Elandra Privacy Policy
Last updated:
This policy explains how personal data is handled in the Elandra app distributed through the Apple App Store and Google Play. The data controller is Simurg Apps (Ömer Koç, individual developer, Kadıköy, Istanbul). Our general Privacy Policy and the KVKK Notice also apply.
1. Account and sign-in information
- If you register with email, we process your email address, chosen profile name and account ID. Your password is stored on our servers (Cloudflare) only as a salted one-way hash and is never stored in plain text.
- If you sign in with Apple or Google, we receive your account ID, email address and, if shared, your name from that provider. We never see your Apple or Google password. If you use Apple's Hide My Email, an Apple relay address is used.
- Password reset emails are sent through the Resend email service.
2. Information you provide in the app
- Birth details: your date of birth, optional birth time, selected birth place and its coordinates and time zone are used to calculate your birth chart and personalise readings. The selected birth place is not your device's live GPS location; the app does not access your location.
- Content: chat messages, fortune and tarot results, journal and mood entries, friend information and reports are stored to provide these features and show your history. Only add another person's information with their permission.
- Coffee cup photos are not stored: photos are processed once while your reading is generated and then discarded; only the reading text is kept.
- Purchases: subscription status, product and transaction IDs, purchase history, and Stardust balance and transactions are processed to verify and restore purchases. We do not receive your card number or security code.
- Support: we process emails you send us to answer your request.
3. Technical data, analytics and notifications
- Our service providers may process network data such as your IP address for connectivity and security.
- App and OS version, device information, installation and user IDs, and error and crash logs are processed for security and troubleshooting (Firebase Crashlytics and Performance Monitoring). Crashlytics records may be linked to your account ID.
- If you allow it, Google Analytics for Firebase measures screen views, interactions and usage time. These records may be linked to an account or installation ID, so we do not describe them as fully anonymous. You can change your choice any time in Me → Settings.
- Reminder notifications are scheduled locally on your device; no push notifications are sent from our servers. Manage notifications in your device settings and promotional messages in the app.
- Elandra shows no ads and uses no advertising network SDK; we do not track you across other apps or websites.
4. AI and service providers
| Provider | Purpose | Data sent |
|---|---|---|
| Cloudflare | Servers, authentication, database, security | Account and app data |
| DeepSeek | Personal readings, astrologer chat, fortune features | The birth chart summary, messages and chat summaries, feature inputs and coffee cup photos a feature needs |
| Google Firebase | Crash reports, performance monitoring, analytics with consent | Technical data, IDs, usage events |
| RevenueCat | Subscriptions and in-app purchases | User ID, purchase information, Firebase app instance ID |
| Resend | Account emails (password reset) | Email address |
| Apple and Google | Your chosen sign-in method and store payments | Subject to their own policies |
About DeepSeek: only the information a feature needs is sent through our server; your whole journal is not sent with every request. Please avoid sharing health, identity document or payment information in chats. DeepSeek states in its policy that it processes data in China and has its own retention practices; we cannot promise that data is never used for model training or retained for zero time. DeepSeek Privacy Policy
Other providers: Cloudflare · Firebase · RevenueCat · Resend
These services may process data outside Türkiye. See the KVKK Notice for transfers abroad. We do not sell your data. We may disclose information to competent authorities when legally required.
5. Retention and account deletion
- Account data and app content are kept while your account is open.
- Delete your account in Me → Settings → Delete my account. If you can't access the app, follow the steps on Account & Data Deletion. Deletion covers your birth chart, readings, chats, fortune results, journal entries, friend links, reports and Stardust balance. We also request deletion of your RevenueCat customer record.
- Deleting your account does not remove payment records held by Apple or Google and does not cancel a renewing subscription; manage it in the store where you bought it.
- Technical logs, analytics and service provider records may not be deleted at the same time as your account data; they are kept according to security and troubleshooting needs, service settings and legal duties. Support correspondence is kept until your request is resolved.
6. Your rights and choices
- Download a copy of your data in Me → Settings → Download my data.
- Email destek@simurgapps.com for access, correction, deletion or other requests. We may need to verify that a request comes from the account owner.
- You can withdraw consent for consent-based processing at any time; this does not affect earlier lawful processing. Details: Privacy Choices.
7. Security and children
We use encrypted connections, authentication and access controls; no system can guarantee absolute security. Elandra is not directed to children under 13, and the app enforces this based on date of birth. Contact us if you believe we have processed a younger child's data.
8. Changes and contact
We update this policy when our data practices change, announce material changes appropriately and ask for renewed permission where required. Reading this policy or using the app does not replace any separate consent that must be obtained.
Support and privacy requests: destek@simurgapps.com