Privacy Policy

How Elara handles local progress, private backups, partner sharing, subscriptions, analytics and deletion.

The short answer: Your device is the primary copy of your pregnancy progress. You can use Elara without Apple or Google sign-in. If you choose Save my progress with a permanent account, Elara saves private backup copies in Firebase; partner sharing is separate and does not grant access to those copies.

Local progress and HealthKit

Your journal, photos, symptoms, mood, counters, checklists and manually entered health records are stored on your device. Ordinary launch, sign-in and network recovery do not replace them with cloud records. Readings obtained from Apple Health are not included in the private backup.

Accounts and private backups

Elara may create an anonymous Firebase identity in the background. This guest identity is not automatically linked to your Apple ID and does not upload a private progress backup. After you choose Save my progress and confirm private cloud backups with a permanent account, Elara saves background copies of your local progress under that account. An update, ordinary sign-in or partner invitation does not enable private backups on its own. Copies can include pregnancy and appointment information, journal text and attached photos, belly photos, ultrasound images, mood and symptom records, counters, lists, names and manually entered health records.

These copies are for recovery, not automatic synchronization between devices. Restoration is an explicit action and is refused while your local progress is occupied. Private copies are restricted to their account owner by server access rules. They are not described as end-to-end encrypted. Older backup generations are rotated, with up to five completed generations retained per device.

Partner sharing

Connecting a partner requires a permanent account. Partner mode shares a limited pregnancy snapshot and the photos, wishlist items, ideas or reactions you choose to share through that feature. It does not grant access to your private journal, health logs or private recovery copies. You can disconnect a partner at any time.

Services and diagnostics

Firebase Authentication for guest and permanent identities; Firestore and Cloud Functions for private backups, partner sharing and notifications
Firebase Analytics and Google Ads for anonymous install attribution and subscription-funnel events; these events are not linked to your account ID and never include pregnancy, HealthKit, wellbeing, journal or partner activity
Adapty for App Store receipt validation and subscription events
PostHog for product usage and operation outcomes, including safe error codes, durations and record counts; journal text, photos, health values, tokens and passwords are not sent as event properties
Firebase Crashlytics for crashes and non-fatal technical errors
The website uses Cloudflare Web Analytics without cookies or visitor identification. Messages from the support form are delivered by email and used to answer you. Do not include health records, journal text or other sensitive content in a support request.

Deletion and your choices

You can export local information, disconnect a partner and delete your account in the app. Account deletion removes its private server backups and pairing access as well as local account progress. Removing the app alone does not delete an existing permanent account or its server backups. Apple may retain purchase history under its own obligations; account deletion does not cancel an Apple subscription.

You can request account or analytics-data deletion at privacy@elarapregnancy.com. Elara does not sell personal data or display third-party ads. This policy was updated on 8 October 2026 for private progress backups.