Privacy Policy

Last updated: 1 August 2026

1. Who we are

Ellika (“Ellika”, “we”, “us”) is a seizure and medication tracking service for pets. It is available as a web app at ellika.app and as native iOS and Android apps.

Ellika is an independent project, built and run by one person. There is no company behind it and no team, which is also why the data footprint is as small as it is.

The data controller for the personal data described in this policy is the person who runs Ellika:

Contact: support@ellika.app. The controller’s registered business details are available on request at this address.

That address reaches the person who built the app. Use it for anything at all: a question about this policy, a request to exercise your rights (§10), or a complaint. It is the fastest route to a real answer.

Postal address. Ellika is not operated from business premises, so no postal address is published here. If you need one, to send a formal legal or regulatory notice or to make a data-protection request in writing, email support@ellika.app and we will provide it.

2. The short version

• Ellika exists to store the health log you keep for your animal. That log (seizures, medications, doses, appointments, notes, photos and videos) is the product.
• We do not sell your data. We do not share it with advertisers. There are no analytics SDKs, no advertising SDKs, and no third-party trackers in the web app or the mobile apps.
• The only people who can see a pet’s record are you, the caregivers you explicitly invite, and anyone you hand a share link to.
• Optional features (Telegram logging, Ellika AI, push notifications, emailing a vet report) send data onward. Each is off until you turn it on.
• You can export your seizure log, wipe your data, or delete your account outright from Settings, at any time, without contacting us.

3. Ellika is for animals

Ellika is designed, built, and intended solely for tracking the health of animals. Every part of the service assumes an animal patient: the record fields, the statistics, the reports, and the language throughout.

It is not a tool for recording a person’s health. It has not been designed, tested, validated, or certified for that purpose. It is not a medical device, it is not clinical software, and it is not built to the standards that recording human health information requires.

If you nonetheless choose to use Ellika to record information about a person:

• You do so entirely at your own risk and on your own responsibility.
• You alone are responsible for having a lawful basis to record that person’s health information, for informing them, and for meeting any legal obligation that applies to you as a result, including the stricter rules that govern health data about human beings.
• We make no representation that the service is suitable, adequate, secure enough, or legally compliant for that purpose.
• To the fullest extent permitted by law, we accept no liability for any consequence of that use, including any regulatory, legal, or medical outcome.

We ask that you don’t. Please use a tool built for the purpose instead.

4. What we collect

Ellika collects only data that you or someone on your care team enters, plus the minimum technical data needed to run the service. We do not buy data, we do not enrich profiles from outside sources, and we do not infer anything about you beyond what you have logged.

4.1 Account data

4.2 Pet records

A “patient” in Ellika is the animal being tracked. This is the heart of the service, and it is the data we hold most of:

• Pet profile: name, species, breed, sex, neutered/spayed status, date of birth, weight, colour, microchip ID, diagnosis date, time zone, free-text notes, and an optional photo.
• Seizure records: start and end time, duration, intensity, seizure type, consciousness level, triggers, symptoms, recovery time, whether rescue medication was given and any notes about it, free-text notes, which surface it was logged from, and which account logged it.
• Attachments: photos and videos you attach to a seizure record (up to 80 MB per file, 2 GB per account on the free plan).
• Medications: name, category, dose amount and unit, route, frequency, schedule times, start and end dates, the prescribing vet’s name, instructions, and refill and supply tracking.
• Dose logs: scheduled and administered times, status (given, missed, skipped, scheduled), dose, notes, and which account logged it.
• Appointments: title, date and time, duration, type, status, location (the clinic name or address you type), and notes.
• Timeline entries: your own rich-text notes, vet-visit summaries, diet changes, observations and milestones, with the author’s name.
• Reminders: what to remind you about, when, how often, on which channels.

Records about an animal are not themselves personal data about a human. But they are linked to your account, and some fields you type (a vet’s name, a clinic address) are personal data about other people. We treat the whole record as personal data belonging to you, and protect it accordingly.

4.3 Sharing and care-team data

• Care team members: the account and role (editor, viewer, or reports) of every person you grant access to a pet’s record.
• Invitations: when you invite someone to a care team, we store the email address you supply, the role, an unguessable accept token, and an expiry. Invitations lapse automatically.
• Share links: a revocable token granting read-only access to one pet’s record without an account, plus the optional name and email you label it with, its expiry, and the time it was last opened.

4.4 Device and delivery data

• Push tokens: if you enable push notifications, we store the notification token issued by your device, the platform (iOS, Android, or web), a device name, and when it was last seen.
• Delivery log: one record per reminder actually sent, noting the reminder, the scheduled slot, the channel, the time, and whether it succeeded. This exists so a reminder is never sent twice for the same slot.
• In-app notifications: the inbox of messages the service has sent you.

4.5 Integration data (only if you connect it)

• Telegram: your Telegram chat ID and username, your chosen default pet, and whether AI mode is on. Created only when you complete the connection flow, and removed when you disconnect.
• Ellika AI: see §7.

4.6 What we do not collect

• No location. The apps never request location permission. (An appointment’s “location” is only free text you type.)
• No contacts, no calendar, no health-app data.
• No advertising identifiers, no fingerprinting, no cross-site tracking.
• No analytics. There is no product analytics, session-replay, heat-mapping, or crash-reporting SDK in either app.
• No card data. Optional purchases (Ellika Plus, credit packs) are handled by Creem (Armitage Labs OÜ), our merchant of record. Your card details go to Creem, never to us. We receive only what’s needed to activate a purchase: which product was bought, and when.

4.7 Forms on the website

Separate from your account, the ellika.app website has two forms. Both are handled by our form provider, which stores the submission so we can read it.

• Contact form: the name, email address and message you type. Used only to read and reply to you.
• Printable seizure log: your email address, so we can send you the printable. There is a separate, unticked box for occasional emails about Ellika. Ticking it is the only thing that puts you on a mailing list, and leaving it unticked still gets you the printable. Every marketing email carries an unsubscribe link, and unsubscribing removes you.

Neither form is connected to your pet’s records.

4.8 Technical data

Our service providers process standard connection data (IP address, request timestamps, user agent) in server and edge logs for security, abuse prevention, and reliability. We do not use those logs to build a profile of you, and we do not combine them with your pet’s records.

5. How we use it

We use your data to:

1. Run the service: store and display your log, calculate statistics and adherence, generate the calendar, insights and vet reports.
2. Deliver reminders: send medication and appointment reminders at the right local time, through the channels you choose.
3. Enable sharing: let your care team see and log data, and let a share link render a read-only view.
4. Send transactional email: password reset codes, email-change confirmation codes, care-team invitations, and vet reports you ask us to send.
5. Notify you about activity: for example, when a caregiver logs a dose or when your share link is opened.
6. Keep the service secure and within limits: authenticate you, enforce per-pet authorisation, dedupe reminder sends, and enforce storage and AI usage caps.
7. Answer your questions when you email support.

We do not use your data to train any AI model, and we do not permit our providers to do so. We do not profile you or make automated decisions with legal or similarly significant effects.

Your pet’s records are never used for marketing. The only marketing we send is to people who ticked the optional box on the printable seizure log page (§4.7), and it goes to that email address alone. Unsubscribe once and it stops.

6. Legal bases (GDPR)

If you are in the EEA, the UK, or Switzerland, we rely on the following:

Because Ellika tracks animals, the records you keep are not special-category health data under Article 9 GDPR. That category covers health data about human beings. Your account data and the details you enter about other people are ordinary personal data, protected under Article 6.

6.1 Other people’s details that you enter

You will sometimes enter information about people other than yourself: a prescribing vet’s name, a clinic’s address, the email address of a caregiver you invite, or the address you send a vet report to. You are responsible for entering only what is appropriate, and we process it solely to provide the feature you used it for.

7. Ellika AI

Ellika AI is optional. It powers the summary lines on the Insights and Today screens, the in-app chat, and (if you enable it) conversational logging through Telegram. If you never use it, no data leaves our infrastructure for AI purposes.

Where it goes. Requests are handled by a third-party AI provider on our behalf, under contract. That provider is contractually barred from training on your data, and we do not use a provider that reserves the right to do so.

What is sent.

• For summaries: only a computed, aggregated statistics bundle. Counts, averages, medians, trends, time-of-day distributions, and a coarse window label at month granularity. No names, no email addresses, no exact timestamps, no raw records.
• For chat: the same aggregate bundle, plus your pet’s name and species (so the assistant refers to them correctly rather than inventing a name), the time zone and current local time, a list of up to 15 recent seizure events, and the messages you type. Do not type anything into the chat you would not want sent to a model provider.
• Never sent: your email address, your account name, your password, photos, videos, attachments, or any other pet’s records.

What is stored. We store the generated summary lines (cached so identical data isn’t re-generated), your chat threads and their messages, and a usage record per model call containing the model name, token count, and timestamp. All of it is deleted with the pet’s record or with your account.

What it will not do. The models are instructed to be strictly descriptive: they rephrase facts you have already logged. Ellika AI does not diagnose, predict seizures, or give veterinary, dosing, or treatment advice, and its output is not a substitute for a veterinarian.

8. Who we share data with

We do not sell personal data, and we have never disclosed personal data for cross-context behavioural advertising.

8.1 People you choose

• Care team members you invite see the record at the role you grant them (editors read and write, viewers read, the reports role is read-only). You can change or revoke a role at any time.
• Anyone holding a share link can see a read-only view of that one pet: identity, recent seizures, active medications, and a headline adherence figure. Treat the URL as the credential. Anyone it is forwarded to can open it. You are notified when a link is opened (at most once every four hours per link), and you can revoke or expire it at any time.
• Anyone you email a vet report to. The report is a PDF containing that pet’s full record for the period, sent to the address you type. Check it before sending.
• Telegram, if you connect it. Messages you send the bot and reminders we send you pass through Telegram’s servers and are subject to Telegram’s own privacy policy. Disconnecting removes the link.

8.2 Service providers

We use a small number of specialist providers to run the service. They process your data only to provide their service to us, and none of them may use it for their own purposes.

We will tell you exactly who these providers are on request. Email support@ellika.app and we will name them.

8.3 Legal disclosure

We may disclose data if required by law, court order, or a valid request from a competent authority, or where necessary to establish, exercise, or defend legal claims, or to protect the rights and safety of users. Where we are legally permitted to do so, we will tell you first.

8.4 Business transfer

If Ellika is ever acquired or merged, your data may transfer to the acquirer. We will notify you before that happens and before your data becomes subject to a different privacy policy.

9. How long we keep it

We keep your data until you delete it. There is no automatic expiry on your log. A seizure history is only useful if it is complete, so we do not prune it.

Exceptions and specifics:

• Password reset and email-change codes expire within 15 minutes. Only a hash of the code is ever stored, never the code itself.
• Care-team invitations expire and are removed when the pet’s record is deleted.
• Telegram linking tokens are single-use and short-lived.
• Share links last until you revoke them or their expiry passes.
• Dead push tokens are pruned automatically when a device stops accepting notifications.
• Inactivity. We record when your account was last active. We do not currently delete dormant accounts automatically. If we introduce that, we will warn you by email well before anything is removed and update this policy first.

9.1 Deleting your data

Two controls live in Settings → Danger zone, and both are immediate and irreversible:

• Delete all data: removes every pet you own and all of their records (seizures, attachments and their stored files, medications, dose logs, appointments, timeline entries, reminders, AI summaries and chat threads, care-team grants and share links), plus your own notifications, devices, Telegram link, saved preferences, and your access to records other people shared with you. Your account survives. You keep your login and start from a clean slate.
• Delete account: everything above, plus your avatar file, your authentication records and sessions, and your user record itself. You are signed out permanently and cannot recover the account.

Owners can also delete individual data types for a single pet (just the seizure log, just the medications, and so on) from the same screen.

Step-by-step instructions for every route, including deletion by email, are on the Delete your account page.

What deletion does not touch. Pets owned by other people that were shared with you are not deleted. Only your access to them is removed. Data you logged on someone else’s pet stays on their record, since it is their animal’s history. Where your name was attached to an entry, it is replaced with the name as it stood at the time so their log does not break.

Backups. Deletion removes data from the live service straight away. Residual copies may persist in our providers’ encrypted backups for a limited period before being overwritten in the ordinary course.

10. Your rights

Wherever you live, you can export your data (CSV export of the seizure log, and a PDF vet report) and delete it, directly in the app, without asking us.

Under GDPR you also have the right to:

• access the personal data we hold about you
• rectify data that is inaccurate or incomplete
• erase your data (“right to be forgotten”)
• restrict processing in certain circumstances
• data portability: receive your data in a structured, machine-readable format
• object to processing based on legitimate interests
• withdraw consent at any time, without affecting processing already carried out
• lodge a complaint with your supervisory authority

If you are in California, you have the rights to know, delete, correct, and opt out of sale or sharing under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, and we do not offer financial incentives for data. We will not discriminate against you for exercising any right.

To exercise a right we cannot handle in-app, email support@ellika.app. We will respond within 30 days (extendable by a further two months for complex requests, which we will tell you about). We may need to verify your identity, normally by confirming control of the account’s email address.

11. Security

• Passwords are stored only as salted hashes. We never see your password and cannot recover it.
• Authorisation is enforced on the server for every read and every write. Your identity is always derived server-side from your session. The app never accepts a client’s claim about who it is or what it owns. Access to a pet’s record requires being its owner, holding an active care-team grant, or presenting a valid share token.
• Share tokens and invitation tokens are high-entropy, revocable, and expiring.
• Session tokens on iOS and Android are stored in the platform keychain (iOS Keychain, Android Keystore), not in plain app storage.
• Transport is encrypted with TLS throughout. Data at rest is encrypted by our infrastructure providers.
• The Telegram integration verifies every inbound message against a shared secret, so a third party cannot inject messages into your account.
• Uploaded files are served through short-lived signed URLs rather than public links.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.

11.1 A note on photos and videos

Attachments are stored exactly as you upload them. Photos and videos from a phone often carry embedded metadata, which can include the time and the GPS coordinates where they were taken. Ellika does not strip that metadata, and it travels with the file if you share the record or download the attachment.

12. Children

You must be 16 or older (or the digital-consent age in your country, if lower) to create an Ellika account. We do not knowingly collect personal data from children. If we learn that a child has created an account, we will delete it.

13. International transfers

Some of our service providers process data outside the European Economic Area, principally in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework, together with the safeguards in each provider’s data processing agreement.

14. Cookies and local storage

Ellika does not use advertising or analytics cookies, and there is nothing to consent to beyond what is strictly necessary. We use:

• Session storage, to keep you signed in. Held in browser storage on the web, and in the device keychain in the mobile apps.
• Preference storage, a local cache of your theme and selected pet, so the app renders correctly before your saved settings load.

Clearing browser storage or signing out removes these.

15. Not veterinary advice

Ellika is a record-keeping tool. It is not a medical device, it does not diagnose or treat any condition, and nothing in the app (including anything Ellika AI generates) is veterinary advice. Always consult a qualified veterinarian about your animal’s care, and never change a medication or dose based on the app alone.

16. Changes to this policy

We will update this policy when the service changes. For material changes (a new category of data, a new type of recipient, or a new purpose) we will notify you in the app or by email before the change takes effect, and update the “Last updated” date above. Continuing to use Ellika after a change means you accept the updated policy.

17. Contact

Questions, requests, or complaints: support@ellika.app

Ellika is run by one person (see §1).