Privacy policy

Last updated:

This is a translation. The French version is the reference text.

This page explains what data the Aura mobile app collects, what it is used for, who can see it and how you stay in control of it. It applies to the Aura app and to this website.

1. Who is responsible for your data?

Aura is published by Odrey Mvula, an independent developer based in Kinshasa (Democratic Republic of the Congo), referred to below as “the publisher”. The publisher is the controller of your data.

Contact: assistance@odrey.dev

2. Data we collect

Your account data

  • your email address;
  • your password, stored in hashed form by the authentication service: the publisher can never read it;
  • your full name;
  • your student ID;
  • your class year (L1, L2 or L3);
  • your profile photo, if you choose to add one (optional);
  • your preferences (theme, notifications);
  • a personal code used for your profile QR code.

Content you create

  • your messages in group chats and private conversations;
  • your comments and likes on announcements;
  • if you are a class representative: the announcements and course files you publish.

Technical data

  • your device's push notification token, only once push notifications are enabled in the app;
  • technical connection logs kept by the database provider (IP address, dates).

3. Who can see what?

  • Your name, photo, class year and role badge are visible to other signed-in Aura students.
  • Your student ID can also be viewed by other signed-in students.
  • Messages in a group are visible to the members of that group.
  • A private conversation is visible only to its two participants.
  • Aura super administrators can view groups, but never private conversations.

4. What is your data used for?

Your data is used only to:

  • run the app and provide its services;
  • authenticate you when you sign in;
  • show content to the right class year;
  • email you a password reset code when you request one;
  • send you notifications.

Aura shows no advertising. The publisher never sells or rents your data, does no profiling and does no advertising tracking.

5. Service providers

To run Aura, the publisher relies on the following providers, who process data on its behalf:

  • Supabase: database, authentication and file storage. Data is hosted in the European Union (Ireland).
  • Resend: sending emails containing codes, from the odrey.site domain.
  • Google Firebase Cloud Messaging and Expo: delivering push notifications, once they are enabled.

6. How long is your data kept?

Your data is kept for as long as your account exists. You can ask for it to be deleted at any time by deleting your account (see the next section and the account deletion page).

7. What happens when you delete your account

What is permanently deleted

  • your sign-in account (email address and password);
  • your profile: full name, student ID, class year, preferences and the personal code used for your profile QR code;
  • your profile photo;
  • your group memberships;
  • your comments and likes on announcements;
  • your notifications;
  • your friend requests;
  • your class year change requests;
  • your class representative rank, if you have one;
  • the private conversations you take part in, with all their messages.

What is kept anonymously

  • messages you posted in groups and class year channels;
  • announcements you published;
  • course resources you published.

These items stay visible to other members so that group discussions and class resources are not broken. Their author is then shown as “Deleted account”: they are no longer linked to you or to any account.

8. Your rights

At any time, you can:

  • access your data;
  • correct it: you can change your name directly in the app, from the Profile tab;
  • delete it, from the app or from the account deletion page of this website;
  • file a complaint with the publisher or with the competent data protection authority.

To exercise these rights, email assistance@odrey.dev, preferably from your account's email address. The publisher replies within 30 days.

9. Who is Aura for?

Aura is intended for students in higher education. The app is not intended for children under 13.

10. Security

Traffic between the app and the servers is encrypted (HTTPS). Access to data is restricted by row-level access rules in the database, and passwords are hashed. As no system is perfectly secure, the publisher cannot guarantee absolute security.

11. This website

This website uses no cookies, no trackers and no analytics, and stores nothing in your browser. If you use the form on the account deletion page, your email address and password are sent directly to Supabase to verify your identity, and are forgotten as soon as you leave the page.

12. Changes to this policy

This policy may change, for example when new features are added to Aura. The date of the last update is shown at the top of this page, so please check it from time to time.

13. Contact

For any question about this policy or your data: assistance@odrey.dev.