Privacy Policy
Effective 17 August 2026 · Version 2026-08-17
Elevis is a user-maintained treatment tracker, not a healthcare provider. Do not use it for emergency or medical advice.
Who controls your data
ELEVIS LTD (company number 17368447) is the controller for the Elevis website, mobile and Windows apps, account portal and support service. Contact privacy@elevis.co.uk. You may complain to the UK Information Commissioner’s Office, although we would appreciate the opportunity to address your concern first.
What we collect
| Information | Why |
|---|---|
| Identity and account details | Create and secure your account, communicate with you and provide support. |
| User-entered health and treatment records | Provide tracking, summaries, exports, reminders and Premium features you request. These may be special-category data. |
| Purchase and subscription status | Provide and manage Premium entitlements. Stripe or the applicable app store collects payment details directly under its own terms; Elevis does not receive full card numbers or security codes. |
| Support chats, tickets, emails and attachments | Answer requests and maintain continuity, quality and safety. |
| Device, session, security and audit data | Protect accounts, prevent abuse, diagnose faults and evidence accountable access. |
| Android crash logs and diagnostics | Diagnose and correct app failures. Reports may include the app/build version, Android version, device model and architecture, error message and redacted stack trace. Elevis does not automatically attach treatment records, medication notes, photos or full payment details. |
| Optional analytics choices | Measure and improve the service only where you have made the optional choice. |
Crash reporting and YouTrack
When the Android app encounters an unhandled software error, it securely queues a bounded diagnostic report and sends it after authentication. Likely passwords, access tokens and email addresses are redacted on the device and again by the Elevis server. Reports are rate-limited and sent to Elevis’s contracted engineering issue processor, YouTrack by JetBrains, solely so Elevis can investigate and fix the fault. YouTrack credentials are never included in the app.
Lawful bases
We use contract where processing is necessary to provide the account and paid service; legitimate interests for proportionate security, fault diagnosis, fraud prevention, support quality and service improvement; legal obligation for records we must keep; and consent for optional processing. Where the law requires a condition for special-category health information, Elevis relies on your explicit choice to use those tracking features and any consent presented at collection. You may stop entering optional data and withdraw consent, but this does not affect earlier lawful processing.
Sharing and international processing
We use vetted service providers for hosting and infrastructure, email, payment processing, engineering issue management, software delivery and security. They receive only information needed for their role and act under appropriate terms. We may disclose information where legally required or to protect people and the service. Where a provider processes data outside the UK, we use an applicable adequacy regulation or contractual safeguards and risk assessment.
Retention
Account and tracker records remain while your account is active unless you delete them. Export files are short-lived. Support, diagnostics, security, billing and audit records use documented retention schedules based on purpose, disputes, fraud prevention and legal obligations. Deletion requests may first disable the account; limited records may remain in protected backups until rotation or where retention is required. Current schedules are shown in the Data Centre and on the account-deletion page.
Your choices and rights
The Data Centre lets you access and export records, request correction or deletion, withdraw optional analytics consent and revoke sessions. See Delete your Elevis account for public account and partial-data deletion instructions. Depending on the lawful basis, you may also have rights to restriction, portability and objection. Email privacy@elevis.co.uk. We verify requests and normally respond within the legally applicable period.
Automated features
Medication Intelligence and the AI Health Journal summarise records factually. They must not diagnose, prescribe, determine eligibility or make decisions with legal or similarly significant effects. A human support route remains available.
Changes
Material changes receive a new version and, where appropriate, an in-product notice or renewed acceptance. This policy is reviewed when vendors, analytics, retention, age eligibility or processing purposes change.