Privacy Policy

Last updated: 22 October 2026

1. Controller

NAHIRA GROUP SRL, a company registered in Romania. Tax ID (CUI) RO52612339, trade register no. J2025075045004. Registered office: Str. Popești-Vest no. 37A, Bl. C2, Sc. F, Floor 5, Apt. 47, Popești-Leordeni, Ilfov County, Romania. Email: theodor.costache@nahiraessence.com (“Elevo”, “we”, “us”).

2. What data we process

Your side-on photos: processed entirely on your device, in your browser, to check the framing and measure postural angles from the points you confirm. They are not uploaded to our servers and are not stored (not even locally after you close the page, apart from the progress photos you choose to save).
Quiz answers, your answer to the safety check, and the measured values (angles, margin of error, score, scan date): stored on your device. If you create an account (after payment), we also save them on our servers so you can see them on any device, so we can show your progress and so we can calculate your plan. We save them on the server only with your explicit consent, ticked before the scan.
Account: your email, subscription status (active, cancelled), the days you've checked off, your daily check-in answers (how your back feels, how long you sat) and your reminder settings. Sign-in is by a code sent to your email, with no password.
Progress photos: if you choose “Save photo”, they stay only on your phone (in the browser). They are not uploaded to our servers. You can delete them anytime from your plan.
Phone notifications (push): only if you turn them on in your plan. We save the technical address of your device (generated by the browser), the time you chose and the date of the last notification. You can turn them off anytime in your plan or in your phone settings.
Access emails: the sign-in code sent to your email. We don't send promotional emails.
Payment: processed by Stripe Payments Europe Ltd. We never see your card details; we only receive confirmation of the payment and the email used.
Contact data: your email address or phone number and the content of your message, if you write to us by email, phone or WhatsApp. On WhatsApp, messages are also processed by Meta, under their policy.
Cookies / Meta pixel: only if you accept. See section 5.

3. Legal basis

For processing your photo to estimate posture: your explicit consent (Art. 6(1)(a) and, to the extent the result can be considered health data, Art. 9(2)(a) GDPR). You can withdraw it anytime, without retroactive effect. For saving the measured values in your account: your explicit consent (same article). For your account, subscription and payments: Art. 6(1)(b). For tax obligations: Art. 6(1)(c). For ad measurement: your consent.

4. Age

The service is intended for people aged 18 or over.

The Meta pixel loads only after you accept, and helps us measure how well our ads work. You can change your choice anytime from the “Cookies” link in the footer of the start page, or by clearing the site's data in your browser. Without your consent we load no advertising cookies. We do not sell your personal information.

6. Recipients and transfers

Stripe (payments), Supabase (database and authentication, EU region), Resend or equivalent (access emails), Netlify (hosting), Meta (only with your consent). Some may involve transfers outside the EEA, with appropriate safeguards (e.g. standard contractual clauses / the Data Privacy Framework). Demo videos can be watched on YouTube (Google): they load only when you tap “Video” and through an enhanced-privacy player (youtube-nocookie.com), and Google can then see your IP address. The font (Inter) loads from Google Fonts, which can see your IP address. The photo-checking model (MediaPipe, Google) is downloaded into your browser from cdn.jsdelivr.net and storage.googleapis.com; when you download it, those providers can see your IP address. Your photos are never sent to them.

7. Retention

Local data stays on your device until you delete it. We keep account data for as long as you have the account and delete it at your request (write to the address below), within 30 days at most. Billing data is kept as required by law (5 years).

8. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Write to theodor.costache@nahiraessence.com. If you are in the EU/EEA, you may also lodge a complaint with your local data protection authority or with ANSPDCP, Romania (dataprotection.ro). If you are in the UK, you may contact the ICO. If you live in California, you have the right to know, delete and correct your personal information, and we won't discriminate against you for using these rights.

← Back