Privacy Policy

Last updated: December 4, 2025

1. Introduction

Elysium ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our goal and task management application available on macOS and iOS (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

  • Account Information: Email address, name, and password when you create an account
  • User Content: Goals, tasks, events, appointments, notes, and other content you create in the app
  • Profile Information: Optional profile picture and preferences
  • Payment Information: Billing information processed through Stripe or Apple's App Store (we do not store full credit card numbers)
  • Communications: Information you provide when contacting support or communicating with us

2.2 Automatically Collected Information

When you use the Service, we automatically collect certain information:

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: Features used, time spent in app, interaction patterns
  • Log Data: IP address, browser type, access times, pages viewed, crashes and errors
  • Location Data: General location based on IP address (we do not collect precise GPS location unless you explicitly provide it in events/appointments)

2.3 Information from Third Parties

  • Authentication Providers: If you sign in with Apple, Google, or other OAuth providers, we receive basic profile information
  • Payment Processors: Payment confirmation and subscription status from Stripe or Apple

3. How We Use Your Information

We use the collected information for the following purposes:

  • Provide the Service: To operate, maintain, and provide features of the Service
  • Account Management: To create and manage your account
  • Sync Across Devices: To sync your data across your macOS and iOS devices
  • Process Payments: To process transactions and send related information
  • Customer Support: To respond to your comments, questions, and provide support
  • Improve the Service: To understand usage patterns and improve our features
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Communications: To send you updates, security alerts, and administrative messages
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

4.1 Data Storage

Your data is stored using Supabase, a secure cloud database service hosted on AWS infrastructure. We implement industry-standard security measures including:

  • Encryption in transit (TLS/SSL)
  • Encryption at rest for sensitive data
  • Secure authentication mechanisms
  • Regular security audits and updates
  • Access controls and authentication

4.2 Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal compliance.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Your Consent

When you invite collaborators or share goals/tasks with others, we share the relevant content with those users.

5.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Supabase: Cloud database and authentication
  • Stripe: Payment processing (for web purchases)
  • Apple: In-app purchase processing and distribution
  • Cloud Infrastructure: AWS for hosting and storage

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to access and export your personal data. You can export your data at any time through the app settings or by contacting us.

6.2 Correction and Deletion

You can update or delete your information directly in the app. To permanently delete your account and all associated data, contact us at support@elysium.is.

6.3 Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

6.4 Do Not Track

We do not track users across third-party websites. However, some third-party sites may track your browsing activities when they provide content on the Service.

6.5 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to access personal information
  • Right to equal service and price
  • Right to deletion

To exercise these rights, contact us at support@elysium.is.

6.6 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to the transfer of your information to the United States and other countries.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service:

  • Essential Cookies: Required for the Service to function (authentication, security)
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how you use the Service (optional)

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide more prominent notice (such as email notification).

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:privacy@elysium.is