Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Last updated: February 2026
Introduction
At Elephas, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy applies to all of our products and services, including our Mac app, iOS app, and website. We believe in transparency and want you to understand exactly how your data is handled.
How Your Data Flows
Storage (Always Local)
Your files, documents, and Super Brain content are stored on your Mac. We never upload or store your files on Elephas servers.
Indexing Your Content
When you create a new Super Brain, Elephas uses local processing by default for maximum privacy.
Local Processing (Default)
- • All indexing happens entirely on your Mac
- • No data is sent to any server during indexing
- • Your content never leaves your device
Legacy Cloud Indexing
- • Available if you choose a cloud embedding model
- • Content excerpts sent to AI provider during indexing
- • Option for users who prefer cloud processing
At Query Time
Using Cloud AI
Only relevant excerpts needed to answer your question are sent to the AI provider. Your full files are never sent.
Using Offline Mode
Everything stays on your Mac. No data is transmitted to any external service.
What We Never Do
- ✕ Store your files on Elephas servers
- ✕ Use your data to train AI models
- ✕ Share your content with third parties for marketing
- ✕ Access your documents without your action
What Information Do We Collect?
Personal Information
We may collect personally identifiable information, such as your name, email address, and contact details when you voluntarily provide it to us through:
- Account registration
- Customer support communications
- Newsletter subscription
- Feedback and survey responses
Your Content and Data
🔒 Important: Your Privacy is Protected
Your files stay on your Mac. With local indexing, no data leaves your device during setup. When using cloud AI for queries, only relevant excerpts are sent to the AI provider — never your full documents. Use offline mode for complete privacy. We never see, store, or have access to your actual documents, notes, or generated content.
Technical Information
We may automatically collect certain technical information to improve our services:
- Device information (operating system, version, device type)
- App usage analytics (features used, crash reports)
- License key for subscription validation
- General location information (city, country)
How Do We Use This Information?
We use the information we collect for legitimate business purposes, including:
- Providing, maintaining, and improving our products and services
- Processing subscriptions and managing your account
- Communicating with you about updates, support, and product information
- Analyzing usage patterns to enhance user experience
- Protecting the security and integrity of our services
- Complying with legal and regulatory requirements
Third-Party Services
AI Service Providers
Elephas integrates with various AI services based on your configuration:
- OpenAI: For GPT-3.5, GPT-4, and other OpenAI models
- Anthropic: For Claude models
- Google: For Gemini models
- Local Models: For offline AI processing
Your content is sent directly to these services according to their respective privacy policies. We recommend reviewing their privacy policies if you have concerns about how they handle your data.
Payment Processing
We use Gumroad to manage subscriptions and process payments. Gumroad handles all payment information securely, and we do not store your credit card details on our servers. You can review Gumroad's privacy policy at https://gumroad.com/privacy.
Analytics
We use privacy-focused analytics tools to understand how our app is used and to identify areas for improvement. This data is aggregated and anonymized.
Data Storage and Security
🛡️ Local-First Approach
Your knowledge base, documents, and Super Brain content are stored locally on your device. With our new local processing feature, indexing also happens entirely on your Mac — no data is sent to external servers during setup. iCloud sync is enabled by default for cross-device access and can be turned off in Elephas Preferences → General. See the iCloud and CloudKit section below for details.
Security Measures
- Encryption in transit for all network communication
- Local storage with iCloud sync enabled by default (can be disabled)
- Secure API communication with AI providers
- Regular security audits and updates
- No server-side storage of your content on Elephas infrastructure
iCloud and CloudKit
Elephas uses Apple's iCloud for multi-device sync. When sync is on, two Apple services are used and all of your data stays inside your own Apple iCloud account, never on Elephas servers:
- CloudKit mirrors application data such as your Super Brain definitions, workspaces, and chat records across your Apple devices.
- iCloud Drive syncs the indexed matter-file content so you can query on iPhone or iPad what you indexed on Mac.
A single switch controls both. iCloud sync is on by default and can be turned off in Elephas → Preferences → General. When disabled, nothing syncs and all data stays on the device.
Apple encrypts this data in transit and at rest under your Apple ID. If your account has Apple's Advanced Data Protection enabled, both CloudKit and iCloud Drive data become end-to-end encrypted, and only your devices hold the keys.
Offline Mode
Elephas supports fully offline operation when using local AI models. In offline mode, no data is transmitted to external AI providers. For the strictest isolation, combine offline mode with disabling iCloud sync.
Your Rights and Choices
Data Control
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information
- Portability: Request transfer of your data to another service
- Objection: Object to our processing of your personal information
Opt-Out Options
- Disable analytics collection in app settings
- Use offline mode for complete privacy
- Unsubscribe from marketing communications
- Delete your account and associated data
Children's Privacy
Elephas is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
International Users
Elephas is available to users worldwide. If you are located outside of the United States, please be aware that information we collect may be transferred to and processed in the United States and other countries where our service providers operate.
We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users and other regional privacy regulations.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, through in-app notifications or email. Your continued use of our services after any changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:
Email: support@elephas.app
Website: https://elephas.app
We typically respond to privacy-related inquiries within 5-7 business days.