse and fraud. In doing so, we have weighed your interests and fundamental rights (protection of privacy) against this interest. You have the right to object at any time to processing based on this ground. Further substantiation of our balancing of interests is available on request.
Automated decision-making: no automated decision-making within the meaning of the GDPR takes place when you use our App.
Health data (Elvou Cycle)
If you choose to use the Elvou Cycle features and to connect Apple Health or Google Health Connect, Elvou may gain access to certain health and wellness data for which you have given explicit consent.
Depending on the permissions you grant, this may include:
- menstrual cycle and period data, including period intensity and intermenstrual bleeding;
- ovulation information, ovulation test results, cervical mucus observations and sexual activity data;
- body measurements and vital signs, including weight, basal body temperature, body temperature, heart rate, resting heart rate, heart rate variability, respiratory rate and blood oxygen saturation;
- sleep data;
- activity data, including steps, training sessions, workouts, active calories burned and total calories burned; and
- hydration data.
We only have access to the categories of health data for which you have given explicit permission via Apple Health or Google Health Connect. You can withdraw this permission at any time via your device settings.
How we use health data
Your health data is used solely to provide the Elvou Cycle features, including:
- displaying your health and cycle data;
- synchronising your encrypted data between your devices;
- securely backing up your encrypted health data;
- calculating menstrual phases, fertility estimates, predictions, trends and related insights locally on your device; and
- showing educational content and recommendations relevant to your current cycle phase.
Cycle calculations, predictions and health analyses are performed locally on your device after your encrypted data has been decrypted there.
When recommendations for a particular cycle phase are displayed, your device requests the corresponding recommendation content for the selected cycle phase. These requests do not contain any underlying health data or decrypted health information.
We do not use health data for advertising, marketing, profiling, automated decision-making, sale to third parties or any other purpose unrelated to providing the Elvou Cycle features.
Encryption and storage
Health data is encrypted on your device before it is transmitted to Elvou's servers.
The encrypted data is transmitted via secure connections and stored exclusively in encrypted form. Elvou does not hold the cryptographic keys required to decrypt your health data.
Only your personal twelve-word recovery phrase can be used to access the cryptographic keys required to decrypt your health data. Because Elvou never stores or has access to your recovery phrase or decryption keys:
- we cannot read your health data;
- our employees and contractors have no access to your health data;
- anyone who gains unauthorised access to our servers would obtain only encrypted data; and
- we cannot restore or recover your health data if your twelve-word recovery phrase is lost.
You are responsible for keeping your twelve-word recovery phrase safe. If it is permanently lost, your encrypted health data can no longer be decrypted or recovered.
How we disclose personal information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
- Sharing personal information with third parties who perform services connected to the App on our behalf (e.g. IT management, data analytics and cloud storage);
- When you direct us, request us or otherwise consent to our providing certain information to third parties, such as to ship products to you, or through your use of social media widgets or login integrations, such as connecting a wearable;
- In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or others.
Other users and the public as recipients: in addition to the parties mentioned above, certain data may be visible to other users. This applies to content that you yourself set to "public", such as public posts in communities, your interests and events you have created. We recommend that you check your visibility settings before sharing content.
Third-party websites and links
The App may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with us or operated by us, you should review their privacy and security policies and other terms and conditions. We make no guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information found on them. Information you provide in public or semi-public places, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of those third-party platforms without restriction as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as stated in the Services.
Children's data
The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with his or her personal information, you may contact us using the contact details below to request that it be deleted. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.
Security and retention of your information
Please be aware that no security measure is perfect or impenetrable, and that we cannot guarantee "perfect security". In addition, information that you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on various factors, such as whether we need the information to maintain your account, to provide you with the Services, to comply with legal obligations, to resolve disputes or to enforce other applicable contracts and policies. In any event, all personal information will be deleted no later than one year after the deletion of your account, to the extent possible in light of our legal obligations.
Your rights and choices
Depending on where you live, you may have some or all of the rights listed below with regard to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to access/know. You may have the right to request access to the personal information we hold about you.
- Right to deletion. You may have the right to request that we delete personal information we hold about you.
- Right to correction. You may have the right to ask us to correct inaccurate personal information we hold about you.
- Right to portability. You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and subject to certain exceptions.
- Managing communication preferences. We may send you promotional emails, and you may opt out of receiving them at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, for example about your account or orders you have placed.
If you live in the United Kingdom or the European Economic Area (EEA), and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights described above:
- Objection to processing and restriction of processing: You may have the right to ask us to stop or restrict the processing of personal information for certain purposes.
- Withdrawal of consent: where we rely on consent to process your personal information, you have the right to withdraw that consent. If you withdraw your consent, this does not affect the lawfulness of the processing based on your consent before it was withdrawn.
You may exercise any of these rights where indicated in the App or by contacting us using the contact details below.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable law, you may designate an authorised agent to submit requests on your behalf in order to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof that you have authorised them to act on your behalf, and we may ask you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.
Complaints
If you have complaints about the way in which we process your personal information, please contact us using the contact details below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details below, or to lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.
International transfers
Please note that we may transfer, store and process your personal information outside the country in which you live.
If we transfer your personal information outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority of the United Kingdom, as relevant, unless the data is transferred to a country that has been determined to provide an adequate level of protection.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights available to you, please call +31 6 23771615, email us at info@elvou.com, or contact us at Elvou App B.V., Ploegweg 5, 5232 BR 's-Hertogenbosch, the Netherlands. For the purposes of applicable data protection law, we are the controller of your personal information.
