Privacy Policy

Last updated: October 23, 2026 · Lire en français

Elevate: Business Planner ("Elevate", "we", "us") is operated by Isabella Etenberg Holdings Inc. in Toronto, Ontario, Canada. This policy explains what information the Elevate app collects, why, who handles it, how long we keep it, and the choices you have. In short: your information is yours, we use it only to run the app for you, we never sell it, and we don't use it for advertising or to track you across other companies' apps and websites.

Information you give us

• Account: your email address, a display name you choose, and your password (stored only as a one-way hash, never in readable form). If you choose "Continue with Apple" or "Continue with Google" instead, Apple or Google tells us your email address (Apple may give us a private relay address instead) and, if you allow it, your name. We receive no password from them.
• About you, from setup: when you first open Elevate we ask for the name you'd like to be called, your birthday (used to confirm you meet our minimum age of 16 and kept on your profile), what best describes you (for example founder, entrepreneur, content creator, or a job type), your industry, the features you want to use most, your biggest challenges, and your monthly revenue goal. We use these to personalize the app and to understand, in aggregate, what people need. You can change your name and birthday in the app's settings.
• Things you add to the app: tasks, habits, goals, notes, important dates, content-planning items, and the settings you choose.
• Money entries: revenue and write-off entries you log, such as amounts, descriptions, store names, dates, currencies, and categories, plus any receipt or proof photos you attach.
• Wellbeing entries: if you use the cycle and wellbeing features, the cycle dates, moods, symptoms, and other entries you choose to log. This is optional, and entirely up to you. See "Health information" below.
• Photos: images you add to your vision board or outfit tracker, or attach to entries. The app only accesses your camera or photo library when you ask it to, and only the photos you select.
• Messages to us: if you email us, we keep the message and our reply so we can help you.

Information collected automatically

• Setup progress: which setup step you reach, so we can find and fix places where people get stuck.
• Subscription status: whether you have an active trial or subscription, and your purchase history (see RevenueCat and Apple below).
• Technical data: like most services, our hosting and email providers keep short-term technical logs (for example IP address, device type, and timestamps) to keep the service secure and working. We don't use advertising identifiers, and the app contains no third-party advertising or analytics trackers.

Calendars and other accounts you connect

• Apple Calendar: if you allow it, Elevate reads and adds events on your device's calendar. This stays on your device.
• Google Calendar and Outlook: if you connect them, Elevate reads and writes events through your own sign-in with Google or Microsoft. Your sign-in credentials stay with Google or Microsoft and on your device; Elevate does not receive your Google or Microsoft password. Elevate's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
• Google Sheets: if you connect it, Elevate writes your chosen entries to a spreadsheet in your own Google account, and may copy attached receipt images to your Google Drive so the sheet can link to them.

You can disconnect any of these at any time in the app, and you can also revoke access in your Google or Microsoft account settings.

Google user data

This section explains exactly how Elevate handles information it receives from Google, and applies whenever you choose to continue with Google or connect a Google service. Elevate asks only for the access each feature needs, and only when you turn that feature on.

• Continue with Google: Google confirms who you are and shares your email address and name (if your Google account provides it). We use this only to create your Elevate account and sign you in.
• Google Calendar (the calendar permission): Elevate reads your calendar events, including your Birthdays calendar, so they appear in your Elevate calendar and your daily plan. It creates, changes, or removes events only for things you do in Elevate, such as adding an important date, blocking time for a task, or deleting one of those items. Calendar events are shown in the app and are not copied to our servers. We store only the event identifiers needed to update or remove an event Elevate created.
• Google Sheets and Drive (the spreadsheets and drive.file permissions): Elevate writes the revenue and write-off entries you choose to sync into a spreadsheet in your own Google account, and may save receipt images you attach to your Google Drive so the sheet can link to them. The drive.file permission lets Elevate see only files it created, never the rest of your Drive.

Your Google sign-in token stays on your device and is not stored on our servers. We do not sell Google user data, do not use it for advertising, and do not transfer or share it with anyone except as needed to provide these features to you, to comply with the law, or with your explicit consent. People at Elevate do not read your Google data unless you ask us to for support, or it is needed to investigate abuse or meet a legal duty. We do not use Google user data to build or train artificial intelligence models.

Elevate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar or Google Sheets at any time in the app (menu, then Connections), and you can remove Elevate's access in your Google Account at myaccount.google.com/permissions. Deleting your Elevate account removes the identifiers and entries we hold; files already created in your own Google account (such as a spreadsheet) stay yours to keep or delete.

How we use your information

• To provide the app's features and keep your data in sync and backed up.
• To manage your account, your subscription, and your access to Premium.
• To send account emails you trigger, such as email confirmation and password reset.
• To respond when you contact support.
• To protect the security of the service and prevent misuse.
• To understand, in aggregate, what features and challenges matter to our customers so we can improve Elevate and how we describe it. For example, the milestone "top percent of users" feature uses only anonymous totals and appears only when there are enough users for it to be meaningful.
• To meet our legal obligations.

We do not sell or rent your personal information. We do not "share" it for cross-context behavioral advertising. We do not use your personal information to show you other companies' ads, and we do not use sensitive information to infer characteristics about you.

Health information

Cycle and wellbeing entries are sensitive. They are optional, and you choose what to log. We use them only to show you your own tracking and personal insights inside the app. We never sell them, never use them for advertising or marketing, and never share them with data brokers, employers, insurers, or other third parties for their own purposes. They are stored in your account with the same protections as the rest of your data and are visible only to you. They are handled only by the service providers listed below who store and secure your data for us. You can delete individual entries at any time, or delete your whole account and everything in it. If you are in a place where the law requires your consent to collect health data, your choice to turn on and use these features is your consent, and you can withdraw it at any time by turning off Health Mode or deleting your entries.

Who handles your data

We use these service providers to run Elevate. They act on our instructions and may use your data only to provide their service to us:

• Supabase hosts our database, file storage, and sign-in system. Your data is stored in Canada (Central).
• Cloudflare stores backup copies of your uploaded photos and receipts so they can be recovered if something goes wrong.
• Apple processes subscription payments and handles refunds; we never see your card or payment details.
• RevenueCat confirms whether your subscription is active so we can unlock Premium. It receives an app user ID, your purchase information, and basic device information.
• Resend delivers our account emails (it sees your email address and the message being sent).
• GitHub runs our automated backup jobs. Your files pass through it briefly while being copied and are not stored there.
• Google, Microsoft, and Apple only if you choose to sign in with them or connect their calendar or spreadsheet features, as described above.
• Currency conversion: when you log an entry in a foreign currency, the app asks a public exchange-rate service (Frankfurter) for the rate. Only the currency codes and the date are sent, never your account or amounts.

We may also disclose information if required by law or to protect people's safety, and if Elevate is sold or reorganized we may transfer it to the new owner, who must honor this policy.

Where your data goes

Your data is stored in Canada. Some of the providers above process data in the United States and other countries. Where we transfer personal information across borders, we rely on contracts and safeguards required by applicable law.

How your data is protected

Data is encrypted in transit. Each account's data is kept separate using row-level security, so one user's information cannot be read by another. We limit who can access our systems and we test our protections. No system is perfectly secure. If a breach affects you, we will notify you and the authorities as required by law.

Keeping and deleting your data

We keep your information while your account exists. You can delete your account at any time inside the app (menu, then Account, then Delete account). Deleting your account permanently removes your account, your entries, and the photos and receipts you uploaded. Backup copies of your photos and receipts are permanently removed within 30 days (in practice, about a week), and database backups are deleted on a short rolling schedule. We may keep limited records longer where the law requires it (for example billing records held by Apple) or to resolve disputes. You can also email us to ask for deletion. Note that deleting your account does not cancel your subscription; cancel it in your Apple Account settings.

Your rights and choices

You can access, correct, export, or delete your information in the app, or ask us to help. Depending on where you live, you may also have the right to: know what personal information we hold; get a copy in a portable format; correct or delete it; object to or restrict certain processing; withdraw consent you have given; and complain to your local privacy regulator. This includes rights under Canada's PIPEDA and Quebec's Law 25, the EU and UK GDPR, the California Consumer Privacy Act, Australia's Privacy Act, and similar laws. We will not treat you differently for using these rights. Contact us at the address below and we will respond within 30 days.

If you are in the EU or UK: we process your data to provide the service you asked for (contract), to keep it secure and improve it (our legitimate interests, balanced against your rights), to meet legal duties, and, for health information and optional connections, with your consent. If you are a Washington or Nevada resident: the "Health information" section above is our consumer health data privacy notice; we collect health data only to provide the features you use, do not sell it, and you may access, delete, or withdraw consent for it as described here.

Children

Elevate is for people aged 16 and older and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child under 16 has given us information, contact us and we will delete it. If you are under 18, you need a parent or guardian's permission to subscribe.

Language

This policy is available in English and French. If there is any difference between the two versions, the English version governs, except where the law of the place where you live (including Quebec) requires otherwise.

Changes to this policy

If we make meaningful changes, we will update the date above and, where appropriate, tell you in the app or by email.

Contact

Questions or privacy requests: hello@isabellaetenberg.com
Isabella Etenberg Holdings Inc., Toronto, Ontario, Canada