Privacy Policy
Last updated: March 01, 20261) Data we process
- Subscription data: Subscription processing is handled by Apple and RevenueCat; the app only receives the entitlement result required to grant access.
- App data: Last played content, session preferences, and app language are stored on device.
- Contact form data: Contact form data is stored only temporarily to respond to your support request and is deleted within a reasonable period.
- Technical logs: Our infrastructure providers (such as Cloudflare) may automatically process technical connection data required for secure delivery and error diagnostics.
2) Data we do not request
Auraly does not request unnecessary personal data such as account passwords, contacts, photos, sensitive health data, or location history.
3) Why we process data
- To deliver content and verify subscription access
- To restore purchases
- To respond to support requests
- To ensure security, abuse prevention, and service continuity
4) Third-party services
We use Apple, RevenueCat, Supabase, and Cloudflare R2 to operate the service. These providers are used for content hosting, database management, subscription validation, and secure content delivery.
International data transfers: Some of our service providers may process data outside of your country. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
5) Retention
- On-device preferences remain on your device until removed.
- Contact records are retained as long as needed for support.
- Subscription-related records may be kept as required by legal and financial obligations.
6) Your rights
Under applicable laws (including GDPR and KVKK), you have the following rights:
- Access: Request a copy of your personal data we hold
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Data portability: Request transfer of your data to another service
- Objection: Object to processing of your data
- Restriction: Request restriction of processing
To exercise these rights, contact us at: info@auralyapp.org
We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.
7) Cookies and tracking
Our website and app do not use cookies or tracking technologies for advertising purposes. Technical cookies may be used solely for essential functionality and service delivery.
8) Children's privacy
Our service is not specifically directed to children.
9) Security
We apply reasonable technical and organizational safeguards, but no method is 100% secure.
10) Data breach notification
In the event of a data breach that may affect your rights and freedoms, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.
11) Legal basis for processing (GDPR)
We process your data based on:
- Contract performance: To provide the service you requested
- Legitimate interest: To improve our service and prevent abuse
- Legal obligation: To comply with applicable laws
- Consent: Where explicitly obtained for specific purposes
12) Changes
We may update this policy from time to time. Material changes will be posted in-app or on this page. Continued use of the service after changes constitutes acceptance of the updated policy.
13) Contact
For privacy questions, data requests, or to exercise your rights: info@auralyapp.org