Privacy Policy

1. Introduction

Auvorix (“we,” “our,” or “us”) develops and publishes mobile applications for Android and iOS. This Privacy Policy applies to all mobile applications developed and distributed by Auvorix, including but not limited to:

By downloading or using any of our applications, you agree to the collection and use of information in accordance with this policy. If you do not agree, please uninstall the application and discontinue use.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

When you use our applications, we collect the following categories of personal data:

We do not collect your precise geolocation, contacts, photos, microphone input, or any sensitive device data unless explicitly required for a specific feature you have opted into — and only after requesting your explicit permission.

4. How We Use Your Information

We use the personal data we collect for the following purposes:

• To authenticate you and maintain secure access to your account
• To save, display, and analyse your study progress and test scores
• To manage and verify your premium subscription or lifetime purchase entitlement
• To deliver push notifications and study reminders (if you have opted in)
• To enforce our Terms of Use and detect fraudulent or abusive activity
• To improve our applications based on aggregated, anonymised usage patterns
• To comply with applicable legal obligations

We do not use your personal data for advertising, behavioural profiling, or sale to third parties. We do not build advertising profiles or share data with advertising networks.

5. Third-Party Services

Our applications integrate the following third-party services that may process your personal data as part of their normal operation:

6. Data Storage & Security

Your personal data is stored in Microsoft Azure Cosmos DB. All data transmitted between the application and our servers is encrypted in transit using HTTPS / TLS. Data at rest is encrypted using Azure-managed keys.

We implement role-based access controls and API authentication (JWT tokens with a 30-day expiry) to prevent unauthorised access. We review our security practices regularly and apply updates to address known vulnerabilities. Despite these measures, no electronic transmission or storage system is 100% secure. We encourage you to keep your device protected with a screen lock and to sign out of accounts on shared devices.

7. Data Retention

We retain your personal data for as long as your account is active. Specifically:

• Active accounts: Data is retained indefinitely to preserve your progress and subscription status.
• Deleted accounts: All associated data (profile, scores, progress, purchase history) is permanently and irreversibly deleted from our systems within 30 days of account deletion.
• Server logs: Anonymised server logs are retained for a maximum of 90 days for security and diagnostic purposes, then automatically purged.

8. Your Rights

European Economic Area (EEA) — GDPR

Under the General Data Protection Regulation, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to processing
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your national data protection authority

Brazil — LGPD (Lei Geral de Proteção de Dados)

Under Brazilian data protection law, you have the right to:

• Confirm whether we process your personal data
• Access your personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymisation, blocking, or deletion of unnecessary data
• Request data portability to another service provider
• Revoke consent at any time
• File a complaint with the Autoridade Nacional de Proteção de Dados (ANPD)

California — CCPA

California residents have the right to:

• Know what personal information we collect and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising CCPA rights

To exercise any of these rights, use the Delete Accountoption in the app's Settings screen, or contact us at auvorix@gmail.com. We will respond to verified requests within 30 days.

9. Account Deletion

You may delete your account at any time directly from within the application:

If you are unable to access the app, you may request account deletion by emailing us at auvorix@gmail.com from the email address associated with your account. We will complete the deletion within 30 days.

10. Children's Privacy

Our applications are not directed to children under the age of 13 (or under 16 where required by applicable law, including GDPR). We do not knowingly collect personal information from children below these age thresholds. If you believe that a child has provided us with personal information without verifiable parental consent, please contact us immediately at auvorix@gmail.com and we will take prompt steps to delete such information.

11. Cookies and Tracking

Our mobile applications do not use browser cookies. We do not deploy third-party advertising SDKs, cross-app tracking technologies, or behavioural analytics platforms. Any analytics performed by Auvorix are strictly based on aggregated, anonymised in-app event data that cannot be linked back to individual users.

12. International Data Transfers

Your data may be processed and stored in data centres located outside your country of residence (for example, in the European Union for Irish apps, or in Brazil for Brazilian apps). When data is transferred internationally, we ensure that appropriate safeguards are in place, including reliance on Microsoft Azure's compliance frameworks (including Standard Contractual Clauses where applicable under GDPR).

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via an in-app notification or by updating the “Last Updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of the application after a policy update constitutes your acceptance of the revised policy.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We are committed to resolving your concerns promptly and in a transparent manner. All requests will be acknowledged within 5 business days and resolved within 30 days.