Privacy Policy

• Account information — your email address, sign-in identifiers and basic profile settings, managed through our authentication provider.
• Your study material — files you upload (PDFs, documents, presentations, photos and scans), text you paste or type, and text extracted from them.
• Generated content — Focused Notes, questions, summaries, interactions and other study material Aurevia creates for you, plus the prompts and results needed to produce them.
• Google connection data — if you connect Google Docs, an authorization token from Google and the IDs and links of the Google Docs Aurevia creates for you.
• Billing information — your plan, subscription and payment status, purchase history, receipts and Stripe customer ID. Card details are entered into Stripe’s secure fields and are handled by Stripe; Aurevia does not receive or store full card numbers or security codes.
• Usage and service information — records such as daily feature usage (to apply plan limits), billing and checkout events, and technical information our servers and providers process to deliver and secure the service.

• To provide Aurevia: import your material, generate and store Focused Notes, run study features, and export or sync where you ask.
• To authenticate you and keep your account secure.
• To process payments and manage subscriptions and passes.
• To apply plan limits and prevent abuse, fraud and security incidents.
• To respond to support requests and send service messages (such as account or billing emails).
• To understand optional pricing and upgrade events only after opt-in, while maintaining necessary security, billing and usage-limit records.

To generate notes and answer questions, Aurevia sends the relevant text (and, for photos or scans, the image content) to AI providers: Groq or other enabled, permitted processors, potentially including Cerebras, Cloudflare Workers AI, OpenAI or Google Gemini according to the server routing configuration. Provider terms, retention and eligibility must be reviewed by the operator; a configured API key does not itself establish compliance. Availability depends on configured providers and their service limits. Providers process this content to return results to Aurevia under their own terms and data policies.

Approved examples and preferences can guide future notes. Learning from deliberate edits and sending bounded rewrite excerpts to AI each require a separate opt-in in Preferences. Rewrite batches contain at most three before/after excerpts of up to 220 characters each; derived preferences are saved. This is not a keystroke recorder. Necessary AI request receipts may temporarily retain generated results, as described under retention.

If a request fails, automatic fallback can send relevant content to another configured AI provider. Provider retention is not always zero. Google distinguishes paid and unpaid Gemini processing; unpaid processing may use inputs and outputs to improve its products and allow human review. Do not submit personal, sensitive or confidential information to unpaid processing. See Google’s terms and Groq’s data controls.

Please avoid uploading sensitive personal information (for example, health or financial details) that isn’t needed for your studies.

Connecting Google Docs is optional. If you connect, Aurevia requests one Google permission: “See, edit, create, and delete only the specific Google Drive files you use with this app” (drive.file). This does not give Aurevia access to the rest of your Google Drive.

We use this access only to create Google Docs from your Focused Notes, update those same Docs when you sync, and open them for you. Aurevia does not use Google user data for advertising, does not sell it, and does not use it to train AI models.

You can disconnect at any time from your Google Account’s third-party access settings. Docs already created stay in your Google Drive and are yours.

Aurevia’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We share information only with providers that help us run Aurevia, and only as needed for their role:

• Supabase — authentication and database (accounts, billing records, usage records).
• Cloudflare R2 — storage for uploaded files.
• Groq and other enabled, permitted providers (potentially Cerebras, Cloudflare Workers AI, OpenAI or Gemini) — AI processing. Disabled providers do not receive AI requests.
• Google — Google Docs integration when you connect it.
• Stripe — payments, subscriptions and receipts.
• Our hosting and email delivery providers — to serve the app and send service emails.

We may also disclose information if required by law, to protect people’s safety or rights, or as part of a business transfer, in which case this policy will continue to apply to your information.

Aurevia saves parts of your workspace — such as your notes library, drafts and preferences — in your browser’s local storage so the app works quickly and keeps your work between visits. Clearing your browser data may remove notes stored this way. See our Cookie & Tracking Policy.

We keep information for as long as your account is active or as needed to provide Aurevia, and longer only where required for legal, tax, accounting, security or fraud-prevention reasons (for example, payment records). Detailed retention schedules, backup handling and verified deletion procedures are being finalized before launch. AI request receipts may temporarily contain generated results; turning off personalization does not itself delete existing examples or learned records.

You can edit or delete notes in the app, disconnect Google at any time, and manage or cancel your subscription from Billing. You can ask us to access, correct, export or delete your personal information, or to delete your account, by contacting our contact email (being finalized before launch — until then, reach us from inside the Aurevia app). We may need to verify your identity. Depending on where you live, you may have additional rights under local law.

We use reasonable safeguards, including encrypted connections (HTTPS), access controls, and payment fields hosted by Stripe. No online service can guarantee perfect security, so please use a strong, unique password.

Aurevia is intended for students 18 and older. Individuals under 18 may not use the service. If you believe someone under 18 has created an account, contact our contact email (being finalized before launch — until then, reach us from inside the Aurevia app) so we can review the account and address access and personal information appropriately.

We’ll update this policy as Aurevia changes — for example, if we add analytics or advertising — and will notify you of significant changes in the app or by email.

Privacy questions or requests: our contact email (being finalized before launch — until then, reach us from inside the Aurevia app).