Privacy policy

Elderflower is a scheduled text-message reminder service, operated by SPACE CADET d.o.o., a company registered in Croatia (OIB 36241253193, MBS 081627179, Ulica Ivana Šibla 17, 10000 Zagreb, Croatia). Questions about anything on this page go to hello@elderflowerapp.co and a human answers them.

This policy covers our website, the subscriber account, and the SMS program “Elderflower Reminders”.

When you join the waitlist, we store your name, email address, signup time and permission to send a confirmation and launch updates. We use a short-lived, hashed network identifier to limit abusive signups.

These details let us manage invitations and contact you when launch is ready. To leave the waitlist or request deletion, email hello@elderflowerapp.co. Joining does not create a monthly subscription.

• Your name and email address, and the account identifier created when you sign in.
• Your billing details — handled by our payment provider. We never see or store your full card number.
• The date and time of your confirmation that your parent has personally agreed to receive texts. The current consent form does not record your IP address.
• Operational events, such as reminder setup and message processing, stored to help run and troubleshoot the service.

• The name you enter for them, and the name you choose for the contact card their phone saves.
• Their mobile number and their time zone — the two things required to send a text at the right local moment.
• The reminder text you wrote, the times of day, and the days of the week it should go out.
• For each message: when it was scheduled, when it was sent, the provider’s message identifier, and the delivery status reported back by their mobile carrier.
• Any message they text to our number, and when it arrived. In practice this is YES, STOP, START or HELP. If they text anything else, we log it and send one warm, automatic acknowledgement — nobody is alerted, and no software reads it for meaning.
• The timestamp and message identifier of their YES, and of any STOP. These are the consent records, and they are how we prove the permission was your parent’s own.

We do not ask for diagnoses, medication names, or medical records. Keep reminders generic, such as “your morning vitamins”. We store reminder wording and incoming messages as text, so any sensitive information you include in them will also be stored.

We also collect no location data, no contacts, no call logs, no audio, and nothing from any camera or sensor. There is no app on their phone, so there is nothing on their phone for us to read.

• To send the reminders you set up, at the times you chose (performing the contract you bought).
• To show you whether each message was delivered to their handset, and to warn you if several in a row were not.
• To process STOP, START and HELP requests when they reach our service.
• To keep proof of consent, which telephone consumer protection law requires us to be able to produce.
• To take payment, to answer your emails, and to keep the service secure and working.

Only the companies that make the service run, and only the data they need to do their part: our SMS provider (which must have their number to deliver a message to their carrier), our hosting and database provider, our authentication provider, and our payment provider. Each is bound to use the data only to provide their service to us.

We may also disclose information if the law genuinely requires it — a valid legal request, or to protect someone’s safety.

If you accept advertising measurement, Meta receives standard browser Pixel data about page visits, completed waitlist signups, checkout starts, and completed account setup. We do not include names, email addresses, phone numbers, reminder content, or account data, and we do not use the server-side Conversions API.

• Account and reminder data remain stored after cancellation unless deleted through a separate data-deletion process. Canceling billing does not automatically delete your records.
• Message and delivery logs are currently retained; automatic deletion after a fixed period is not implemented.
• Consent and opt-out records are retained to document permission and respect requests to stop messaging. Any deletion request must account for records we are required to retain.

They can opt out of future reminders by replying STOP. We stop reminders once that request is received and processed; texts already with the carrier may still arrive. This does not cancel the subscriber’s billing.

Either of you may ask us to access, correct, export or delete the personal data we hold — including their number — by emailing hello@elderflowerapp.co. We will act within 30 days, and we will keep only the consent records described above. Depending on where you live, you may also have the right to complain to a data protection authority.

Data is encrypted in transit and at rest with our infrastructure providers, and access is limited to the people who need it to run the service. Because we operate from Europe and send messages to phones in North America, information may be processed in both the European Union and the United States.

We use essential cookies for secure sign-in and to remember our cookie notice. With your permission, Meta Pixel records page visits and selected signup steps so we can measure and improve our advertising. It stays off when you reject optional cookies, and you can withdraw permission at any time. See our cookie policy for the events and data involved, cookie durations, and controls.

Elderflower is for adults. We do not knowingly collect information about anyone under 18, and the service must not be used to text a minor.

If we change how we handle information, we will update this page and the date at the top, and we will email subscribers before anything material takes effect. We will not quietly start selling data we promised not to sell.