Privacy Policy
Last updated 14 August 2026
This policy explains what AviLedger collects, why, and what control you have. AviLedger is provided by Elcolynx (registration number 2025/620159/07), a private company registered in South Africa, which is the responsible party (data controller) for your information.
We collect the minimum needed to run your account and sync your records. Your aviary data is yours — we don't sell it, we don't advertise against it, and you can delete it and your whole account from inside the app at any time.
What we collect
Account information
Your email address, and a password or the identifier from your Apple or Google sign-in. If you set up an aviary we store its name and the keeper details you enter.
The records you enter
Everything you choose to put in AviLedger: birds and ring numbers, species and mutations, breeding pairs, clutches and eggs, weights, pedigree links, health notes, permit and CITES numbers, buyer names and sale amounts, and any photos you upload. Some of this may identify other people — co-owners or buyers you record. You are responsible for having a lawful basis to enter someone else's details.
Technical and diagnostic data
App version, device type and operating system, approximate country from your IP address, crash reports and error diagnostics, and basic subscription status. We use this to keep the app working and to fix faults.
Payment information
We never see or store your card details. Payments are handled entirely by our payment providers, who send us only what we need — whether a subscription is active, its plan, and its renewal date.
Why we use it
- To create your account, sign you in, and sync your records across your devices — this is necessary to perform our contract with you.
- To take payment and manage your subscription.
- To send service messages such as sign-in confirmations, password resets, and permit or candling reminders you have asked for.
- To diagnose crashes and improve reliability — our legitimate interest in a working product.
- To meet legal and accounting obligations.
We do not sell your personal information, and we do not use your aviary records for advertising.
Who processes it for us
We use a small number of established providers. Each processes data only on our instructions.
| Supabase | Account authentication and the database holding your records. |
| Cloudflare | Hosting for this website, and R2 storage for bird photos. |
| Paddle | Merchant of record for website and Windows purchases — billing, tax and receipts. |
| RevenueCat | Subscription status across platforms. |
| Apple & Google | Payment and subscription handling for purchases made in our mobile apps. |
| Sentry | Crash and error reporting. |
| Firebase Cloud Messaging | Push notifications on mobile. |
| Resend | Delivery of account emails such as sign-in confirmation and password reset. |
Where your data is held
Our providers operate internationally, so your information may be stored or processed outside South Africa, including in the European Union and the United States. Where we transfer personal information across borders we rely on the safeguards those providers offer, such as standard contractual clauses, consistent with POPIA and, where it applies, the GDPR.
How long we keep it
We keep your account and records for as long as your account exists. If you delete your account we delete your records and photos, other than anything we must retain for legal or accounting reasons — payment and tax records, for example, are kept for the period the law requires. Backups are cycled out on a rolling basis.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or object to a particular use. You can also complain to a regulator — in South Africa, the Information Regulator; in the EU or UK, your local data protection authority.
You do not need to ask us to delete your account. AviLedger has account deletion built in — open Settings and choose to delete your account, and your records are removed. For anything else, email admin@elcolynx.com and we will respond within 30 days.
Security
Access to your records requires authentication, data is transmitted over encrypted connections, and database access rules restrict each account to its own aviary. Private bird photos are served through expiring signed links rather than public URLs. No system is perfectly secure, but we take this seriously and will notify you and the relevant regulator if a breach affects your personal information.
Children
AviLedger is not directed at children and is intended for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
Changes
If we change this policy materially we will tell you in the app or by email before the change takes effect. The date at the top always reflects the current version.
Contact
Elcolynx — admin@elcolynx.com