Summary
You are in control of what Elma keeps. Consent is recorded with the policy version you agreed to, and you can withdraw optional consent at any time.
Elma is different from the Engero Games shelf: it is an AI companion with an account, so your conversations are stored on our servers in order to be there when you come back. Nothing about that is hidden from you, and every part of it is yours to switch off or delete.
This page describes the app as it is published, and the same choices are in the app under You and Privacy. The policy version shown there is 2026-10-29.1.
Consent
Process my conversations. Required for Elma to reply. To stop processing, close your account below.
Long-term memory. Optional. Lets Elma keep the details you choose to remember.
Product analytics. Optional. Helps measure whether the app works. Conversation content is not included.
Policy version 2026-10-29.1. Choices apply immediately.
What Elma keeps
Conversations and messages. Stored so you can return to them. Delete a conversation or your account to erase them.
Memories. Only what you add, and only while memory is on. Edit or forget them at any time.
Mood check-ins and journals. Saved in Reflect for you to look back on. Delete individual entries whenever you like.
Safety notes. If a message suggests risk, Elma records the risk level and category - not the message text.
Your account record itself holds your name, your email address, a hashed password and the times you signed up, confirmed your age and changed your choices. Your language, response style, voice preference and reminders are kept so the app opens the way you left it.
Your data
Export a copy of everything linked to your account as a JSON file. It may take a moment to prepare.
This is everything Elma holds for your account. Passwords and session tokens are never included.
Close your account
Deleting your account removes your conversations, memories, check-ins and journal entries, and signs you out for good.
This cannot be undone. Your conversations, memories, check-ins and journal entries will be erased, and you will be signed out. We keep one record that a deletion happened, with dates only and no content, so we can prove we carried it out.
Who else sees your words
Elma does not read your messages itself. The reply is written by an AI provider: the recent messages in the conversation you are in, and any memories you allowed, are sent to that provider and its answer comes back to you. Only your own conversation is ever sent, and no other person's data travels with it.
Speech works the same way. Audio you record for transcription is not kept by Elma - it exists only for the length of that request - but a configured speech provider receives the audio and applies its own retention policy. Text to speech is generated on the same terms.
If the app is set to send you a verification or password-reset email, our email provider handles that message. It never carries your conversations.
How we protect it
Your password is stored only as a one-way hash, and the tokens that keep you signed in are stored only as hashes, so a read of the database cannot produce a working session. An access token lasts one hour and a refresh token thirty days, and a successful password reset revokes every session on the account. Verification and reset codes are stored hashed, expire after fifteen minutes, allow five wrong guesses, and work once.
Every request is authenticated, and every request that reads content checks that the account owns what it asks for. Upload size, audio format and search length are all limited at the server rather than trusted from the app.
Advertising and analytics
Elma shows no advertising and contains no advertising or analytics tracker. The product analytics choice in the app is recorded in advance of a feature; today it collects nothing, and turning it on or off changes no behaviour.
Age
Elma is for adults aged 18 and over. Registration asks you to confirm your age and records the moment you did. That confirmation is a declaration, not a proof, so we ask a parent or guardian not to hand the app to a child.
Elma is AI. It is not a therapist, doctor or emergency service, and it cannot contact anyone for you. If you are in immediate danger, contact your local emergency number.
Questions about privacy
To ask for a copy of what we hold, a correction or a deletion beyond the buttons in the app, use the contact form on this website and we will route it to whoever runs Elma.