Legal

Privacy Policy

Last updated: 5 November 2026

This policy explains how Elfie handles personal data when you visit elfiemac.com, buy Elfie, or use the Elfie app for macOS. It is written to follow India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Who we are

Elfie is made and sold by Divv Saxena, a sole proprietor based in Uttar Pradesh, India (“we”, “us”). For the personal data described here, we are the Data Fiduciary under the DPDP Act.

For anything about your privacy, email [email protected].

2. What we collect

When you visit elfiemac.com

• Analytics (DataFast). We use DataFast's cookieless script to see aggregate statistics: pages viewed, the site that referred you, approximate country, browser and device type, and clicks on the Download and Buy buttons. It sets no cookies. DataFast processes your IP address to work out your approximate location and to count unique visits with an anonymised identifier that changes every day. We only see totals, never individual visitors. Our thank-you page, which shows your license key after a purchase, loads no analytics at all.
• Hosting logs (Cloudflare). Our host, Cloudflare, processes technical data such as your IP address, browser user agent and the pages requested so it can deliver the site and protect it from attacks.
• Emails. If you email us, we receive your email address and whatever you choose to include.

When you buy Elfie

Purchases are processed by Dodo Payments, which acts as the Merchant of Record: it is the seller on your order, handles the payment, calculates and collects taxes, and issues your invoice. Dodo Payments collects your name, email address, country, billing address and payment details. We never see or store your card details. Dodo Payments shares with us your name, email address, country, what you bought and the license key issued, so we can deliver your license and help you if something goes wrong. Dodo Payments' handling of your data is described in its Privacy Policy.

When you use the Elfie app

• License activation. When you enter a license key, the app sends that key and a random device ID to Dodo Payments' license server to activate it, and re-checks it about once a week while it's active. The device ID is generated on your Mac and isn't linked to your name, your Mac's name, its serial number or any hardware identifier. Nothing else is sent, and the app makes no other network requests.
• Window positions, on your Mac only. To choose a hiding spot, the app reads the positions and sizes of open windows, the names of the apps they belong to, and your screen and Dock layout. This happens entirely on your Mac and is never sent anywhere. The app never captures, records or reads the contents of your screen or windows, and it doesn't ask for Screen Recording or Accessibility permission.
• Stored on your Mac. Your settings, the days you found the elf, and today's hiding spot are kept in the app's preferences. Your trial start date, device ID and license key are kept in your Mac's Keychain. You can delete them by deleting the app and these items.
• The app has no accounts, analytics, crash reporting or advertising code.

3. What we don't do

• We don't sell, rent or trade your personal data.
• We don't show ads or let advertisers track you.
• We don't record your screen or read the contents of your windows.
• We don't collect passwords or card details, or other sensitive personal data.

4. Why we use your data, and on what basis

• To sell you Elfie and run your license (purchase details, license key, device ID): you give us this data yourself to buy and activate Elfie, which is a legitimate use under Section 7(a) of the DPDP Act. Some purchase records are also kept to meet legal obligations such as tax and accounting rules.
• To answer your emails: you send us this data yourself to get help, also a legitimate use under Section 7(a).
• To run, secure and improve the website (hosting logs and cookieless analytics): these are designed not to identify you. Where they involve personal data, we rely on your consent, which you can withdraw at any time by blocking the analytics script in your browser or by emailing us.

We use your data only for these purposes.

5. How long we keep it

• License records (license key, activations and device IDs) are kept while your license is active. When a license ends or you ask us to delete it, we deactivate it and delete what we hold, except where the law requires us to keep it.
• Purchase and tax records are kept by Dodo Payments for as long as the law requires, as described in its policy.
• Support emails are kept while we're helping you and deleted within 12 months after.
• Analytics are kept as aggregate statistics. Hosting logs are kept by Cloudflare for a short time under its own retention policy.

6. How we protect it

We collect as little as possible. The website is served only over HTTPS. Payments are handled by Dodo Payments, which operates PCI DSS-compliant payment systems. In the app, the license key is stored in the macOS Keychain. Access to our accounts with service providers is protected with strong, unique passwords and two-factor authentication. These measures are our reasonable security practices under Rule 8 of the 2011 Rules. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

7. Who we share it with

We share data only with the service providers below, only for the purposes above:

• Dodo Payments: Merchant of Record for payments, taxes, invoices and license keys. Privacy Policy
• Cloudflare: website hosting, delivery and security. Privacy Policy
• DataFast: cookieless website analytics. Privacy Policy

These providers may process data outside India. The DPDP Act allows this, except to countries the Government of India restricts. We may also disclose data when the law requires it.

8. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you, how we use it, and who we've shared it with;
• Correct, complete or update your personal data;
• Erase your personal data when it's no longer needed or you withdraw consent, unless the law requires us to keep it;
• Withdraw consent where we rely on it, as easily as you gave it;
• Grievance redressal: have your complaints about how we handle your data addressed;
• Nominate another person to exercise these rights for you if you die or become unable to.

To use any of these rights, email [email protected] with the subject “Privacy request”. To protect your data, we may ask you to confirm the email address you bought with or your license key. We'll respond within 30 days. If you aren't satisfied with our response, you can complain to the Data Protection Board of India.

9. Grievance Officer

In line with the DPDP Act and Rule 5(9) of the 2011 Rules, our Grievance Officer is:

• Name: Divv Saxena
• Email: [email protected]
• Location: Uttar Pradesh, India

We'll respond to every grievance within 30 days of receiving it.

10. Children

Elfie is a family-friendly app, but purchases are not directed at children under 18. If you're under 18, a parent or guardian must make the purchase. We don't knowingly collect personal data from children. If you believe a child has given us personal data, email us and we'll delete it.

11. Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change significantly affects how we use your data, we'll say so clearly on this website and, where we have your email address, by email.

12. Contact

Divv Saxena (Elfie), Uttar Pradesh, India · [email protected]