Privacy Policy
Last updated: 21 August 2026
This policy explains what personal data Elya ("Elya", "we", "us") collects when you use our mobile application, why we collect it, who we share it with, and the rights you have. Please read it together with our Child Safety Policy and Terms of Service.
1. Who we are
Elya is an AI companion and language-learning application, operated by GyEffe Technologies Ltd (company number SC899700), a private limited company registered in Scotland with registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN. For any privacy question, or to exercise your rights, contact us at support@meetelya.com. We are the controller of the personal data described below.
2. The data we collect
- Account data — your email address and display name, handled through Firebase Authentication (Google) when you register or sign in.
- Conversations and content — the messages, voice recordings (for pronunciation practice), and other content you send in the app, and the AI responses. Conversations are stored so the app can offer continuity and a personalised experience.
- Learning data — your progress, levels, and activity within lessons and practice.
- Notification tokens — a Firebase Cloud Messaging token, if you enable push notifications.
- Purchase records — confirmation that a subscription is active. Payments are processed by Google Play; we do not receive or store your card details (see section 6).
- Technical data — basic device and diagnostic information needed to run the app and keep it secure.
We do not knowingly collect data from children under 13 (see section 8).
3. How we use your data
We use your data to provide and operate the service: to generate AI responses and tutoring, to translate and assess pronunciation where you ask us to, to save your progress, to send notifications you have enabled, to process your subscription, and to keep the service safe and working.
4. AI processing and third-party providers
To generate responses and other features, the content you send — including text and, for pronunciation features, voice recordings — is transmitted to third-party AI providers, which may include Anthropic, OpenAI and Google. These providers process the content to return a result, in accordance with their own terms and privacy policies. The characters in Elya are artificial intelligence and not real people. We do not sell your personal data.
5. Sharing
We share data only with the providers needed to run the service: Google/Firebase (authentication, notifications, hosting), the AI providers named above (to generate responses), translation services, and Google Play (to process subscriptions). We may also disclose data where required by law, or to protect users, in line with our Child Safety Policy.
6. Payments
Subscriptions are sold and processed by Google Play. Google handles your payment details and, in most regions, acts as the seller of record and manages applicable taxes. We receive confirmation that a subscription is active, but not your card or banking information. You can view and cancel your subscription at any time in your Google Play account.
7. Legal bases (UK/EU GDPR)
Where the UK GDPR and, where applicable, the EU GDPR apply, we process data on the basis of: performing our contract with you (providing the app you signed up for); your consent (for example, before sending your content to AI providers, and for notifications); and our legitimate interests in keeping the service secure and functioning. You can withdraw consent at any time.
8. Children and young people
Elya is for users aged 13 and over. We do not knowingly collect personal data from anyone under 13. For users under 18 we apply enhanced privacy protections in line with the UK Children's Code (Age Appropriate Design Code): high-privacy defaults and no manipulative design. Parents or guardians can contact support@meetelya.com to raise a concern or request deletion of a minor's data. See our Child Safety Policy for more.
9. Data retention
We keep your data for as long as your account is active and as needed to provide the service. You can delete your account at any time from Settings → Account removal → Delete account in the app, which erases your account and its data straight away; residual copies may persist in encrypted backups for up to 30 days. See Delete your account for the full list of what is removed, and what we must keep to meet legal obligations.
10. Your rights
Subject to applicable law, you have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise any right, email support@meetelya.com. If you are in the UK you also have the right to complain to the Information Commissioner's Office (ICO); in the EU, to your local data protection authority.
11. Security
We use reasonable technical and organisational measures, including encryption in transit, to protect your data. No system is perfectly secure, but we work to keep your information safe.
12. Changes
We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you in the app.
13. Contact
For any privacy question, contact support@meetelya.com.