Privacy policy

Last updated: October 2026

This is an English translation provided for convenience. The French version is the legally binding one.

1. In short

The app runs entirely on your phone. It has no server: your recordings, capsules and settings are never sent, neither to us nor to anyone else. We don't have access to them and can't access them.

During the beta, the app is free. It contains no ads, no analytics tools and no crash reporting.

2. Who is responsible

Controller: Koerans
Contact: contact@eliveo.qiveo.co. Reply within one month at most.

No data protection officer (DPO) has been appointed, as the volume and nature of the processing don't require one (Article 37 GDPR).

3. What stays on your phone

This data is created and kept only in the app's private storage on your device. We don't receive it.

• Audio recordings: encrypted (AES-256-GCM) with a random key created on your phone. This key is never stored in plain text: it's locked by your PIN code and, if you created one, by your recovery phrase.
• Description of a capsule's trigger: encrypted the same way.
• Information about capsules and entries (dates, length, type, status, waveform, prompt used) and first name or nickname: in the app's database, fully encrypted (SQLCipher) with a key derived from the same random key. It only opens once the app is unlocked.
• PIN code: never stored. The phone's secure vault (Android Keystore) only holds the key locked by your code.
• Recovery phrase: never stored. The app shows it once when it's created; the secure vault only holds the key locked by the phrase.
• Language, reminder settings: app preferences on the phone, without encryption, because the app needs them before unlocking. Each capsule's opening date is also known to your phone's system, which schedules the notification.

Android backup: the app excludes its data from Android's automatic backup. It is therefore not copied to your Google account.

Your recovery phrase does two things: it gets you back into your capsules if you forget your code, and it opens an exported archive (section 4). We don't know it and can't give it back to you. Keep it somewhere safe, away from your phone.

Important consequence: if you lose your phone, reset it or uninstall the app, everything that hasn't been exported is lost. We can't restore anything. On a new phone, the phrase alone isn't enough: you also need an exported archive.

4. What leaves your phone only if you decide so

• Export (Profile → Export my data): the app creates a .eliveo file containing your entries, your capsules, their audio and your first name. The content is encrypted (AES-256-GCM) and only opens with your recovery phrase; only the export date, the number of recordings and their rounded size, and technical decryption data remain readable. The app then opens your phone's share menu: you choose where to send the file (Drive, email, computer…). The service you choose stores a file it can't read.
• Restore: on a new phone, "I already have an archive" on the welcome screen; on a phone already in use, Profile → Restore an archive (the archive's content is added, nothing is replaced). You need the file and the phrase that was in place at the time of export: if you change your phrase, export a new archive.
• Share card: when a capsule opens, the app can create an image on your phone. It's only sent if you share it yourself, with the app of your choice.

5. What the app doesn't do

• No email address, no phone number requested
• No location, no access to contacts
• No transcription or analysis of your voice by an outside service
• No advertising ID, no ads
• No analytics, no crash reporting
• No payment: the beta is free

Permissions requested: microphone (to record), notifications and exact alarms (to alert you at a capsule's opening time and for the daily reminder, both scheduled on the phone), background audio playback.

6. The eliveo.qiveo.co website

If you leave your email address in the website form:

• Data: email address, signup date and the language of the page you signed up from.
• Why: to invite you to test the app and let you know when it launches, in your language.
• Legal basis: consent (Article 6(1)(a) GDPR).
• Where it's stored: the website's database, with our host Hostinger, on a server in France. It doesn't leave the European Union.

Your address is kept until the app's public release, then deleted. You can ask for it to be deleted earlier at contact@eliveo.qiveo.co.

Website hosting: Hostinger, server in France. Cookies: the website sets no analytics or advertising cookies.

7. Your rights

The GDPR (Articles 15 to 22) gives you the right of access, rectification, erasure, portability, objection and withdrawal of consent.

• App data: since it's only on your phone, you manage it yourself. You can change your first name in the Profile, export your data (Profile → Export my data) and erase everything (Profile → Erase all my data): recordings, capsules, keys, preferences and scheduled reminders are deleted from the phone. Archives you've exported aren't affected: they're wherever you put them, and it's up to you to delete them. See eliveo.qiveo.co/en/delete-account.
• Email left on the website: write to contact@eliveo.qiveo.co to access, correct or delete it.

You can also file a complaint with the CNIL, the French data protection authority: cnil.fr.

The app makes no automated decisions and does no profiling (Article 22 GDPR).

8. Minors

The app is intended for people aged 18 and over. It is not aimed at minors.

9. Changes

This policy will evolve, especially if the app one day adds sync or a paid service. In case of a significant change, you'll be notified in the app before it takes effect. The current version is always available at eliveo.qiveo.co/en/privacy.