Privacy Policy

What we collect

  • Installation identifiers. A random installation id and the secret the app uses to prove it is that installation, your platform, app and OS version, device time zone and, if you opt in, a push token. These identify a copy of the app rather than a person, and we use them to run the service and send notifications.
  • A pseudonymous reader id and your preferences. Lane, tropes and settings. Created on first launch without any personal detail. It is not anonymous: it is a lasting id that your activity is linked to.
  • Account identifiers, only if you sign in. The subject identifier your provider returns and a display name if the provider supplies one. We do not store the email address that Apple or Google sign-in makes available to us.
  • Reading activity. Progress, activity days, streaks, lists, in-story message state and reports.
  • Purchases. Records of your subscription and the store’s receipts and status notifications behind it.
  • Product analytics. Pseudonymous event data keyed to your reader id. No advertising identifiers, and no tracking across other companies’ apps or sites.
  • Messages you send us. If you use the web deletion form or contact support, we keep the email address or other contact detail you give us and what you wrote, so that we can verify the request and answer it.
  • Request logs. Cloudflare records IP addresses for security.

Why we may use it

  • To provide the app you asked for: reading, listening, progress, Sparks and subscriptions. This is necessary to perform our agreement with you.
  • To keep the service secure and prevent fraud and abuse, and to keep the purchase records we need for refunds and tax. This rests on our legitimate interests and, for the tax records, on our legal obligations.
  • Notifications, where you have turned them on. These rest on your consent. You can withdraw it at any time by turning notifications off in the app or in your device settings, and withdrawing it does not affect what we did before you withdrew it.
  • Product analytics, which show us how Avelora is read so we can improve it. These run as part of the service and rest on our legitimate interest in understanding and improving it. They are keyed to your pseudonymous reader id and stay within Avelora and the providers named below.

Reading Avelora needs only the first of these. Signing in and notifications remain separate choices, and Avelora works fully without either. Product analytics run as part of the service.

How long we keep it

  • Installation records: deleted 24 months after last use.
  • Reader id and preferences: until you delete your account, or 24 months of inactivity.
  • Activity sessions: 90 days. Reports: 1 year.
  • Purchase and subscription records: 5 years, retained pseudonymously after deletion for refund, fraud and tax reconciliation.
  • Product analytics: 1 year.
  • Request logs: 7 days. Deletion requests: 90 days after handling.

Who we share it with

Apple and Google (purchases and sign-in), Cloudflare (hosting, security and checking the deletion form), PostHog (product analytics) and Expo (delivering the notifications you opted in to). They act for us and must protect your data consistently with this policy; Apple and Google also handle purchases and sign-in under their own policies. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not track you across other companies’ apps or websites.

Your rights and choices

Notifications are opt-in and can be turned off in the app or in system settings. You can delete your account and its data at any time. In the app: Profile → Account → Delete Account, which removes your reader data straight away. On the web: the deletion form at avelora.world/account/delete, which works if you no longer have the app; a request there is verified by hand, starts a 72-hour cooling period and is completed within 30 days. Help walks through both. Deletion is subject to the purchase records described above, which we keep pseudonymously.

Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you gave. Ask us at support@avelora.world and we will answer within the time the law allows. If you are in the EEA or the UK and you think we have got it wrong, you can complain to your national data protection authority or, in the UK, to the Information Commissioner’s Office.

Deleting your Avelora account does not cancel your subscription. Cancel that separately in your Apple subscription settings.

Children

Avelora is rated 13+ / Teen and is not directed to children under 13. We do not knowingly collect data from them, and if you believe a child has given us data, tell us and we will delete it.

Changes to this policy

If we change this policy we will post the updated version on this page, and for significant changes we will tell you in the app before they take effect.

Contact

support@avelora.world · Avelora Studios