Privacy Policy

Version 2026-10-14 · Last updated October 14, 2026

1. Who we are

Elephant Diary is provided by [legal name of the company] ("we", "us"), based in Toronto, Ontario, Canada. We're responsible for the personal information described here. Our privacy officer can be reached at support@elephantdiary.com.

2. What we can't see: your record

Everything you put in your record, including entries, photos, expenses, your settings, your profile (name, phone and address), your lawyer's details, meetings, documents and notes, is encrypted in your browser with a key that only your password (or your recovery code) unlocks. We store only the encrypted version. We don't have your password or your key, so we can't read your record, and neither can anyone who might break into our servers.

The one exception is assisted recovery, which is off unless you turn it on. If you turn it on, we keep a copy of your key, protected by a separate key on our server, so that you can reset your password with only an emailed code. While it's on, we technically could open your record. You can turn it off at any time, and our copy is deleted.

3. What we collect

• Account information: your email address, and the date you created your account and accepted these policies. If you joined with a beta invite or a referral code, a short note of who the invite was for, or which code you used (it tells us which lawyer or mediator gave you the code, not anything about your case).
• Security information: a one-way hash of a sign-in token made from your password (never the password itself), encrypted copies of your key, sign-in sessions, two-step verification settings, and one-time codes (stored only as hashes, and deleted once used or expired).
• Information about your use: when entries and files are stored, their size and count, and your account and subscription status. We can see that an entry exists and when it arrived, but not what it says.
• Billing information: if you subscribe, Stripe processes your payment. We receive your Stripe customer ID, plan, subscription status and renewal date. We never receive your full card number.
• Messages: emails we send you (such as codes and trial reminders), and anything you send us when you contact support.
• Beta requests: what you send on the Join the beta form: your name, email, province, and the answers you choose to give (such as your parenting arrangement, or your practice if you're a professional), plus which ad or link brought you. We use it only to choose testers and contact you about the beta, and delete it within 12 months.
• Feedback: what you write and attach when you use Send feedback, the screen you were on, and your browser and device type. Feedback isn't encrypted like your record, so we can read it. If you ask us to reply, we keep your email with it; if you send it anonymously, it isn't linked to your account.
• Technical information: your IP address and browser details, used briefly to keep the Service secure (for example, to slow down password guessing). Our hosting and network providers may keep short-term logs that include IP addresses.

4. Information about your children and other people

Your record will usually include information about your children, the other parent and others in their lives. That information stays encrypted and we can't access it. Please record only what you need, and follow any court order or agreement that applies to you. Elephant Diary is for adults; it isn't directed at children, and we don't knowingly collect information from children.

5. How we use information

• To create and secure your account, sign you in and send you codes.
• To store and sync your encrypted record and files.
• To run your free trial and subscription, and send related messages (such as a reminder before your trial ends).
• To provide support, keep the Service secure, prevent abuse, and meet our legal obligations, such as tax records.

We don't use your information for advertising, and we don't sell or rent it. The app has no advertising or analytics trackers.

If you're in the UK: we rely on our contract with you to provide the Service, on our legitimate interests to keep it secure and improve it, on legal obligations for records we must keep, and on your consent for assisted recovery.

6. Who we share it with

We use a small number of service providers who process information for us, under contracts that require them to protect it:

• Hosting: Hostinger (servers that store your encrypted record and account information).
• Website delivery: Cloudflare (delivers the app's files; doesn't receive your record).
• Payments: Stripe.
• Email: [email provider], to send codes and account emails.

We may also disclose information if the law requires it (see "Requests from courts and authorities" in our Terms of Use), to protect someone's safety, or as part of a sale or reorganization of our business, in which case this policy continues to apply.

7. Where your information is stored

Your encrypted record and account information are currently stored on servers in the United States. We plan to move them to Canada and will update this policy when we do. Our service providers may process information in Canada, the United States and other countries. Wherever it's stored, your record stays encrypted with a key we don't have. Information stored in another country may be accessible to that country's courts and authorities under its laws.

8. How long we keep it

• While your account is open, we keep your information so the Service works.
• If your trial ends, your subscription ends or a payment fails, your record is locked. We keep a locked record for 12 months from the day it locks, so you can choose a plan again and carry on where you left off. We email you when it locks, and again 30 days and 7 days before the 12 months are up. Then we delete your account and your record, including every file. A deleted record can't be recovered.
• If you ask us to delete your account, we delete it within 30 days. Copies in our backups are removed as the backups expire, within about 5 weeks.
• We keep billing records as long as tax law requires.

9. How we protect it

Your record is encrypted on your device (AES-256-GCM, with a key locked by your password through PBKDF2), and each entry is sealed with a fingerprint so changes can be detected. Your password never leaves your device. Connections use HTTPS. Access to our servers is restricted, and you can turn on two-step verification. No system is perfectly secure, but encryption means a breach of our servers wouldn't expose the contents of your record. More detail is in Security and your data.

10. Your choices and rights

• See and download your record at any time while your account is open, with the lawyer package (PDF) and the CSV download. A locked record can't be opened or downloaded until you choose a plan again, so download a copy before your subscription ends if you'll want one.
• Correct or update your profile, email, settings and lawyer details in the app. Sealed entries can't be edited, by design, but you can add a correction.
• Ask us what account information we hold about you, to correct it, or to delete your account, by writing to support@elephantdiary.com.
• Turn off assisted recovery whenever you like.

Depending on where you live, you may have more rights, and you can complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada (or your province's commissioner); in the UK, the Information Commissioner's Office; in the US, your state's privacy regulator or attorney general. We'd appreciate the chance to help first. We honour these requests wherever you live.

11. Cookies and storage on your device

The app doesn't use cookies. It doesn't keep your password, your key or your record on your device after you log out or close the page.

12. Changes to this policy

If we make an important change, we'll tell you in the app or by email, and ask you to accept the updated policy before you keep using Elephant Diary.

13. Contact

Privacy officer, [legal name of the company], PO Box 58547, Toronto, Ontario M2N 6R7, Canada. Email: support@elephantdiary.com. Phone: 365-654-2223.