Draft — under legal review.

Privacy Policy

Effective 2026-09-01 · Avelora Studios

Who is responsible

Avelora Studios is the controller of the personal data described here. Reach us at support@avelora.world. We operate from the United States, and the data described below is processed there.

What we collect

• Installation identifiers. A random installation id and the secret the app uses to prove it is that installation, your platform, app and OS version, device time zone and, if you opt in, a push token. These identify a copy of the app rather than a person, and we use them to run the service and send notifications.
• A pseudonymous reader id and your preferences. Lane, tropes and settings. Created on first launch without any personal detail. It is not anonymous: it is a lasting id that your activity is linked to.
• Account identifiers, only if you sign in. The subject identifier your provider returns and a display name if the provider supplies one. We do not store the email address that Apple or Google sign-in makes available to us.
• Reading activity. Progress, activity days, streaks, lists, in-story message state and reports.
• Purchases. Records of your subscription and the store’s receipts and status notifications behind it.
• Product analytics. Pseudonymous event data keyed to your reader id. No advertising identifiers, and no tracking across other companies’ apps or sites.
• Messages you send us. If you use the web deletion form or contact support, we keep the email address or other contact detail you give us and what you wrote, so that we can verify the request and answer it.
• Request logs. Cloudflare records IP addresses for security.

Why we may use it

• To provide the app you asked for: reading, listening, progress, Sparks and subscriptions. This is necessary to perform our agreement with you.
• To keep the service secure and prevent fraud and abuse, and to keep the purchase records we need for refunds and tax. This rests on our legitimate interests and, for the tax records, on our legal obligations.
• Notifications and product analytics, where these are optional and rest on your consent. You can turn notifications off at any time, and withdrawing consent does not affect what we did before you withdrew it.

Only the first of these is needed to use Avelora. Signing in, notifications and analytics are separate choices, and the app works without them.

How long we keep it

• Installation records: deleted 24 months after last use.
• Reader id and preferences: until you delete your account, or 24 months of inactivity.
• Activity sessions: 90 days. Reports: 1 year.
• Purchase and subscription records: 5 years, retained pseudonymously after deletion for refund, fraud and tax reconciliation.
• Product analytics: 1 year.
• Request logs: 7 days. Deletion requests: 90 days after handling.

Who we share it with

Apple and Google (purchases and sign-in), Cloudflare (hosting, security and checking the deletion form), PostHog (product analytics) and Expo (delivering the notifications you opted in to). They act for us and must protect your data consistently with this policy; Apple and Google also handle purchases and sign-in under their own policies. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not track you across other companies’ apps or websites.

Your rights and choices

Notifications are opt-in and can be turned off in the app or in system settings. You can delete your account and its data at any time in Profile → Account → Delete Account, or at staging.avelora.world/account/delete, which also works if you no longer have the app. Deletion is subject to the purchase records described above, which we keep pseudonymously.

Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent you gave. Ask us at support@avelora.world and we will answer within the time the law allows. If you are in the EEA or the UK and you think we have got it wrong, you can complain to your national data protection authority or, in the UK, to the Information Commissioner’s Office.

Deleting your Avelora account does not cancel your subscription. Cancel that separately in your Apple subscription settings.

Children

Avelora is rated 13+ / Teen and is not directed to children under 13. We do not knowingly collect data from them, and if you believe a child has given us data, tell us and we will delete it.

Changes to this policy

If we change this policy we will post the new version here with a new effective date, and for significant changes we will tell you in the app before they take effect.

Contact

support@avelora.world · Avelora Studios