Privacy policy
This translation is provided for convenience. If interpretations differ, the German original prevails. Deutsch
Elvunea requires no user account. Health and tracking data is normally processed on your iPhone. There is no advertising, advertising tracking, or marketing profiling. Apple Health, weather data, and reminders are optional and can be enabled or declined independently. If you voluntarily enable iCloud, Elvunea synchronizes all records stored persistently in the app between your Apple devices through your private iCloud database. This includes check-ins and history, stored weather values, daily values imported from Apple Health, and your selection of the complaint that affected you most that day. Elvunea needs neither its own account nor its own server for this. A synchronized recovery profile makes your module, tracking, cycle, and reminder settings available. App Lock, your iCloud choice, system permissions, and notifications actually scheduled remain device-specific. Technically, Elvunea uses your Apple Account’s private CloudKit database for this.
Controller
Maximilian KluckerIm Hopfengarten 22B
54295 Trier
Germany
Email: support@elvunea.com
1. Scope and data in the app
This policy covers the Elvunea iOS app and elvunea.com. Depending on the modules you choose, the app may process check-ins, notes, migraine and headache information, endometriosis symptoms, cycle and bleeding information, mood, medication and supplement intake, sleep, stress, caffeine, alcohol, movement, meals, and hydration. These entries may constitute health data under Article 9 GDPR and are used only for the documentation, history, estimate, statistics, and export functions you select.
2. Storage and analysis on your device
Check-ins, attacks, recorded doses and imported weather and Health data are stored locally on your iPhone. You can optionally enable sync through your private iCloud in Settings. No Elvunea account is required. If you voluntarily enable iCloud, Elvunea synchronizes all records stored persistently in the app between your Apple devices through your private iCloud database. This includes check-ins and history, stored weather values, daily values imported from Apple Health, and your selection of the complaint that affected you most that day. Elvunea needs neither its own account nor its own server for this. A synchronized recovery profile makes your module, tracking, cycle, and reminder settings available. App Lock, your iCloud choice, system permissions, and notifications actually scheduled remain device-specific. Technically, Elvunea uses your Apple Account’s private CloudKit database for this.
iCloud sync
If you voluntarily enable iCloud, Elvunea synchronizes all records stored persistently in the app between your Apple devices through your private iCloud database. This includes check-ins and history, stored weather values, daily values imported from Apple Health, and your selection of the complaint that affected you most that day. Elvunea needs neither its own account nor its own server for this. A synchronized recovery profile makes your module, tracking, cycle, and reminder settings available. App Lock, your iCloud choice, system permissions, and notifications actually scheduled remain device-specific. Technically, Elvunea uses your Apple Account’s private CloudKit database for this. On a new iPhone: Sign in with the same Apple Account, select iCloud in Elvunea, and fully restart the app. Then confirm Apple Health, location, and notifications again; restored reminders are scheduled only after your explicit confirmation. If iCloud is temporarily unavailable, you can continue recording data. Changes are stored locally and synced later.
3. Optional Apple services
With separate permission, Elvunea reads only step count, Apple exercise time, and resting heart rate from HealthKit and writes nothing to Apple Health. Each time weather data is retrieved, Elvunea reduces the precision of your current location through technical processing and briefly sends it to Apple Weather to request local weather data. If a retrieval fails, the app may try again. Elvunea does not store location coordinates or access your location in the background. Local reminders contain no health data. Apple controls these services under the terms of your Apple Account.
4. Purposes and legal bases
Selected app functions are provided under Article 6(1)(b) GDPR. Voluntary health data and optional health-related sources are processed with explicit consent under Articles 6(1)(a) and 9(2)(a) GDPR. Consent can be withdrawn for the future by disabling the feature or system permission. Secure website operation and abuse prevention rely on Article 6(1)(f) GDPR.
5. Recipients and international transfers
Data is not shared for advertising, marketing, or data trading. Apple provides the App Store and TestFlight, HealthKit, WeatherKit, location, and notification services. IONOS SE hosts the website and email under a data-processing agreement. Apple may process data outside the EEA using the safeguards described in its privacy documentation.
6. Retention and deletion
When you turn sync off, existing data remains stored locally. Data already stored in iCloud is not automatically deleted from iCloud. iCloud sync keeps devices aligned and can restore the current data state. It is not an automatic or versioned backup; deletions can also sync between your devices. Technically, Elvunea uses your Apple Account’s private CloudKit database for this. On a new iPhone: Sign in with the same Apple Account, select iCloud in Elvunea, and fully restart the app. Then confirm Apple Health, location, and notifications again; restored reminders are scheduled only after your explicit confirmation. In Settings, you can reset the app data currently present on this device. If iCloud sync is active, Elvunea sends these deletions to iCloud and locks further use until you have checked and confirmed the deletion on a second device. Elvunea cannot independently verify full completion on Apple’s servers. PDF reports are generated only temporarily for sharing and are not stored permanently in the app.
7. Website and feedback
The website uses no cookies, analytics, advertising trackers, social-media plug-ins, or externally hosted fonts. IONOS processes technical access data needed for secure delivery. The app-only feedback form requests a category and message, but no email address, app version, or identifier. Do not enter names, contact details, or health data. A temporary pseudonymous IP hash limits abuse and is retained for no more than one hour.
8. Security
Protection includes iOS security mechanisms, file protection for local storage, an optional app lock, encrypted transmission to Apple services, and HTTPS for the website. No electronic system can guarantee absolute security.
9. Your rights
Where the legal requirements are met, you have rights of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent for the future under Articles 7 and 15–21 GDPR. Data stored only locally cannot be viewed by the controller; you can access, correct, export, and delete it in the app.
10. Complaints and changes
You may complain to a data protection authority. The authority responsible for the controller is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany. This policy is updated when functions, data flows, providers, or the law change. Material changes requiring new consent do not become effective merely by updating this text.