This Privacy Policy explains how Auvora ("we," "us," or "our") collects, uses, and protects your information when you use the Auvora application and related services (the "App"). Auvora is a personal habit-tracking and self-improvement application.
The data controller responsible for your personal data is Auvora. You can contact us about your data, or exercise any of the rights described below, at auvora@email.cz.
By using Auvora, you agree to this Privacy Policy. If you do not agree, please do not use the App.
Information we collect
Account information. When you create an account we collect your email address. If you sign in with Google or Apple, we receive basic account information from that provider (such as your email address, and your name where you allow it). If you sign in with Apple you may use Apple's Private Relay email, which we accept.
Your habit and activity data. We store the content you create in the App: your habits, habit completions, streaks, routines, goals, journal entries, daily check-ins, experience points, ranks, achievements, timeline events, and related settings. This is the core content of the App and is stored so it syncs and is available across your sessions and devices.
Journal content. If you use the journaling features, we store the entries you write in our database alongside your other data. Journal entries are encrypted in transit and encrypted at rest at the infrastructure level, but they are not end-to-end encrypted — which means that, in principle, they are accessible to us as the operator of the service (for example, to provide support or to comply with a legal obligation). We do not read your journal entries in the ordinary course of running the App, and we never share them with other users. If you use the optional Journal AI features, only the specific text you choose to analyse is sent to our AI provider to produce the result (see "AI features" below).
AI features (Coach and Journal AI). These features are optional and off until you enable them. When you use them, the information needed to generate a response — a summary of your relevant habit data, and any message or text you submit — is sent to Google (the Gemini API) to produce the reply. We do not store your Coach conversations on our servers; your Coach chat history is kept locally on your device, and you can clear it at any time in Settings. Google processes these requests under its own API terms.
Payment information. If you purchase a subscription or a one-time upgrade, payment is processed by the Apple App Store or Google Play. We do not receive or store your payment-card details; we receive only confirmation of your purchase and your subscription status from the store. We do not use a third-party subscription manager.
Technical information. We collect the minimal technical information needed to operate the App (such as the app version and standard server request logs used to keep the service running and to diagnose problems). We do not use any third-party analytics, advertising, tracking, or crash-reporting tools; we do not build advertising profiles; and we do not sell your data.
How we use your information
- To provide, operate, and maintain the App and its features;
- To store and sync your habits, progress, and other content across your devices;
- To generate AI Coach and Journal AI responses when you choose to use those features;
- To process your subscriptions and purchases;
- To send notifications you have enabled (such as habit reminders), which you can disable at any time;
- To secure the service, diagnose problems, and improve the App;
- To comply with our legal obligations.
Legal bases (GDPR). Where the GDPR applies, we process your personal data on these legal bases: performance of our contract with you (to provide the App); your consent (for optional features such as the AI features, social features, and notifications); our legitimate interests (to secure and improve the App); and compliance with legal obligations.
How we share your information
We do not sell your personal data. We share it only with the service providers that operate the App:
- Supabase — our database and authentication provider, which stores your account and app data. Your data is stored in the European Union (Supabase's eu-west-1 region).
- Google (Gemini) — processes requests for the optional AI features to generate responses.
- Vercel — our hosting and infrastructure provider, which serves the App and runs its server functions.
- Apple App Store / Google Play — process payments and subscriptions.
These providers process data on our behalf and are bound by their own privacy and security obligations. We may also disclose information where required by law, regulation, legal process, or a governmental request.
Other users (social features). Auvora's social features are off by default and fully optional. If you enable Rivals, a connected rival sees a single number — your chosen metric — and nothing else. If you join the Arena, you appear on leaderboards with a handle you choose (not your real name) and, only if you switch them on, your headline stats, a thumbnail of your world, and your identity line. Your habits, journal entries, email, and other personal data are never shared with other users. You can leave all social features and delete your public data at any time in Settings.
International data transfers
Your core account and app data is stored in the EU (Supabase, eu-west-1). Some providers may process data outside the European Economic Area — in particular Google (for the optional AI features) and Vercel (our hosting provider). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Data retention
We retain your personal data for as long as your account is active. When you delete your data using "Delete all data" in Settings, it is removed from our active systems immediately; residual copies in encrypted backups are purged within 30 days. We may retain limited information where we are required to by law.
Your rights
Under the GDPR, and depending on your location, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your data (the "right to be forgotten");
- Export your data in a portable format;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).
You can export your data and delete your account and data directly in the App, under Settings → Privacy & Data. For any other request, contact us at auvora@email.cz.
Data security
We take reasonable measures to protect your data, including access controls that scope each person's data to their own account, encryption in transit, and database-level security rules. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children's privacy
Auvora is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
Notifications
If you enable notifications, we send the reminders and updates you have opted into. You can disable notifications at any time in the App's settings or in your device settings.
Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for significant changes, notify you in the App. Your continued use of Auvora after changes take effect constitutes acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy or your data, contact us at auvora@email.cz.