← Elflo

Privacy Policy

Elflo

Lire en français

Privacy Policy — Elflo

Last updated: 2026-05-28

The Elflo application

Elflo is an iOS Secret Santa drawing application developed and distributed under the name Elflo.

Data collected

Elflo collects no personal data on any server.

The only data entered in the App is:

  • The first names (or nicknames) of draw participants.
  • An optional budget (amount or range).

This data stays exclusively on the organizer's device. It is never transmitted to a server, to a third party, or to Elflo.

Remote sharing ("Remote" mode)

When the organizer uses the remote-sharing feature, each participant receives a personal link of the form:

https://santadraw.app/r#<token>?d=<drawID>

This link contains:

  • An encrypted token (AES-GCM) holding the giver's first name, the recipient's first name and the optional budget.
  • A drawID (UUID) transmitted in clear in the URL, required for decryption.

Encryption is performed locally on the organizer's device. No Elflo server receives or stores this information. The link is transmitted only via the channel chosen by the organizer (SMS, email, messaging), without any application intermediary.

The protection offered is "anti-curiosity": it prevents the organizer from seeing other participants' assignments and protects the secret in the context of a family or friends' gift exchange. It is not military-grade security.

Local storage

Draws, participants and assignments are stored in the App's local database (SwiftData), in the App's private directory on iOS. This data is protected by iOS data-protection mechanisms (hardware encryption) and is included in the user's iCloud backups if those have been enabled.

No tracking, no advertising

Elflo contains:

  • No tracking or behavioral analytics SDK.
  • No advertising.
  • No user account.
  • No network connection initiated by the App itself.

System resource access

Elflo requests no system permission (Contacts, Photos, Camera, Location, Microphone). Participants' first names are entered manually by the organizer.

Contact

For any privacy-related question: alexandre-paul@outlook.com.

This policy applies to all versions of Elflo available on the App Store.