Privacy Policy
Effective October 2, 2026
The operator of Elthos ("Elthos", "we") runs the Elthos apps for web, iPhone, Mac, and Android. This policy explains what we collect, why, who helps us process it, and the choices you have.
What we collect
- Account details: your email address, your name if you give one, and a password, which our sign-in provider stores only in hashed form. If you sign in with Google, Microsoft, or Apple, we receive your email address and name from them.
- Your content: audio you record or upload, transcripts, notes and summaries made from them, files and images you add, messages you send to the AI chat, tasks, and project and class information, including the email addresses of people you invite.
- Calendar events: only if you connect a Google or Outlook calendar, the upcoming events needed to show and detect your meetings.
- Usage records: how much recording time and how many AI requests your account has used, to apply plan limits.
- Technical data: your IP address and basic request details, used to keep the service secure (for example, to limit repeated sign-in attempts) and kept in server logs for a limited time.
- Copyright notices: if you send us a copyright notice or counter-notice, the details you give in it. We share a notice with the person whose content it is about, and a counter-notice with the person who sent the notice, as the law provides.
- Date of birth: asked once when an account is created, to confirm you are at least 13. We do not keep the date; we keep only the fact and time that your age was confirmed.
How we use it
We use this information to provide Elthos: to record, transcribe, summarise, and organise your content, answer your questions about it, sync it across your devices, share it with the people you choose, apply plan limits, keep the service secure, and reply when you contact us. We do not sell your personal information, we do not show advertising, and we do not use your content to train our own AI models.
No tracking
Elthos does not use advertising trackers, third-party analytics, or session-replay tools, and does not record your keystrokes or screen. Fonts and scripts are served from our own servers. The web app uses an essential registration cookie and a device-local restriction to prevent repeated registration attempts after an eligibility refusal. Both expire after 24 hours. Other browser storage keeps you signed in and makes your work available quickly and offline. The Cookie Policy lists each item.
Who processes data for us
We share data only with the service providers needed to run Elthos, each under its own terms:
- Supabase — sign-in, the database, and file storage (hosted in the United States).
- OpenAI — generating notes, summaries, answers, and reading images and documents you add.
- ElevenLabs — turning speech into text.
- Google and Microsoft — only if you sign in with them or connect a calendar.
- Stripe — payment processing and subscription management when you use billing. Stripe receives your billing email and payment information; Elthos stores customer and subscription references, billing status, and billing periods. Card details are entered directly with Stripe.
- Our hosting provider — running the Elthos servers.
We may also disclose information when the law requires it, or to protect the rights and safety of people and the service.
Sharing you control
Content you put in a shared project or class, or share with a person, is visible to the people you shared it with. Their access ends when you remove them or delete the content.
How long we keep it
We keep your content until you delete it. Deleting a session, file, project, or chat removes it from our database and file storage. Deleting your account from Settings removes your account and your content; copies in routine backups are overwritten in the normal course.
Your choices and rights
You can see, export, correct, and delete your content in the app, and delete your whole account from Settings. Depending on where you live, you may also have the right to ask for a copy of your personal information, to have it corrected or deleted, to object to or restrict some uses, and to complain to your data-protection authority. To make a request, contact us at the address below. We do not discriminate against anyone for using these rights.
Children
Elthos is not directed to children under 13 and we do not knowingly collect personal information from them. We ask for a date of birth before an account is created and do not create one for anyone under 13. If we learn that we hold personal information from a child under 13, we delete it. A parent or guardian who believes a child has given us information can contact us at the address below.
Other people in your recordings
Recordings can contain the voices and words of other people. The person who makes a recording is responsible for telling them and getting any consent the law requires. If you believe you were recorded without your agreement, contact us and we will look into it.
Where data is processed
Elthos is operated from the United States, and your information is stored and processed there and wherever our service providers operate. Where the law requires it, we rely on appropriate safeguards for transfers.
Security
Data is encrypted in transit, files are kept in private storage that only your account and the people you share with can reach, and access is checked on every request. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
We send email that your account needs, such as sign-in confirmations, password resets, and invitations other people send you. We send product news only if you agreed to it, and every such message has a link to unsubscribe.
Changes
If we change this policy in a significant way we will tell you in the app or by email before the change takes effect.
Contact
The operator's contact details have not been published yet.