The data Eril collects
What Eril keeps, what for, for how long, where, and with whom. Nothing is sold or used for advertising; no advertising trackers.
Data controller: Eril — contact: aide@eril.ai.
The data
| Data | What for | Legal basis | Retention |
|---|---|---|---|
| E-mail address | Create and keep the account, sign in ; Notify when the copy or a page is ready, requested reminders | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| First name (optional) | Create and keep the account, sign in ; Notify when the copy or a page is ready, requested reminders | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| Apple or Google sign-in identifiers | Create and keep the account, sign in | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| Country, year of birth, writing languages, maths level | Learn the person's handwriting (their copy) and write with it ; Protect minors (digital consent age, parental consent) | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| Handwriting captures: the stroke (position and time of each point), the requested word, the area size | Learn the person's handwriting (their copy) and write with it ; Build the handwriting corpus used to retrain the models (if contribution is on) |
Performance of the contract (Art. 6(1)(b))
Corpus: consent (contribution on) |
As long as the account exists (and the handwriting is not deleted); in the corpus, under a random number, while contribution stays on |
| Handwriting copy (learned model) and its previous version | Learn the person's handwriting (their copy) and write with it | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| Pages: typed texts, settings, written strokes, imported files, exports | Keep pages, their strokes, exports and imports | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; a deleted page (text, strokes, versions, exports) is erased 30 days after its deletion; everything is erased within 30 days after account deletion |
| Dated consents (mode shown, text version, IP address, browser) and parental consent (parent e-mail, answer) | Legal obligations: proof of consent, AI marking, reports ; Protect minors (digital consent age, parental consent) | Legal obligation (Art. 6(1)(c)): proof of consent, generative AI (AI Act Art. 50), reports | As long as the account exists; erased within 30 days after account deletion |
| Devices: platform, app version, language, notification token (encrypted) | Notify when the copy or a page is ready, requested reminders | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| Credits and referrals (movement log) | Count free pages and earned credits | Performance of the contract (Art. 6(1)(b)) | As long as the account exists; erased within 30 days after account deletion |
| "Do you recognise yourself?" ratings and page reports | Learn the person's handwriting (their copy) and write with it | Legitimate interest (Art. 6(1)(f)): security, fraud prevention | As long as the account exists; erased within 30 days after account deletion |
| Technical logs: IP address, device, version, errors (never strokes, codes or tokens) | Security, rate limits, fraud prevention and diagnostics | Legitimate interest (Art. 6(1)(f)): security, fraud prevention | Request log (IP address, device): 30 days (monitoring.api_log_days setting) |
| Public reports (no account): optional name and e-mail, content address, description; IP address reduced to a fingerprint | Legal obligations: proof of consent, AI marking, reports | Legal obligation (Art. 6(1)(c)): proof of consent, generative AI (AI Act Art. 50), reports | Public reports: one year after they are closed (to be confirmed) |
Eril collects no location, contacts, payment data or health data, and does no advertising tracking.
Where the data is
- Application server and MySQL database (Laravel, Coolify), in the European Union (to be confirmed)
- Files (captures, copies, imports, exports): Cloudflare R2, one bucket per environment, EU jurisdiction (to be confirmed)
- Handwriting computation: Eril's own graphics card and rented ones (RunPod); they only keep the copies (to be confirmed)
Processors
| Processor | Role | Location | Safeguards |
|---|---|---|---|
| Cloudflare R2 (Cloudflare, Inc.) (to be confirmed) | File storage: captures, copies, imports, exports | EU bucket jurisdiction; US company | Data processing agreement, standard contractual clauses, Data Privacy Framework |
| A_REMPLIR (nom du service d’envoi) (to be confirmed) | Sending e-mails: sign-in codes, parental consent, copy ready, data link, deletion confirmation | To be confirmed (EU preferred) | Data processing agreement |
| Apple Push Notification service (Apple Inc.) | Notifications on iPhone, iPad and Mac | United States | Apple terms, Data Privacy Framework; notification content without sensitive data |
| Firebase Cloud Messaging (Google LLC) | Notifications on Android | United States | Google terms, Data Privacy Framework; notification content without sensitive data |
| Web Push (Mozilla, Google, Apple, Microsoft) | Browser notifications (and Windows depending on the app) | Depends on the browser (often United States) | End-to-end encrypted messages (VAPID, RFC 8291) |
| RunPod (RunPod, Inc.) (to be confirmed) | Rented graphics cards: write texts and learn copies; they read captures and copies from storage and keep nothing | Data centres chosen in the EU where possible; US company | Data processing agreement, standard contractual clauses; no identity data sent (random key) |
Your rights
From the app (Me › My data): download all your data (link by e-mail, valid 24 hours), turn off contribution to the corpus, delete your handwriting, delete your account (everything is erased within 30 days).
For any other request (rectification, objection, restriction): aide@eril.ai. You can also lodge a complaint with your data protection authority.