This policy explains what data is processed by the “Elegance” mobile app (iOS and Android), which website owners use to view and manage their WordPress website running the “Elegance” plugin. Our other activities (the elegance.lt website, licences, newsletter) are covered by the general elegance.lt privacy policy.
Data controller
MB “Elegance projektai”, company code 307058137, Perkūnkiemio g. 19, Vilnius, Lithuania. Email tomas@elegance.lt, phone +370 677 86 393.
In short
- The app contains no ads, tracking, analytics or cookies. We do not sell data.
- No account is created in the app; it connects to your website with a licence key and a one-time code.
- Your website data (orders, customers, products, traffic, security) travels directly from your website to your phone and is not stored on our servers.
- The camera, photos and Face ID are used only when you tap the related action.
What data we process and why
Connecting your phone to your website
When you enter a licence key, the app sends it to elegance.lt to find the website the key belongs to. Your website then emails a one-time confirmation code to the website administrator. Once confirmed, your website stores the device name (e.g. “iPhone 15”), the connection and last-use time and the IP address, so you can see which phones are connected and disconnect any of them. This device data is stored on your website, not with us. Legal basis: performance of the contract (licence) (GDPR Art. 6(1)(b)).
Data you see in the app
The app shows and lets you change your website data: security status, backups, traffic statistics, orders (including customer names, contact details and delivery addresses), products and stock. This data is transferred over an encrypted connection (HTTPS) directly between your website and your phone; it is not stored on our servers and we have no access to it. The website owner is the controller of this data.
Push notifications
If you enable notifications, your phone receives a push token. It is stored on your website so that it can notify you about new orders, outages or security events. The same token and the website monitoring email address are also sent to elegance.lt: every few minutes we check whether your website is online and notify you if it is unreachable, even if your entire server is down. Notifications are delivered by Expo (650 Industries, Inc.), Apple (iPhone) and Google (Android). Legal basis: performance of the contract (GDPR Art. 6(1)(b)). You can turn notifications off at any time in the app or in your phone settings.
Camera and photos
The camera is used only when you tap “Scan” (to read a product barcode) or take a product photo. Barcodes are recognised on the phone. A selected or captured product photo is uploaded only to your website. We do not receive or store photos or camera images.
Face ID / Touch ID and PIN
If you enable the app lock, your identity is verified by the phone itself (Face ID, Touch ID or the phone passcode). Biometric data never leaves your phone and is not accessible to the app or to us; the app only receives a “verified” or “not verified” result.
Data on your phone
The list of connected websites and the access key (in the phone's secure storage: Keychain or Keystore) and your settings are stored on your phone. They are deleted when you delete the app.
Who receives data
- Your website: all app actions are performed with your website.
- elegance.lt: licence key verification and website uptime monitoring (push token, monitoring email, website address).
- Expo, Apple, Google: to deliver push notifications.
We do not sell data or share it for marketing. Some notification providers (Expo, Apple, Google) may process data outside the European Economic Area; in such cases an adequacy decision of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses apply.
Retention
- Device data on your website: while the phone is connected.
- Push token and monitoring email at elegance.lt: while the phone is connected and the licence is valid; after disconnecting the phone or turning off notifications they are removed at the next licence check (within 24 hours).
- Website uptime status (online / offline): only the current status, no history is kept.
Disconnecting your phone and deleting data
In the app: website settings → “Disconnect this phone”. Or in your website admin: “Elegance” → Licence → “Phone app”. Disconnecting deletes the data related to that phone. Deleting the app deletes the data stored on the phone. You can also write to us at tomas@elegance.lt.
Your rights
Under the GDPR you have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing. Send requests to tomas@elegance.lt; we will reply within 1 month. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).
Children
The app is intended for website owners and businesses and is not directed at persons under 16.
Changes
We will update this policy when the app changes. The latest version is always published on this page, with the date shown at the top.