Sara Silmis — Privacy Policy
Effective date: October 2026 · Applies to the Sara Silmis app on iOS, Android and the web.
Novora Digital OÜ ("Elora Life", "we", "us") operates the Sara Silmis application and related services (the "Service"). This policy explains what personal data we collect, why, where it is stored, and the rights you have.
1. Who we are
Data controller: Novora Digital OÜ, Tallinn, Estonia.
Contact: hello@novoradigitaloü.com
2. Data we collect
- Account data — email address, full name, username, date of birth (optional), profile picture (optional).
- Content you create — wishlists, wishlist items (titles, prices, notes, product links, photos you upload), shared-list settings.
- Social data — friends you search for, friend requests, wishlists shared with you or by you, and "bought" / "reserved" claims on items.
- Usage analytics — counts of actions such as opening a product link, marking an item bought or reserved, sharing a wishlist, and inviting a friend. These are counters and event records tied to your account — we do not track you across other apps or websites.
- Feedback — anything you send us through the feedback form.
- Sign-in method — if you use Google or Apple sign-in, we receive your email address and display name from that provider to create your account.
We do not collect precise location, contacts, device identifiers for advertising, or payment card data. Purchases happen on third-party stores, not in our app.
3. Why we use it
- To create and secure your account and keep you signed in.
- To run the core features — wishlists, sharing, friends, claims and events.
- To understand, in aggregate, how features are used so we can improve the product.
- To respond to feedback and support requests.
Legal bases under GDPR: performance of our contract with you (the Service), legitimate interest in improving and securing the product, and your consent where required (for example optional profile fields).
4. Who can see your data
- Friends you approve can see your display name, username and profile picture.
- Shared wishlists — when you share a list with friends, they can see that list and mark items as bought or reserved.
- Other users searching can find you by name or username — never by email address.
- Service provider — our database and file storage are hosted by Supabase in the EU (Stockholm, Sweden). Data stays in the European Union.
We never sell personal data and do not show advertising.
5. Children
Sara Silmis is a family product and children may use it. Where a child is under the age of digital consent in their country (13–16 depending on EU member state), a parent or guardian should create or approve the account and supervise its use. Birthday information is optional — you may leave it unset.
6. How long we keep it
Data is kept while your account exists. When you delete your account — available in the app under Profile — your profile, wishlists, items, images, friendships and claims are permanently removed from our systems. Anonymous aggregate counters may be kept.
7. Security
Traffic is encrypted in transit (HTTPS/TLS), passwords are handled by our auth provider and never stored in plain text, and database access is governed by row-level security so users can only reach data they are entitled to.
8. Your rights (GDPR)
- Access a copy of your personal data.
- Correct inaccurate data — profile fields are editable in-app.
- Delete your account and data in-app at any time.
- Object to or restrict processing, and data portability.
- Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.
To exercise any right, email hello@novoradigitaloü.com.
9. Third-party links
Wishlist items may link to external stores. When you open a product link you leave the Service and that store's own privacy policy applies.
10. Changes
If we change this policy we will update this page and, for material changes, notify users in the app.