Privacy Policy

Last updated: April 18, 2026

1. Introduction

AuraEON ("we", "our", "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. AuraEON is part of the Pollo Assistance ecosystem and shares infrastructure with the main Pollo Assistance product.

2. Information We Collect

Data Type	Purpose	Retention
Email address	Account creation, authentication, security alerts	Until account deletion
Name / display name	Personalisation and classroom identification	Until account deletion
Chat messages (AURA)	Providing AI responses and chat history	Until chat or account deletion
Classroom and student data (entered by educators)	Group management, sociograms, dynamics analysis	Until classroom or account deletion
Device fingerprint	New-device login alerts and anti-fraud	Until device removed or account deletion
Approximate IP location	Login alerts ("unusual location")	Not stored long-term; only referenced in alert emails
Usage data	Service improvement and message limits	Aggregated, anonymised
Authentication tokens	Secure session management	Session duration

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Process your AURA AI requests and deliver responses
Store your classrooms, sociograms, and chat history
Manage your account and subscription
Send transactional emails (verify email, password reset, new-device alerts)
Enforce our Terms of Service and prevent abuse
Improve and optimise the Service

4. Third-Party Services

We use the following third-party services to operate the platform:

Firebase (Google): Authentication, database, and hosting. Subject to Google's Privacy Policy.
Groq API (via Pollo Palos modificado): AI model inference. Your messages are sent to Groq servers to generate AI responses. Subject to Groq's Privacy Policy.
Cloudflare Workers: Proxy layer for AI requests and transactional emails.
ZeptoMail (Zoho): Transactional email delivery (verify email, password reset, login alerts).
IONOS: Domain and mailbox hosting for @auraeon.es addresses.
ipapi.co: Approximate IP geolocation for login alerts only (no long-term storage).

We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing purposes.

5. Data Storage and Security

Your data is stored using Firebase/Google Cloud infrastructure with industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)
Firebase Authentication for secure access
Firestore security rules limiting data access to authorised users
Per-device authorisation tracking with new-device email alerts
Service account credentials kept server-side only
Regular security reviews

6. Content Moderation and Support

To maintain service quality and safety, some chat conversations (AURA and support chats) may be reviewed by our moderation team. Moderators can only access chat content when necessary to:

Investigate reported content or abuse
Ensure compliance with our Terms of Service
Provide direct user support when requested (in-app support chat or via email)

When a support agent takes over your support chat, the AI icon is replaced with a phone icon so you are clearly informed a human is answering.

7. Minors and Educational Context

AuraEON is designed for secondary education (ages 12-16). Individual student data entered by educators is processed on the educator's instruction and under the educational institution's responsibility. AuraEON:

Does not collect personal data directly from minors
Does not profile minors for advertising
Educators/institutions are the data controller for classroom/student data
Students under 14 require parental / institutional consent per Spanish LOPDGDD

8. Your Rights (GDPR / LOPDGDD Compliance)

If you are located in the European Economic Area or Spain, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data and account
Right to Data Portability: Request your data in a machine-readable format
Right to Restrict Processing: Request limitation of how we use your data
Right to Object: Object to processing of your personal data

To exercise any of these rights, please contact us at the email address below.

9. Cookies and Local Storage

We use browser local storage to save your preferences (theme, language, classroom state). We do not use tracking cookies or third-party analytics cookies. Firebase Authentication uses essential cookies for session management.

10. Data Retention

We retain your data for as long as your account is active. You can delete individual classrooms, chats, or your entire account at any time. Upon account deletion, all associated data is permanently removed within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or concerns:

Email: support@auraeon.es