Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last updated: February 2026

Introduction

At Elephas, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy applies to all of our products and services, including our Mac app, iOS app, and website. We believe in transparency and want you to understand exactly how your data is handled.

How Your Data Flows

How Your Data Flows - Your files stay on your Mac, and when you ask a question, only relevant excerpts are sent to cloud AI, or everything stays local in offline mode

Storage (Always Local)

Your files, documents, and Super Brain content are stored on your Mac. We never upload or store your files on Elephas servers.

Indexing Your Content

When you create a new Super Brain, Elephas uses local processing by default for maximum privacy.

Local Processing (Default)

  • • All indexing happens entirely on your Mac
  • • No data is sent to any server during indexing
  • • Your content never leaves your device

Legacy Cloud Indexing

  • • Available if you choose a cloud embedding model
  • • Content excerpts sent to AI provider during indexing
  • • Option for users who prefer cloud processing

At Query Time

Using Cloud AI

Only relevant excerpts needed to answer your question are sent to the AI provider. Your full files are never sent.

Using Offline Mode

Everything stays on your Mac. No data is transmitted to any external service.

What We Never Do

  • Store your files on Elephas servers
  • Use your data to train AI models
  • Share your content with third parties for marketing
  • Access your documents without your action

What Information Do We Collect?

Personal Information

We may collect personally identifiable information, such as your name, email address, and contact details when you voluntarily provide it to us through:

  • Account registration
  • Customer support communications
  • Newsletter subscription
  • Feedback and survey responses

Your Content and Data

🔒 Important: Your Privacy is Protected

Your files stay on your Mac. With local indexing, no data leaves your device during setup. When using cloud AI for queries, only relevant excerpts are sent to the AI provider — never your full documents. Use offline mode for complete privacy. We never see, store, or have access to your actual documents, notes, or generated content.

Technical Information

We may automatically collect certain technical information to improve our services:

  • Device information (operating system, version, device type)
  • App usage analytics (features used, crash reports)
  • License key for subscription validation
  • General location information (city, country)

How Do We Use This Information?

We use the information we collect for legitimate business purposes, including:

  • Providing, maintaining, and improving our products and services
  • Processing subscriptions and managing your account
  • Communicating with you about updates, support, and product information
  • Analyzing usage patterns to enhance user experience
  • Protecting the security and integrity of our services
  • Complying with legal and regulatory requirements

Third-Party Services

AI Service Providers

Elephas integrates with various AI services based on your configuration:

  • OpenAI: For GPT-3.5, GPT-4, and other OpenAI models
  • Anthropic: For Claude models
  • Google: For Gemini models
  • Local Models: For offline AI processing

Your content is sent directly to these services according to their respective privacy policies. We recommend reviewing their privacy policies if you have concerns about how they handle your data.

Payment Processing

We use Gumroad to manage subscriptions and process payments. Gumroad handles all payment information securely, and we do not store your credit card details on our servers. You can review Gumroad's privacy policy at https://gumroad.com/privacy.

Analytics

We use privacy-focused analytics tools to understand how our app is used and to identify areas for improvement. This data is aggregated and anonymized.

Data Storage and Security

🛡️ Local-First Approach

Your knowledge base, documents, and Super Brain content are stored locally on your device. With our new local processing feature, indexing also happens entirely on your Mac — no data is sent to external servers during setup. iCloud sync is enabled by default for cross-device access and can be turned off in Elephas Preferences → General. See the iCloud and CloudKit section below for details.

Security Measures

  • Encryption in transit for all network communication
  • Local storage with iCloud sync enabled by default (can be disabled)
  • Secure API communication with AI providers
  • Regular security audits and updates
  • No server-side storage of your content on Elephas infrastructure

iCloud and CloudKit

Elephas uses Apple's iCloud for multi-device sync. When sync is on, two Apple services are used and all of your data stays inside your own Apple iCloud account, never on Elephas servers:

  • CloudKit mirrors application data such as your Super Brain definitions, workspaces, and chat records across your Apple devices.
  • iCloud Drive syncs the indexed matter-file content so you can query on iPhone or iPad what you indexed on Mac.

A single switch controls both. iCloud sync is on by default and can be turned off in Elephas → Preferences → General. When disabled, nothing syncs and all data stays on the device.

Apple encrypts this data in transit and at rest under your Apple ID. If your account has Apple's Advanced Data Protection enabled, both CloudKit and iCloud Drive data become end-to-end encrypted, and only your devices hold the keys.

Offline Mode

Elephas supports fully offline operation when using local AI models. In offline mode, no data is transmitted to external AI providers. For the strictest isolation, combine offline mode with disabling iCloud sync.

Your Rights and Choices

Data Control

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to our processing of your personal information

Opt-Out Options

  • Disable analytics collection in app settings
  • Use offline mode for complete privacy
  • Unsubscribe from marketing communications
  • Delete your account and associated data

Children's Privacy

Elephas is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

International Users

Elephas is available to users worldwide. If you are located outside of the United States, please be aware that information we collect may be transferred to and processed in the United States and other countries where our service providers operate.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users and other regional privacy regulations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, through in-app notifications or email. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

We typically respond to privacy-related inquiries within 5-7 business days.