Privacy Policy

Introduction

Welcome to Elio AI Logo Design Studio ("Elio", "we", "our", or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

By using Elio, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

Eligibility & Age Requirements

Elio is intended for users who are at least 16 years of age. Under the General Data Protection Regulation (GDPR), the age of digital consent — when an individual can legally consent to their personal data being processed by an app or AI service without parental approval — is generally 16 years old. However, the GDPR allows individual EU/EEA member states to lower this threshold to as young as 13 years old.

• 16+ years: Users may provide their own consent for Elio to process their personal data.
• 13–15 years (depending on country): Processing of a minor's data is only lawful if consent is given or authorized by a parent or legal guardian. Countries such as Belgium, Ireland, the UK (under UK GDPR), Italy, Spain, Denmark, Sweden, and Poland set the threshold at 13; Austria and Bulgaria at 14; Finland, Greece, and France at 15; while Germany, the Netherlands, Hungary, Lithuania, Luxembourg, Romania, and Slovakia maintain the default of 16.
• Under 13: We do not knowingly collect personal information from children under 13 in any jurisdiction.

If you are below the applicable age of digital consent in your country, you must have the consent of a parent or legal guardian to use Elio. We make reasonable efforts, considering available technology, to verify that parental consent has been obtained where required. Accounts for users under 18 are treated with additional privacy protections by default.

If we learn that we have collected personal information from a user who does not meet the applicable age requirement without proper parental consent, we will promptly delete that information and terminate the associated account.

Data We Collect

Account Information

When you create an account, we collect information provided by your authentication method. We support the following sign-in options:

• Google OAuth — name, email address, and profile picture
• Apple Sign In — name and email address (may be a private relay address)
• Email & Password — email address and a securely hashed password

For OAuth providers, we do not store your third-party passwords. For email/password accounts, passwords are hashed and managed by our authentication infrastructure — we never store or have access to plaintext passwords.

Usage Data

We automatically collect certain information when you use the Service, including device information, operating system, browser type, app version, and interaction data such as features used and generation history.

Generated Content

When you use our AI logo generation features, we store the images you create, along with the text prompts and style preferences you provide. This data is associated with your account and used to display your generation history.

How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your AI logo generation requests
• Manage your account, credits, and subscription
• Store and display your generation history
• Send you important service-related communications
• Monitor usage patterns to improve performance and user experience
• Detect, prevent, and address technical issues or abuse

Image Storage

All generated images are stored securely in our cloud storage infrastructure. Images are associated with your user account and are not publicly accessible. We use time-limited signed URLs to provide secure access to your images. Images are retained for as long as your account is active.

Cookies & Local Storage

The Elio web platform uses browser local storage and session storage to maintain your authentication state, theme preferences, and other functional settings. We do not use third-party tracking cookies. Our mobile application uses secure device storage for similar functional purposes.

Billing & Payments

iOS (App Store)

Subscription and credit purchases on iOS are processed through Apple's App Store and managed via RevenueCat. We do not directly collect or store your payment card information. We receive transaction confirmations and subscription status updates to manage your credit balance and entitlements.

Web (Stripe)

Subscription and credit purchases on the web platform are processed through Stripe. Stripe collects and processes your payment information directly — we never see or store your full card number. We receive transaction confirmations, subscription status updates, and a Stripe customer identifier to manage your credit balance and entitlements.

User Content & Deletion

You retain ownership of the logos and images you create using Elio. You may delete individual generations from your library at any time.

To delete your account and all associated data, use the Delete Account option in Settings. This will permanently remove your personal information, generation history, stored images, and credit records. Some anonymized, aggregated usage data may be retained for analytics purposes.

You may also contact us at the email address below to request account deletion.

Data Retention

We retain your personal information and generated content for as long as your account is active. Upon account deletion, we remove your data promptly. Anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes. Billing transaction records may be retained as required by law or for legitimate business purposes (e.g., tax compliance).

Third-Party Services

We use the following third-party services to operate Elio:

• Supabase — Authentication, database, and file storage
• FAL AI — AI image generation, upscaling, and background removal
• RevenueCat — Subscription and in-app purchase management (iOS)
• Stripe — Payment processing (web)
• Apple App Store — App distribution and payment processing (iOS)
• Firebase Hosting — Web application hosting

Each of these services has its own privacy policy governing the use of your information. We encourage you to review their respective policies.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from those of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), secure authentication, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

General Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to or restrict processing of your personal information
• Data portability — receive your data in a structured, machine-readable format

GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your personal data includes: performance of our contract with you (providing the Service), your consent (where applicable), and our legitimate interests (improving and securing the Service). You have the right to lodge a complaint with your local data protection authority.

CCPA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information to third parties.

To exercise any of these rights, please contact us at the email address below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@eliologo.com