Aura privacy policy

About this policy

This policy explains what information Aura: AI Flashcards & Study ("Aura", "the app") handles, why, and who it is shared with. Aura is made by Fernquill Studio, an independent developer based in British Columbia, Canada ("we", "us").

Information we collect

We collect only what the app needs to make cards, apply scan limits and handle subscriptions. We never ask for your name, email or phone number.

Study material you submit. Photos you take or choose, files you pick (PDF, Word, PowerPoint, text or Markdown) and text you paste. These are sent to our server to create cards and are not stored there afterwards (see the next section).

An anonymous support ID. On first launch the app creates a random ID so our server can recognize your device. It isn't linked to your name, email or phone number.

Usage records. For each scan: the date and time, the type of input (images, PDF or text), the AI model used, the amount of material processed and whether it worked. We also keep your monthly scan count and a daily total for the whole app. These records never contain your notes or cards.

Card reports. If you tap Report on a card, we receive the reason you chose and that card's question and answer text (up to 1,000 characters each), linked to your anonymous support ID.

Subscription status. If you subscribe, Google Play handles the payment. We receive whether your subscription is active, through our subscription provider. We never see your card or bank details.

Basic connection data. When the app connects to our services, the servers involved receive your IP address and basic device and network information, as with any internet service. It is used to deliver the service and keep it secure.

Crash reports. If the app crashes or hits an error, it sends a technical report so we can fix the problem: the error details, app version, device model and Android version, linked to your anonymous support ID. Crash reports never include your notes, cards, scanned text, files or photos.

Permissions. The app asks for camera access only to take photos of your notes, and opens your photos or files only when you choose them. If you turn on study reminders, it asks for permission to send notifications. Reminders are created and delivered on your phone, and nothing about them is sent to us.

What we don't do. We don't collect your contacts or location, the app shows no ads, and we don't sell your information or use it for advertising.

How your study material is processed

Your material goes to our server, then to Anthropic's Claude AI to write the cards, and the cards come back to your phone. Our server doesn't keep a copy.

You choose photos, a file or text in the app.
The app shrinks large photos and sends the material over an encrypted connection to our server, which is hosted by Supabase in Canada.
Our server sends it to Anthropic's Claude AI service, which writes the flashcards.
The cards come back to your phone. You review them, and only the ones you save are stored, on your phone.

Anthropic's handling. Anthropic processes the material under its commercial terms. Under those terms it doesn't use the material to train its AI models, and it deletes it automatically after a short period (currently up to 30 days). It may keep material longer if it is flagged for a safety review or if the law requires it. See Anthropic's privacy policy.

Please be careful what you scan. Don't send material you aren't comfortable sharing with an AI service, such as other people's personal information, medical or financial records, or ID documents.

Data stored on your device

Your decks, cards, review history and exam dates are stored only on your phone, and we can't see them.

They stay in the app's own storage on your device. If you uninstall the app or clear its data, they are deleted, and we can't recover them. To keep a copy, use Back up deck, or export a deck for Anki or as a spreadsheet. These files are created on your phone and go only where you choose to share or save them, such as your own cloud storage or email. Files you import are read on your phone and are not sent to us.

How we use information

We use the information above only to run Aura. We don't sell it or use it for advertising.

To create your flashcards.
To apply the free and Pro scan limits and to prevent abuse.
To provide and restore your subscription.
To review reported cards and improve card accuracy.
To understand running costs and keep the service working.
To meet our legal obligations.

Service providers

We share information only with the five providers below, and only what each needs to do its job.

Supabase: Hosts our server and database (in Canada). It receives your anonymous support ID, usage records and card reports, and your material passes through it while cards are made.
Anthropic: Provides the AI that writes your cards. It receives the material you submit for each scan.
RevenueCat: Manages subscriptions. It receives your anonymous support ID, subscription status and basic device information.
Sentry: Collects crash reports. It receives the crash details described above, linked to your anonymous support ID.
Google Play: Handles app distribution and payments. It receives your payment and purchase details, which Google manages.

We may also disclose information if the law requires it, or to protect the safety of our users or the service.

How long we keep information

We keep server records only as long as we need them, and we never keep a copy of the material you scan.

Material you scan: not kept by us. Anthropic deletes it as described above.
Usage records and scan counts: up to 24 months, then deleted.
Card reports: until reviewed, and no longer than 12 months.
Anonymous support ID: until you ask us to delete it.
Crash reports: until they expire in Sentry, or sooner if you ask us to delete your data.

Security

Connections between the app and our services are encrypted (HTTPS). Our database blocks access to other users' records, and the keys our server uses are never stored in the app. No system is perfectly secure, but we work to protect your information.

Children

Aura isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has used the app and sent us information, contact us and we'll delete it.

Your rights and choices

You can ask to see, correct or delete the information we hold about your anonymous support ID. A deletion request also deletes crash reports linked to that ID. See Delete your data.

To make a request, email [email protected] with the support ID shown on the app's About screen. We have no name or email on file, so we need that ID to find your records.
To delete everything on your phone, uninstall the app or clear its data.
To cancel a subscription, use Google Play's Subscriptions settings.

If you're in Canada, you can also contact the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for BC. If you're in the European Union or United Kingdom, you have rights under the GDPR, including access, correction, deletion and objection, and you can complain to your local data protection authority.

Where information is processed

Our server and database are in Canada. Anthropic, RevenueCat and Sentry are based in the United States, so information they receive may be processed there.

Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. For important changes, we'll also let you know in the app.

Contact

Fernquill Studio, British Columbia, Canada
[email protected]