Your privacy matters. This policy explains how we collect, use, and protect your data.
1. Data Controller
Aureal Labs LLC is the data controller responsible for your information under applicable privacy laws.
We comply with:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Other applicable regional privacy laws
2. Information We Collect
We collect only the minimum data necessary to operate Aureal:
Account Data
- Display name and email
- Subscription tier
- App preferences
Device Data
- Device model and OS version
- App version
- Crash logs and diagnostics
Location Data
- GPS coordinates during hunts (path tracking, find marking)
- Current location for weather and nearby sites
- Never shared publicly or sold
- Can be disabled in device settings
Usage Data
- Anonymized metrics (hunts, finds, badges)
- AI interaction logs
- Feature usage patterns
Media Data
- Photos uploaded for finds or overlays
- Feedback attachments (optional)
3. How We Use Your Data
We process data for these lawful purposes:
- Provide Services — Core app functionality
- Personalization — Remember your preferences
- Improvement — Bug fixes and performance
- Analytics — Aggregate trend analysis
- Communication — Service notices and updates
- Legal Compliance — Tax, audit, or safety requirements
We never sell your personal data to third parties.
4. Legal Bases (GDPR)
Our data processing is based on:
- Contractual Necessity — Processing essential to deliver Aureal's core services
- Legitimate Interests — Improving, securing, and maintaining the app
- Consent — Optional features (analytics, photos, location) require opt-in
- Legal Obligation — Retaining records required by law
5. Data Sharing
We do NOT sell, rent, or trade your personal information.
Data is shared only with trusted service providers:
- Firebase / Google Cloud — Hosting and authentication
- Sentry — Error reporting and crash analytics
- OpenAI — AI features (find enrichment, overlay analysis)
- RevenueCat — Subscription management
All partners are contractually bound by confidentiality and data protection agreements (GDPR Article 28).
6. International Transfers
Data may be processed in the United States or other jurisdictions.
For transfers outside the EEA/UK, we rely on:
- EU adequacy decisions
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements
7. Data Retention
We retain data only as long as necessary to provide the Service or comply with legal obligations.
Typical retention periods:
- Account data — Until account deletion
- Hunt history — Until you delete it
- Crash logs — 90 days
- Analytics — 24 months (anonymized)
Request deletion: privacy@aureallabs.com
8. Your Rights
Under GDPR and CCPA, you have the right to:
- Access — Request a copy of your data
- Correction — Update inaccurate information
- Deletion — Request permanent erasure ("Right to Be Forgotten")
- Portability — Export your data in a portable format
- Restriction — Limit how we process your data
- Objection — Object to specific processing
- Withdraw Consent — Opt out anytime for optional features
We will verify your identity before processing any request.
Exercise your rights: privacy@aureallabs.com
9. Cookies & Local Storage
Aureal does NOT use tracking cookies.
Local storage is limited to:
- Anonymous usage metrics
- User preferences
- Offline hunt data
- Cached map tiles
You can clear local data anytime in Settings → Data & Privacy.
10. Security
We protect your data using:
- Encryption — Data in transit and at rest
- Secure Authentication — Firebase Auth with secure tokens
- Access Controls — Limited employee access
- Regular Audits — Security reviews and updates
No system is 100% secure. You use the Service at your own risk.
11. Children's Privacy
Aureal is not intended for users under 16.
We do not knowingly collect data from minors. If we discover data from a child under 16, we will promptly delete it.
Report underage account: privacy@aureallabs.com
12. AI & Third-Party Services
Aureal uses AI for:
- Find enrichment and identification
- Overlay analysis and suggestions
- RFN reporting guidance
AI queries may be processed by OpenAI. We do not share personally identifiable information with AI providers—only anonymized find descriptions and images.
AI responses are informational only and do not constitute professional advice.
13. Policy Updates
We may update this Privacy Policy periodically. For significant changes, we will:
- Post a notice in the app
- Update the "Last Updated" date
- Send email notification (for material changes)
Continued use of Aureal constitutes acceptance of the updated policy.
14. Contact Us
Aureal Labs LLC
Alachua County, Florida, USA
Privacy: privacy@aureallabs.com
Legal: legal@aureallabs.com
Web: www.aureallabs.com
EU/UK users may contact our data protection representative at euprivacy@aureallabs.com.