Privacy Policy

Last updated: October 2, 2026

This policy explains what data the Elfo app processes, why, and your rights (EU Regulation 2016/679, "GDPR").

Data controller

Luca Piazza — support@elfo.online

What data we process

• Account: email and name (if you sign in with email and password, Apple or Google), the identifier provided by Apple or Google, your password only in hashed form (never in plain text).
• Content you add: lists, people (name, relationship, budget, optional photo), ideas and gifts (title, price, store, link, notes), shares and balances of group gifts, cards, memories and their photos, anonymous Secret Santa messages.
• Location: only if you allow it and only while you search for a store; the search runs on your phone with Apple Maps. We only store the store you pick (name, address, coordinates), never your location.
• Subscription: payments are handled by Apple; through RevenueCat we only receive the subscription status, never payment details.
• Technical data: minimal server logs (route, outcome, duration) for security and operation, without content or passwords.

No advertising, no profiling, no selling of data, no cross-app tracking.

Why and on what basis

• Providing the app and syncing lists across your devices and with people you invite (performance of a contract).
• Security, abuse prevention and handling reports (legitimate interest).
• Subscription management (performance of a contract) and legal obligations.

Who sees your data

Shared lists are visible to the members you invite, following the app's rules (for example, ideas and gifts are never visible to the person they are for). Processors acting on our behalf: hosting on servers in the European Union (Hetzner, Germany); RevenueCat (subscription status, USA, under standard contractual clauses); Apple and Google only for sign-in, if you choose them.

How long

As long as you have an account. If you delete it (Settings → Delete account) we erase your personal data and photos; shared content other members rely on remains without any reference to you. Backups are overwritten within 14 days.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing by writing to support@elfo.online. You can delete your account directly in the app. You can lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Children

Elfo is not intended for children under 14 without the consent of a parent or guardian.