Privacy Policy
Last updated 8 October 2026
This policy explains what AviLedger collects, why, and what control you have. AviLedger is provided by Elcolynx (registration number 2025/620159/07), a private company registered in South Africa, which is the responsible party (data controller) for your information.
We collect the minimum needed to run your account and sync your records. Your aviary data is yours. We don't sell it, we don't advertise against it, and you can delete it and your whole account from inside the app at any time.
What we collect
Account information
Your email address, and a password or the identifier from your Apple or Google sign-in. If you set up an aviary we store its name and the keeper details you enter.
The records you enter
Everything you choose to put in AviLedger: birds and ring numbers, species and mutations, breeding pairs, clutches and eggs, weights, pedigree links, health notes, permit and CITES numbers, buyer names and sale amounts, and any photos you upload. Some of this may identify other people, co-owners or buyers you record. You are responsible for having a lawful basis to enter someone else's details.
Technical and diagnostic data
App version, device type and operating system, approximate country from your IP address, crash reports and error diagnostics, and basic subscription status. We use this to keep the app working and to fix faults.
Payment information
We never see or store your card details. Payments are handled entirely by our payment providers, who send us only what we need, whether a subscription is active, its plan, and its renewal date.
Cookies and website measurement
This website asks before it measures anything. Until you allow it, no analytics or advertising cookie is set and no advertising identifier is stored. Decline and the site works exactly the same, minus the measurement.
If you allow it, we use Google Analytics to see which pages breeders read, and Google Ads conversion measurement to see which adverts brought somebody who went on to create an account. Where you arrive from an advert, we store that advert's click identifier in your browser for up to 90 days and record it against your account if you sign up, so we can tell which adverts are worth paying for. We also use Cloudflare Web Analytics, which counts page views without cookies and without identifying anybody.
Your aviary records are never used for advertising, whichever you choose. Nothing about your birds, your pairs, your finances or your permits is sent to Google or to anyone else for that purpose, and we do not build advertising profiles from them. The measurement above is about pages and adverts, not about the contents of your account.
Our video walkthroughs are hosted on YouTube. The walkthroughs page shows each video as a picture served from this site, and nothing is loaded from YouTube until you press play. When you do, the video plays in YouTube's privacy-enhanced mode (youtube-nocookie.com), and from that point YouTube's own privacy policy applies to what it collects.
You can change your mind at any time by clearing this site's cookies and site data in your browser, which makes the choice appear again. We ask again every six months regardless.
Why we use it
- To create your account, sign you in, and sync your records across your devices. This is necessary to perform our contract with you.
- To take payment and manage your subscription.
- To send service messages such as sign-in confirmations, password resets, and permit or candling reminders you have asked for. These are part of the service and cannot be unsubscribed from, because a password reset that never arrives is not a courtesy.
- To send occasional product email: a welcome when you join, and now and then a note about what the app can now do or a question about how you are finding it. This is our legitimate interest in a product people can actually use, and you can stop it at any time. Every one of these carries an unsubscribe link, one click ends it, and it never affects the service messages above.
- To diagnose crashes and improve reliability, our legitimate interest in a working product.
- To meet legal and accounting obligations.
We do not sell your personal information, and we do not use your aviary records for advertising. Product email is about the app, never about your birds: what is in your records plays no part in what we send or who we send it to.
We send few of them. There is no drip sequence and no newsletter. If you unsubscribe we keep a record of the fact that you did, which is the only way to be sure we never write to you again.
Who processes it for us
We use a small number of established providers. Each processes data only on our instructions.
| Supabase | Account authentication and the database holding your records. |
| Cloudflare | Hosting for this website, and R2 storage for bird photos. |
| Paddle | Merchant of record for website and Windows purchases, billing, tax and receipts. |
| RevenueCat | Subscription status across platforms. |
| Apple & Google | Payment and subscription handling for purchases made in our mobile apps. |
| Sentry | Crash and error reporting. |
| Firebase Cloud Messaging | Push notifications on mobile. |
| Resend | Delivery of account emails such as sign-in confirmation and password reset. |
| Google Analytics & Google Ads | Website measurement and advertising performance, only with your consent. Never given your aviary records. |
Where your data is held
Our providers operate internationally, so your information may be stored or processed outside South Africa, including in the European Union and the United States. Where we transfer personal information across borders we rely on the safeguards those providers offer, such as standard contractual clauses, consistent with POPIA and, where it applies, the GDPR.
How long we keep it
We keep your account and records for as long as your account exists. If you delete your account we delete your records and photos, other than anything we must retain for legal or accounting reasons, payment and tax records, for example, are kept for the period the law requires. Backups are cycled out on a rolling basis.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or object to a particular use. You can also complain to a regulator. In South Africa, the Information Regulator; in the EU or UK, your local data protection authority.
You do not need to ask us to delete your account. AviLedger has account deletion built in. Open Settings and choose to delete your account, and your records are removed. For anything else, email admin@aviledger.com and we will respond within 30 days.
Security
Access to your records requires authentication, data is transmitted over encrypted connections, and database access rules restrict each account to its own aviary. Private bird photos are served through expiring signed links rather than public URLs. No system is perfectly secure, but we take this seriously and will notify you and the relevant regulator if a breach affects your personal information.
Children
AviLedger is not directed at children and is intended for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
Changes
If we change this policy materially we will tell you in the app or by email before the change takes effect. The date at the top always reflects the current version.
Contact
Our Information Officer under POPIA is Corné Els, registered with the Information Regulator under registration 2026-063743. Requests about your personal information reach him here:
ElcoLynx (Pty) Ltd (registration number 2025/620159/07)
Suite V, Block 1, Corobay Corner, 169 Corobay Avenue, Menlyn, Pretoria, Gauteng, 0181, South Africa
083 701 8565 (+27 83 701 8565)
admin@aviledger.com