"We will never sell your data. Ever."
Some states, including Washington, require companies that handle consumer health data to publish a separate policy describing exactly how that data is treated. This page is that policy. It applies to everyone who uses Elphi, not only Washington residents — if a state gives you a right worth having, we would rather just give it to everyone.
It supplements our general Privacy Policy; where this page is more specific about health-related data, this page controls.
Elphi is a family coordination app, not a health app. It has no health features: no connection to Apple Health or HealthKit, no medication, dosage, or adherence fields, and no analytics that examine what you type.
But Elphi lets you name your own checklists and items — and if you name an item after a medication ("Nitroglycerin, 8 AM"), that text may reveal something about health. Under laws like Washington's My Health My Data Act, that can make it consumer health data. So we treat it with the care that label deserves. Specifically, the categories we may hold are:
That is the complete list. Elphi does not collect biometric data, precise location, health conditions, diagnoses, treatments, or anything from any health provider, device, or app.
One source: you. Every piece of potentially health-related data in Elphi is text a person typed into a checklist on purpose. We do not buy data, import it, receive it from third parties, or infer it. We do not analyze your checklist content to guess anything about your health.
One purpose: making your checklist work. The text you type is stored so it can appear on the phones of the people you shared it with; confirmation records exist so those same people can see that the checklist was done. That is the entire use.
We do not use this data for advertising, marketing, profiling, research, AI training, or analytics — and we will not use it for any new purpose without telling you first and asking your permission.
The people you choose. A checklist is visible only to the specific family members you shared it with — the person it's assigned to and any watchers you added. Server-side security rules enforce this. Nobody outside that set can read it.
Our service providers (processors). Like nearly every app, Elphi runs on infrastructure operated by others, under contracts that limit them to providing that service:
Nobody else. We do not sell consumer health data — to anyone, for anything, ever. We do not share it with advertisers, data brokers, analytics companies, or affiliates. Elphi LLC has no affiliates.
Elphi does not collect location data at all, and we do not use geofencing of any kind — including around any health care facility.
You have the right to:
To exercise any of these rights, email privacy@elphiapp.com from the email address associated with your account. We will respond within 45 days. We will never treat you differently for exercising a right.
Appeals. If we decline a request, we will explain why, and you may appeal by replying with "Appeal" in the subject line. A decision on your appeal comes within 45 days, with an explanation. Washington residents may also contact the Washington Attorney General if an appeal is denied.
The least sensitive data is data that never exists. If "morning meds" works as well for your family as a specific drug name and dose, use "morning meds." Elphi works identically either way — this is a genuine recommendation from us, not a disclaimer.
If we ever collect new categories of consumer health data or use them for new purposes, we will update this page first and ask for your affirmative consent before doing it. The effective date and version above always reflect the current text.
Elphi LLC · Maryland, USA
privacy@elphiapp.com