Lirra · Elfion Mobile · Effective July 24, 2026
Lirra (iOS/Android package identifier mobi.elfion.lirra) is a morning ritual and habit-scoring application published by Elfion Mobile (“we”, “us”, “our”). This Privacy Policy describes how we collect, use, store, share, and protect information when you use Lirra (the “App”) and related services (including our API hosted on Cloudflare Workers, e.g. lirra-api.*.workers.dev or a production API domain).
By downloading, accessing, or using Lirra, you agree to this Policy. If you do not agree, do not use the App.
Important — not a medical product: Lirra’s Calm Score is a habit score based on your morning protocol, self-report, and streak. It is not a laboratory measurement, hormone test, cortisol reading, medical diagnosis, or treatment. The App is for personal wellness and habit support only.
This Policy applies to personal data processed in connection with Lirra on mobile devices and our backend infrastructure. It does not cover third-party websites, app stores (Apple App Store / Google Play), or services that we do not control, even if linked from the App.
Controller / publisher contact: Elfion Mobile · elfionmobi@gmail.com
| Category | Examples | Purpose |
|---|---|---|
| Account | Anonymous user ID (Supabase Auth) | Provide the service; sync ritual history & Pro status |
| Profile / onboarding | Optional display name; age band; symptoms; morning habits; goal; wake time; timezone; locale | Personalize today’s protocol & reminders |
| Ritual & score data | Completed steps, self-report, Calm Score, streak, soft sleep check-in | Show progress, scoring, history |
| Subscriptions | Entitlement via Apple/Google + RevenueCat | Unlock Lirra Pro; restore purchases |
| On-device only | Journal note; theme; notification schedule; widget cache | UX on your device (not uploaded as a journal archive) |
| Diagnostics (optional) | Firebase Analytics / Crashlytics when enabled | Stability & product improvement |
If you subscribe to Lirra Pro (weekly, monthly, or yearly), payment is processed by Apple or Google. We receive entitlement/status information through RevenueCat and/or store APIs so we can unlock Pro features (for example Night Prep, NSDR deep rest, themes). We do not receive or store your full payment card number.
When Firebase Analytics / Crashlytics is configured in a release build, we may process aggregated usage events, device model, OS version, app version, crash stacks, and instance identifiers as processed by Google under their terms. If those SDKs are not enabled, we do not send that analytics traffic.
We do not sell your personal information. We do not use your ritual answers to train unrelated third-party foundation models unless we clearly disclose a change and obtain any consent required by law.
Where GDPR-style rules apply, we process data under one or more of: performance of a contract (providing the App you requested); legitimate interests (security, product improvement, fraud prevention—balanced against your rights); consent where required (e.g., notification permission); and legal obligation when we must retain or disclose information.
We share data with vendors who process it on our instructions to operate Lirra:
These providers may process data in the United States or other countries. Where required, we rely on appropriate transfer mechanisms offered by those providers (such as Standard Contractual Clauses).
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).
Uninstalling the App removes local device data but does not automatically erase server-side records tied to your user ID. Use in-app Settings → Delete account or contact us as described below / on our Account Deletion page.
Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.
Notifications: You can deny or revoke notification permission in system settings; morning reminders will not fire without it.
Marketing ads: We do not currently run third-party ad networks inside Lirra.
Lirra is not directed to children under 13 (or the higher age required in your region for digital consent). We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided data inappropriately, contact us and we will take reasonable steps to delete it.
We use HTTPS in transit, access controls for production systems, and least-privilege service credentials. No method of transmission or storage is 100% secure; we encourage you to use up-to-date devices and protect your store accounts.
If you use Lirra from outside the country where our servers or providers operate, your information may be transferred across borders. By using the App you understand those transfers may occur as described in this Policy.
We may update this Privacy Policy from time to time. The “Last Updated” date will change when we do. Material changes may be highlighted in the App or store listing. Continued use after an update constitutes acceptance of the revised Policy where permitted by law.
Privacy questions, data-subject requests, or deletion requests:
Last Updated: July 24, 2026
Version: 1.0
Publisher: Elfion Mobile · Package mobi.elfion.lirra