Privacy · Aurea

This policy explains what Aurea collects, why, and who else sees it. We ask for as little as the service needs.

• What we collect
  Your email address and password hash; the profile you fill in (name, goals, languages, preferences); text transcripts of sessions and their summaries; progress, achievements and referral data; technical logs such as IP address, browser type, timestamps and error reports.
• Voice is not recorded
  Speech is processed in real time to hear you and answer, and is not stored on our servers. What remains after a session is its text transcript.
• Why we process it
  To create your account and let you sign in; to hold conversations and keep their history; to adapt lessons, readings and practices to you; to keep the service secure and to fix faults.
• Legal grounds
  Performing our contract with you (running the service), your consent (where asked), and our legitimate interest in keeping the service safe and working.
• Who else processes your data
  AI and infrastructure providers that make the conversation possible: Anthropic and Google (language and voice models), OpenRouter (model routing), LiveKit (real-time audio and video), Simli (animated avatar), and our error-tracking system. They act on our instructions and may not use your data for their own purposes.
• Where data is stored
  On our server in the United Kingdom. Providers listed above may process data in other countries, including the United States, under the safeguards their contracts require.
• How long we keep it
  While your account exists. After you delete your account we erase your data within 30 days, apart from what the law requires us to keep. Technical logs are kept for up to 90 days.
• Your rights
  You can access, correct, export or delete your data, object to processing, and withdraw consent. Write to support@aureabot.space; we reply within 30 days. You may also complain to your data protection authority.
• Cookies
  We use one cookie to keep you signed in, and local browser storage for your language, interface settings and a random visit identifier. That identifier is not tied to your identity, is shared with nobody, and lets us see which pages help and where people leave. There is no advertising and no third-party tracking: not a single external analytics script runs on our pages. We erase those records after 180 days.
• Children
  Aurea is not intended for people under 16. If we learn that such an account exists, we delete it.
• Security
  Traffic runs over HTTPS, passwords are stored only as hashes, and access to the database is restricted. No system is perfectly safe, so please do not share in a session anything you would not want stored.
• Changes
  We may update this policy and will announce significant changes in the service.

Last updated: 16 August 2026

Questions: support@aureabot.space

Terms · Privacy · Offer