Privacy Policy
Last updated: July 13, 2026
This page is maintained by the Elselife app owner as editable content. It describes current practices and the controls visible to users of the service. References to Lovable Cloud platform capabilities are factual descriptions of enabled infrastructure, not an independent certification, audit, or legal guarantee.
1. Overview
Elselife (“the Service”, “we”, “us”) is a prestige text-based life simulator. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices you have regarding your information. By using the Service, you agree to the practices described here.
2. What we collect
Account information. When you sign in with Google or email, we receive and store your authentication identifier, email address, and any name or avatar provided by the identity provider. This is necessary to create and maintain your account.
Your AI key. Elselife operates on a bring-your-own-key (BYOK) model. You may provide an API key for an OpenAI-compatible provider, Anthropic, DeepSeek, or Groq/Llama. Your key is stored in an encrypted field scoped to your user account and is only used to route your game prompts to the provider you chose.
Game data. We store your simulation state — including chosen era, location, character details, narrative events, and choices — so you can resume play across sessions.
Technical data. We log standard request metadata (IP address, browser type, timestamps, and error codes) for the limited purpose of operating, securing, and troubleshooting the Service. We do not sell this data or use it for advertising.
3. How we use your data
- To authenticate you and keep you signed in.
- To run the life-simulation game and persist your progress.
- To route your prompts to the AI provider associated with your key.
- To detect abuse, prevent fraud, and maintain Service security.
- To respond to your support requests and legal inquiries.
4. Bring-your-own-key model
You remain in control of your AI spend. Your API key is stored under your user record and is only readable by our server when it needs to forward a request to your chosen provider on your behalf. We do not train models on your prompts, nor do we share your prompts or keys with any other user or third party except the provider you selected. If you delete your key in Settings, it is removed immediately.
5. Legal basis for processing (GDPR)
We process personal data on the following legal bases: (a) performance of the contract with you — to provide the game; (b) legitimate interests — to secure the Service and prevent abuse, balanced against your rights; and (c) consent — where you explicitly opt in, for example to optional communications. You may withdraw consent at any time by contacting us.
6. Subprocessors and third parties
We rely on the following categories of service providers to operate the Service:
- Cloud infrastructure. Lovable Cloud hosts the application, database, authentication, and server functions. Data is processed on Lovable Cloud infrastructure.
- Authentication. Google OAuth and email-based authentication are provided through Lovable Cloud Auth.
- AI providers. When you add a key, your prompts are sent directly to the provider you select (for example OpenAI, Anthropic, DeepSeek, or Groq). Those providers process prompt data under their own privacy policies and terms.
We do not share your personal data with unrelated advertisers or data brokers.
7. International transfers
The Service is operated from Lovable Cloud infrastructure, which may host data in regions including the United States and the European Union. By using the Service, you understand that your data may be transferred to and processed in countries other than your country of residence. We rely on the standard contractual clauses and other transfer safeguards provided by our infrastructure providers where required by law.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data.
- Export your game data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at legal@elselife.xyz. We will respond within the time required by applicable law.
9. Data retention
We keep your account and game data for as long as your account is active. If you delete your account, we will remove or anonymize your personal data within 30 days, except where a longer retention period is required by law or for legitimate security, fraud-prevention, or financial-record purposes.
10. Security measures
We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted storage for sensitive fields such as API keys, row-level access controls in the database, and authentication-gated server functions. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
11. Cookies and analytics
The Service uses essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising or tracking cookies. Any analytics we run is limited to understanding aggregate Service performance and is not used to build personal profiles.
12. Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact us
For privacy questions, data requests, or to contact the data protection contact, email legal@elselife.xyz.