Privacy Policy

Envela · Last updated: August 2026

This policy explains which personal data the Envela app processes, for what purpose and on what legal basis. Envela is an app for couples: the two of you answer one shared question every day in the form of a “letter” that only becomes visible once both of you have written.

In short: We collect only what the service needs (your name, your answers, optionally a profile photo). There is no advertising tracking, no cross-app tracking, and we do not sell or share your personal information. Sign-in is anonymous — no email address, no password.

1. Controller

Cornelius Maria Konieczny
Schulstraße 38, 46244 Bottrop, Germany
Email: koniecznycornelius@gmail.com

2. What data we process

Name, which you enter yourself during setup (shown to your partner).
Your daily answers (“letters”) and the reactions to them.
Profile photo (optional), if you add one.
Couple link: a random invitation code, the record of which two accounts form a couple, and your shared streak count.
Push token: a technical device identifier (Apple/Firebase) used to send you notifications (e.g. “A letter has arrived”).
Anonymous account identifier: an anonymous account is created when you sign in (no name, no email address, no password required).
Anonymous usage statistics: to improve the app we record which features are used (e.g. app opened, letter written, paywall shown, purchase completed). No names and no answer content are stored in the process; there is no cross-app tracking and no disclosure for advertising purposes.

We do not collect an email address, a phone number, or location data.

3. Purpose & legal basis

Processing serves solely to provide the app’s functions (showing questions, storing answers and syncing them between the two of you, sending notifications, counting the streak). The legal basis is the performance of the user contract under Art. 6(1)(b) GDPR; for push notifications and product improvement we additionally rely on our legitimate interest (Art. 6(1)(f) GDPR).

4. Processors & storage location

We use Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Messaging) as the technical foundation. Data is stored in data centres in the European Union (region europe-west1, Belgium). The provider is Google Ireland Ltd.; a data processing agreement is in place with Google. Where a transfer to the USA takes place in exceptional cases, it is safeguarded by the EU Standard Contractual Clauses.

5. Purchases (in-app purchase)

Optional premium subscriptions are handled through Apple (App Store / StoreKit). Your payment data is processed exclusively by Apple; we receive no credit card or bank details, only the information whether an active subscription exists.

6. Retention

We store your data for as long as your account exists, or as long as it is needed for the service. On request we will delete your account and the associated data (see contact above).

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority. Please use the contact address above.

If you are located in California, please note that we do not sell or share personal information, and we do not use it for cross-context behavioural advertising. You may request access to or deletion of your data using the same contact address; we will not discriminate against you for exercising these rights.

8. Changes

We update this policy when the app or the legal situation changes. The current version is always available at this address.