Privacy Policy

Last updated: 22.08.2025

This Privacy Policy describes how Davoti Solutions AS (“Elevate”, “we”, “our”, “us”) collects, uses, and protects personal data when you use the Elevate mobile application and related services (the “App” or “Service”).

We are committed to protecting your privacy and handling your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable laws.


1. Data Controller

The data controller for personal data collected through Elevate is:

Davoti Solutions AS

Mesh Nationaltheatret

Tordenskiolds gate 2, 0160 Oslo, Norway

Email: support@elevateyourmind.app


2. Categories of Data Collected

We may collect and process the following categories of personal data:

  1. Account Data

    • Email address and login credentials provided via Apple or Google sign-in.

    • Authentication tokens.

  2. Usage Data

    • Sessions accessed, listening duration, in-app interactions, preferences, and favorites.

  3. Device Data

    • Device type, operating system, app version, crash reports, IP address.

  4. Payment Data

    • Subscription status and receipts provided by Apple App Store or Google Play Store.

    • Elevate does not process or store payment card details.

  5. Generated Content

    • Personalized meditation scripts and audio generated using third-party providers, based on onboarding survey responses and user preferences.

We do not intentionally process special categories of personal data (e.g. health data, biometric data) unless explicitly provided by you for optional features.


3. Legal Basis for Processing

Our processing of personal data is based on the following legal grounds under GDPR:

  • Article 6(1)(b) – Contract: Processing necessary to provide the Service (e.g. account creation, session delivery, subscription management).

  • Article 6(1)(f) – Legitimate Interests: Processing necessary to improve the Service, ensure security, and prevent fraud.

  • Article 6(1)(a) – Consent: Processing based on your explicit consent, such as receiving marketing communications.


4. Purposes of Processing

We use your data for the following purposes:

  • To provide and personalize Elevate’s services.

  • To generate personalized meditation scripts and audio.

  • To process subscriptions and verify payments.

  • To monitor and analyze usage, improve functionality, and fix technical issues.

  • To send transactional communications (e.g. receipts, login emails).

  • To send marketing communications where you have opted in.

  • To ensure security and prevent misuse of the Service.


5. Data Processors and Third-Party Services

We engage trusted third-party providers to process personal data on our behalf. These include:

  • RevenueCat – subscription and receipt management

  • Supabase – backend, authentication, and database services

  • Vercel – hosting and deployment

  • PostHog – product analytics and usage tracking

  • Loops – transactional and marketing email communications

  • Sentry – error and crash monitoring

Some providers may process data outside the EU/EEA, including the United States. In such cases, we ensure appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.


6. Data Retention

  • Personal data will be retained only as long as necessary to provide the Service or as required by law.

  • When an account is deleted, personal data is erased within 30 days.

  • We may retain anonymized usage data for analytical and statistical purposes.


7. International Transfers

If personal data is transferred outside the EU/EEA, such transfers are conducted in compliance with GDPR requirements, typically through:

  • Adequacy decisions by the European Commission, or

  • Standard Contractual Clauses (SCCs) with the recipient.


8. Data Subject Rights

Under GDPR, you have the following rights:

  • Right of access (Article 15) – obtain confirmation and a copy of your personal data.

  • Right to rectification (Article 16) – correct inaccurate or incomplete data.

  • Right to erasure (Article 17) – request deletion of your personal data.

  • Right to restriction of processing (Article 18) – request limitation of processing.

  • Right to data portability (Article 20) – receive your data in a structured format.

  • Right to object (Article 21) – object to certain processing, including marketing.

  • Right to withdraw consent – withdraw consent where processing is based on consent.

To exercise your rights, please contact support@elevateyourmind.app. We will respond within 30 days.


9. Children’s Data

Elevate is intended for individuals 16 years of age or older.

We do not knowingly collect data from children under 16. If you believe a child has provided personal data, please contact us and we will delete it promptly.


10. Security Measures

We implement appropriate technical and organizational measures to ensure the security of your personal data, including:

  • Encryption of data at rest and in transit.

  • Access controls and authentication.

  • Secure hosting with industry-standard providers.


11. Cookies and Tracking Technologies

The mobile app uses analytics tools such as PostHog that may collect information via device identifiers and similar technologies to understand app usage and improve performance.

We do not use cookies or tracking technologies for targeted advertising.


12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email. The updated version will be effective upon publication.


13. Contact Information

For any questions, concerns, or to exercise your rights, please contact:

Davoti Solutions AS

Mesh Nationaltheatret

Tordenskiolds gate 2, 0160 Oslo, Norway

Email: support@elevateyourmind.app

Made with ❤️️ in Oslo, Norway

Made with ❤️️ in Oslo, Norway

Made with ❤️️ in Oslo, Norway