ElodieElodie privacy policy
Last updated 9 October 2026. Version 1.3.
Elodie is a shared diary for a family's children, kept by the adults who care for them. This policy says what Elodie stores, why, where, for how long, and what you can do about it.
Who is responsible
The controller is Maximillian Evans, United Kingdom. Contact: support@elodie.day.
What Elodie stores, and why
| What | Why | Legal basis |
|---|---|---|
| Your name, email address and sign-in identifier, and what the children call you if you add it | To run your account and your household | Contract |
| Your household: children's names, the week's plan, meals, notes, requests, house notes, the routine | The service itself | Contract |
| A child's birthday, if a parent adds it | To mark the birthday on Today and in the keepsake, and to work out the child's age for the keepsake and a connected AI app | Legitimate interest: the family's own record of the child and a moment on the day. It stays within the household, and a parent can leave it out or remove it at any time. |
| Photos you add | The service itself | Contract |
| Your home address and the places you add | To work out when to leave for an event | Contract |
| Emergency contacts: names, relationships and phone numbers | The emergency card, which you fill in | Contract. You are responsible for telling those people. |
| For each person who looks after the children: first name, the word a parent chose, set days or the days a parent adds, what the children call them, and which children they look after | To show on Week who has each child and when, to send each postcard when that child's day ends, and to send alerts about a child to the people who look after that child | Legitimate interest: the household knows who looks after the children and when. The parent is responsible for telling that person. The person takes the row over when they join, and a parent can remove it at any time. |
| A child's NHS number, weight, allergies, conditions, GP and hospital, if you enter them | The emergency card. Meals in the app also leaves out any dish whose name includes a word in the allergies when it fills the week or offers dishes. This happens on the phone and sends nothing. | Explicit consent, given by a parent in the app before the first of these details is saved |
| The date a parent answered the allergies question for a child, with no allergy stored when the answer is "None known" | So the emergency card says "Not added yet" until a parent answers, and "None known" after | Legitimate interest: the card must not suggest a child has no allergies when nobody has said so |
| Sleep, milk, solids, nappies and medicine records, only if a parent switches them on | The diary | Explicit consent, given on the consent screen. You can switch them off at any time. |
| Calendar events, if you connect Google Calendar or Apple Calendar | To mirror the plan into your calendar | Contract. Only the calendar named "Elodie" and days titled "Away" with the name of someone who looks after the children are read. |
| Purchase history for the household licence | To know the household is licensed | Contract |
| Push notification tokens, and Live Activity tokens when you turn Right now on | To send the evening digest and alerts, and to update the Lock Screen line | Contract |
| An install number for each phone, the Elodie version it runs and the App Store country it uses | To know which versions each household runs before a change to how photos are stored, and which country's rules apply to a household | Legitimate interest |
| Security logs: sign-ins, failed requests, each photo link and household photo key handed out, and the phones each account has signed in on | To keep the service safe, and to alert you when your account signs in on a new phone | Legitimate interest |
| What a connected AI app reads, if a parent connects one (see "AI apps a parent connects") | To plan meals, events and requests in the AI app the parent chooses | Your instruction as a parent. For allergies, explicit consent, given only if a parent turns on sharing for that AI app |
A child's birthday is optional. Everyone in the household can see it. It is not shown on the Lock Screen or in notifications, and AI apps get the age in years and months only.
Elodie does not collect your location, use analytics or advertising trackers, or sell data. The weather uses the places you have saved and your home, never your phone's location.
Health records, and the health details on the emergency card, are special category data. Elodie stores them only after a parent agrees, on the consent screen for the records and before the first detail is saved on the card. You can withdraw it at any time: switch a record type off and delete its records in House, What gets recorded, or remove a child's health details from the emergency card.
Where it is kept
On servers run for us by Supabase in London, United Kingdom. Photos are stored in the same region.
Who else processes it
We use these companies to run Elodie. Each one works under a contract that limits what they may do with your data.
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage, functions | London, UK |
| RevenueCat | Checking the household licence with Apple and Google | United States, under the UK International Data Transfer Addendum |
| Resend | Sending sign-in codes and invite, report and deletion emails | United States, under the UK International Data Transfer Addendum |
| Cloudflare | Serving elodie.day, including the invite page, whose address holds the invite code. Its request logs keep the address and the visitor's IP address. It also passes on what a connected AI app sends to Elodie and reads from it, and keeps none of that content. It runs the service that holds the key protecting each household's photo key, which sees your sign-in token when your phone asks for that key | Cloudflare's terms |
| Apple | Sign in with Apple, push notifications (APNs), purchases, Apple Maps for travel times and directions, Apple Weather (WeatherKit) for the forecast from the saved position of a place or your home, rounded to about 100 metres, Apple Calendar on your device | Apple's terms |
| Google sign-in, the Google Calendar API if you connect it, Firebase Cloud Messaging for push on Android, Google Places, Routes and Geocoding for travel times on Android, Google Maps for directions if you choose it on your phone | Google's terms |
Apart from an AI app a parent chooses to connect, Elodie does not share your data with anyone else.
AI apps a parent connects
A parent can connect an AI app, such as Claude, ChatGPT or Gemini, to one household. The parent signs in on a page from Elodie and approves the connection. After that, the AI app can read the children's first names and ages, the first names and roles of the adults in the household, the names of the places you have added, this week's plan and the open requests. It can add meals, events and requests. Event titles, requests and place names go to it as they were typed, so anything written in them, such as a surname or an address, goes too. It does not get dates of birth, the home address, travel times, photos, notes or the sleep, milk, solids, nappy and medicine records, and it cannot plan medicine.
The AI app reads the children's allergies only if a parent allows it for that AI app. The sign-in page has a box for this, unticked at first, and any parent can turn it on or off later in the app, under House, AI apps. While it is off, the AI app is told that allergies are not shared.
The AI app reads this data when the parent asks it to plan something. The company that runs the AI app is not our processor. It handles what it reads under the parent's own account with that company and under its own privacy terms, and its servers may be outside the United Kingdom.
Only parents can connect an AI app. Any parent can end a connection at any time in the app, under House, AI apps, and access stops at once. Ending it does not delete what the AI app already holds. To remove that, ask the company that runs it.
Who in your household sees what
Parents see everything in the household. Someone who looks after the children sees the plan, the diary, the emergency card, house notes and their own settings. Someone covering sees the same while their cover is open, in the household's time. A parent can give them cover dates, which open at 18:00 the evening before the first day and close at the end of the last day. Someone who says yes to a cover link has no dates of their own. Each day they are booked for opens at 18:00 the evening before and closes at the end of that day, so the days between two booked days stay closed. Someone covering can add to the diary only during the cover itself. At other times they see only their own membership and when their cover is. When a cover period ends, the app removes the household's records and photos from that person's phone, and they come back from 18:00 the evening before the next one. Someone who looks after or covers for some of the children still sees every child's plan, diary and emergency card. Alerts and badges about the other children reach them only while the person who looks after that child is away and they are on duty. Viewers see and cannot change, except that a viewer who says yes to a cover link can add entries and photos during each booked time. When someone joins from a cover link a parent sent, the parents of that household see the name and email address they signed in with, so they can check who joined before showing them photos. Every member sees the same privacy notice before joining.
If you look after the children
If the parents employ you, they are your employer.
Maximillian Evans runs Elodie and is responsible for your data in the app.
Before you join, Elodie keeps only what a parent entered about you: your first name, your days, the word a parent chose for who you are to the children, and what the children call you. Once you join, Elodie keeps your name, your email address or sign-in, the days and hours the parents set for you, your word and what the children call you, and what you add: diary entries, photos, notes and requests. The parents in the household see it, with the other adults they invite. Nobody outside the household sees it. Elodie does not track your location or record when you open the app, and the parents cannot see when you were last online. If a parent connects an AI app, it can read your first name, your role and the requests you wrote (see "AI apps a parent connects"). You can export what you added, and leave or delete your account, at any time from House. When you leave, your name on old entries becomes your initial.
On the Lock Screen
Alerts and the Right now line can show names, notes and photos on the Lock Screen, where anyone holding the phone can read them. Each person can turn on "Hide names on the Lock Screen", under House, You. With it on, alerts and Right now show no child's, adult's or household's name, no event titles, no notes and no photos. Right now says only what kind of thing is happening and when, for example "At an event · until 11:45". Medicine alerts are titled "Medicine", never with the name of the medicine. The email we send when a household is deleted has no names in its subject line or its opening lines. The household's name is only in its last line.
How long it is kept
While your household exists. Deleted photos are removed from our servers promptly, and in any case within 30 days. They leave each member's phone the next time the app syncs. Security logs of photo links and photo keys are kept for 90 days. When you delete your account or the household, everything is removed from our systems and backups within 30 days. One thing stays when you delete only your account: the daily summaries already sent to a household keep the names they were written with, until that household is deleted. If you leave a household, your name on old entries is replaced by your initial and you keep an export.
Your rights
You can see, export, correct and delete your data inside the app, under House. You can also ask us to restrict or stop a use, object to it, or give you a copy to take elsewhere, by emailing support@elodie.day. We answer within one month. You can complain to the Information Commissioner's Office at ico.org.uk.
Children
Elodie is for adults. Children do not use it. Information about a child is entered by the adults who care for them.
Changes
We will tell you in the app before this policy changes in a way that matters.