Privacy, explained plainly.

When you create or use an account, EILO processes your email address, display name, sign-in provider, and account identifier. EILO also stores the content you choose to create: tasks, schedules, reminders, notes, life areas, habits, habit notes, completion history, and settings.

In EILO Duo, EILO stores the shared space, its members, invitations, shared tasks, events, wishes, completion status, and notification choices. EILO Life and EILO Duo use the same EILO account and cloud service, while private Life plans remain separate from the shared Duo space.

If you turn on Cycle tracking, EILO processes the cycle dates, symptoms, flow notes, and reminder choices you enter. These can be health-related and are treated as sensitive personal information.

If you send feedback, we receive the message, your account email, and any screenshot you choose to attach. Screenshots are optional.

Apple Health is optional. When you choose to connect it, EILO asks only to read menstrual flow history. EILO does not write data to Apple Health. Imported entries are added to your EILO Cycle record so they can appear in the app and sync with your EILO account.

We do not use Apple Health data for advertising, marketing, or data mining, and we do not sell it. You can change Apple Health permissions in iPhone settings at any time.

Voice entry is optional and can be disabled in EILO settings. Your audio is used by the device's speech-recognition service to create text and is not stored by EILO. When you ask EILO to prepare a task draft, the recognised text and the planning context needed to interpret it (such as the current date, language, and your life areas) are sent to EILO's server and OpenAI to extract task details. You review the draft before anything is saved.

We use this information to provide sign-in, save and sync your plans across your devices, schedule reminders, show your personal history, respond to feedback, protect the service, and diagnose problems. EILO does not sell personal information or use it for targeted advertising. EILO does not track you across apps or websites.

Product analytics is off until you choose to enable it. If enabled, EILO sends PostHog a small set of usage events, such as opening the app, finishing setup, creating a first task or habit, viewing Pro, or enabling a first reminder. Each event identifies whether it came from EILO Life or EILO Duo. PostHog also receives a randomly generated installation identifier, session identifiers, app version, device model, operating system, language, time zone, and screen dimensions. These identifiers can associate events from the same installation; this is not a claim that the events are fully anonymous. EILO does not send your account identifier to PostHog or create a PostHog person profile.

Analytics never includes task titles, notes, names, email addresses, profile, Cycle, or health data. Screen recording, automatic touch capture, precise location lookup, and advertising tracking are disabled. You can turn analytics off at any time in EILO settings. Turning it off stops new sends and clears the local unsent queue; a request already sent cannot be recalled. Your choice does not affect app features or subscription prices.

Apple processes purchases and subscriptions. RevenueCat receives your EILO account identifier, App Store transaction information, subscription product, and subscription status to verify Pro access, restore purchases, prevent fraud, and provide subscription statistics such as renewals, cancellations, and refunds. EILO stores the verified access status and expiry date on its server. EILO does not receive your payment card details.

Life and Duo share Pro access for the same signed-in EILO account; a partner with a separate account does not inherit that subscription. Purchase processing is separate from optional PostHog analytics. Deleting your EILO account does not cancel an Apple subscription; manage or cancel it in your Apple subscription settings.

Sentry receives crash reports, handled errors, performance measurements, app and operating-system versions, device characteristics, and technical installation or session identifiers to help diagnose problems and measure release stability. This technical reporting is separate from the optional product analytics switch. EILO disables default personally identifying information, automatic screenshots, and view hierarchy attachments; its error-report filter removes account, request, and extra payload data. Technical identifiers mean diagnostics are not described as fully anonymous.

If you allow notifications, EILO stores a device push token with your account, app, language, and time zone to deliver reminders and shared-plan updates through Expo and Apple notification services. You can manage notification permission in device settings.

EILO uses Supabase to provide account authentication, database storage, synchronization, server functions, and private feedback screenshots. OpenAI helps interpret an optional voice command into an editable task draft. Sentry processes the technical diagnostics described above. RevenueCat processes account-linked purchase and subscription information. Expo and Apple deliver permitted notifications.

These providers process data only to provide their services to EILO. PostHog receives the optional product events and technical identifiers described above. Their own privacy terms also apply:

• Supabase Privacy Notice
• OpenAI Privacy Policy
• Sentry Privacy Policy
• PostHog Privacy Policy
• RevenueCat Privacy Policy
• Expo Privacy Policy
• Apple Privacy Policy

We keep your account content while your EILO account is active so the app can provide synchronization and history. You can delete your account in EILO at Settings → Account → Delete account. Deletion removes your account and private cloud data, feedback attachments, and local EILO data and reminders on the device that performs the deletion. Shared records needed by a remaining Duo partner are retained for that partner. Account deletion cannot be undone. Apple purchase records and providers' records may remain subject to their retention obligations; account deletion does not cancel a subscription or recall telemetry already sent. Contact us for help with a data deletion request.

We use access controls and reasonable technical safeguards designed to protect information. No method of storage or transmission can be guaranteed completely secure.

You can edit or remove your planning and Cycle data in EILO, disable product analytics and voice entry, and control microphone, speech recognition, notifications, and Apple Health in iPhone settings. To ask a privacy question or request help with your data, contact hello@eilo.live from the email address associated with your account.

If our data practices change materially, we will update this page and its effective date before the change takes effect.