Privacy Policy
Last Updated: October 3, 2026
AURUM (the “App”) respects your privacy. This Privacy Policy explains what information the App handles, why it is used, and how you can manage it.
The App handles the following information to provide its features, maintain security, and understand app use.
- Information: Device identifiers used for authentication or app services, device model, and OS version.
- Purposes: User authentication, service security, fraud prevention, app operation, and diagnostics.
1-2. User Content
- Information: Text and images/photos submitted in Chat; related conversation text selected to create a problem set; and Study images selected by the user, text extracted from those images, generated Study materials/cards, and review state.
- AI processing purposes: AI answer generation, image recognition/OCR, extraction of learning targets, generation of Study review cards or problem sets, and provision of the requested features.
- Other purposes: Security and abuse prevention, and investigation of service failures.
- Local storage: Chat history, selected Study images, extracted source material, generated Study material, and review state are stored in the App’s local storage on your device. AI requests send only the content needed for the action you choose.
1-3. Usage Data and Diagnostics
- Information: App screen views and interactions, app usage events, crash logs, and diagnostic information.
- Purposes: App functionality and usability improvement, reliability, security, crash analysis, and marketing or advertising analysis.
- Information: Subscription status, purchase history, transaction or receipt information, and an app-user identifier used by the billing service.
- Purpose: Providing premium features and managing purchases and subscriptions.
2. Third-Party Services and Data Transfers
The App uses the service providers below to operate its features. They process information under their applicable terms and privacy policies.
2-1. OpenAI API (OpenAI, L.L.C.)
- Data sent: Submitted Chat text and images/photos; selected conversation text used to create a problem set; and, for Study, a selected image and text extracted from it.
- Purpose: AI answer generation, image/OCR processing, learning-target extraction, and generation of Study review cards or problem sets.
- Retention and training: OpenAI’s standard API policy currently states that abuse-monitoring logs may contain customer content and may be retained for up to 30 days, unless a longer retention is legally required. Provider policies and available controls may change. API data is not used to train OpenAI models unless the API account explicitly opts in.
- OpenAI API data controls · OpenAI Privacy Policy
2-2. Cloudflare Workers (Cloudflare, Inc.)
- Data processed: AI request content and request information, including the network address needed to receive a request. The App sends a Firebase authentication token to the Worker for request authentication.
- Purpose: AURUM’s backend routing to the OpenAI API and security checks.
- Retention: AURUM’s Worker does not intentionally persist AI request content after processing. Cloudflare infrastructure may create transient logs; this is not a claim that no infrastructure logs exist.
- Cloudflare Privacy Policy
2-3. Google Firebase and Google Analytics 4 (Google LLC)
- Data processed: Authentication identifiers, app usage events, device information, and diagnostics as applicable.
- Purpose: Authentication, analytics, security, and service reliability.
- Google Privacy Policy
2-4. Google AdMob (Google LLC)
- Data processed: Advertising or device identifiers and ad request information, as applicable to your device settings and the ad SDK.
- Purpose: Displaying and measuring advertisements. The App requests non-personalized ads in its ad requests; iOS may also request App Tracking Transparency permission.
- Google Advertising Privacy & Terms
2-5. RevenueCat (RevenueCat, Inc.) and App Stores
- Data processed: Purchase information, subscription status, and the app-user identifier used for billing.
- Purpose: Processing purchases and managing subscriptions.
- RevenueCat Privacy Policy
3. Data Storage and Security
3-1. Storage Location
Chat history, selected Study images, extracted source material, generated Study cards/material, and review state are stored locally on your device. The App’s AI backend does not intentionally persist AI request content after processing. OpenAI and infrastructure providers may retain information as described above and under their applicable policies.
3-2. Security
AI requests are sent over HTTPS/TLS. The App and its service providers use security measures appropriate to their roles and applicable policies.
4. Your Choices and Rights
4-1. Local Data Deletion
Use the App’s available delete actions to remove individual Chat or Study content. Uninstalling the App removes its local data from the device, subject to the operating system’s backup and storage behavior. Deleting local data does not delete content that a third-party provider may retain under its security, abuse-monitoring, or legal obligations.
4-2. AI Consent and Withdrawal
Before the first AI request, the App asks whether you allow the described processing. You can change this decision at any time in AI Data Settings in Study or Billing. Revoking permission blocks new Chat, Study, and problem-set AI network requests until you allow processing again. Revocation does not delete existing local Chat or Study data, and offline Study review remains available. It does not retroactively delete information a third-party provider retains under its applicable security, abuse-monitoring, or legal obligations.
4-3. Advertising Choices
You can manage advertising and tracking permissions in your device settings. The App’s AI content is used for the feature you request and is not used for ad tracking.
5. Children’s Privacy
The App is intended for educational use and is not specifically directed to children under 13. Parents and guardians should supervise children’s use of the App and device settings.
6. Changes to This Privacy Policy
This policy may be updated to reflect legal or service changes. Significant changes will be notified in the App or on this page.
If you have questions about this Privacy Policy or our data practices, contact us at:
Contact: eerf0309+aurum@gmail.com
← Back to Support