In short
Elio works with no account and no network. By default everything you note stays on your phone, in encrypted storage whose key lives in the device keychain. Nothing is sold and nothing feeds advertising. The features that need the cloud (co-parent sync, milestone photos, the assistant) only come into play when you use them.
Who the controller is
Samuel Rodriguez-Lozano, publisher of Elio. For any question, or to exercise your rights: support@eliobebe.com.
What data is involved
- Baby: first name, date of birth, feeds, sleep, diapers, weight and height, milestones and any photos you add.
- Parent: mood, mental load, hours slept, and your diary entries.
- Subscription: the anonymous purchase identifier from RevenueCat, never your payment details, which we never see.
- Technical: an anonymous session identifier, and a count of assistant questions so quotas can be applied.
An infant’s health data and a parent’s psychological state are sensitive data. They are used only to show you your own tracking and to answer your questions inside the app.
Where it is stored
On the device, in an encrypted store (MMKV) whose key is held by the system (iOS keychain, Android Keystore). If you turn on sync or the assistant, the relevant records are copied to our Supabase project, hosted in Ireland, inside the European Union (eu-west-1 region) and protected by row-level access rules: your account, and the co-parent you have linked, are the only ones who can read them. Photos go to a private bucket, never a public one.
The assistant
When you ask a question, the app assembles a summary of your recent data on the phone (baby’s age, last feed, sleep, how you are doing), then sends it with your question to our server, which queries Google’s Gemini model. That processing happens in the United States. The model’s access key is never present in the app. We keep the number of calls and tokens for billing and quotas, not the content of your conversations.
Sharing with a co-parent
An invitation code links two accounts. From then on the baby’s tracking is visible to both parents. Your personal diary and your own psychological state are not shared.
Who else is involved
- Supabase: hosting for the database and the photos.
- Google (Gemini): generating the assistant’s answers.
- RevenueCat: subscription management.
- Apple and Google: app distribution and payment processing.
- Expo: delivering notifications, if you enable them.
No other recipients, no resale, no advertising networks.
On what basis
Your consent for health data and the diary, performance of the contract for the subscription, and our legitimate interest in keeping the service secure for the technical counters. You can withdraw consent at any time by turning off sync or deleting your data.
For how long
On the device, until you reset the data from settings or delete the app. In the cloud, until you ask for your account to be deleted. Assistant usage counters are kept for twelve months.
Your rights
Access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. Write to support@eliobebe.com and we answer within one month. The deletion procedure is set out on this page. The app also exports a seven-day summary as a PDF, and a full record of your local data. If our answer does not satisfy you, you can complain to your data protection authority, the CNIL in France.
Children
Elio is for adults. The baby’s data is entered by a parent or guardian, who consents on their behalf.
Changes
Any change will be published here with a new date. Anything significant will also be flagged in the app.