Privacy Policy

1. Overview and Scope

This Privacy Policy explains how Aufi Studio ("Aufi", "we", "us", or "our") collects, uses, protects, and discloses personal information through:

• The Aufi mobile applications for Android and iOS;
• The Aufi browser extension for Google Chrome;
• The website located at https://aufi.io.

Aufi offers both a free plan and paid Premium subscriptions. We believe your reading habits, documents, and personal library belong solely to you. We design our architecture to process reading content client-side whenever possible and to avoid storing your personal books on central servers.

2. Information We Collect

1. Account Information: When you sign in with Google Sign-In or Apple Sign-In, we receive your account identifier (UID) and email address. This is used solely to authenticate your account, verify your subscription status, and display your active profile in the app.
2. Subscription and Purchase Data: If you purchase a Premium subscription, payment transactions are processed securely by Google Play or the Apple App Store. We receive transaction confirmation tokens and subscription validity status (e.g., active, expiration date) to grant access to premium features. We do not store or process payment card numbers.
3. Technical Diagnostics and Crash Analytics: We use Firebase Analytics, Firebase Crashlytics, and Sentry to collect anonymous technical telemetry, such as app crash logs, device model, operating system version, and performance diagnostics (e.g., audio playback latency). This data is aggregated and used exclusively to debug errors and optimize playback stability.
4. Ephemeral AI Translation and Rewriting: If you choose to enable automated translation or rewriting, the text of the chapter you are currently reading is sent securely via TLS to third-party AI APIs (Google Translate API or Google Gemini API using your chosen key). This text is processed ephemerally to produce the translated output and is not permanently retained by Aufi.

3. Google Account and Google Drive Data (Cross-Device Sync)

When you enable the optional "Sync across devices" feature, Aufi requests access to your Google account with the following restricted Google OAuth scope:

We take data minimization very seriously. Please review how this permission works:

• Restricted Scope of Access: The drive.appdata scope grants Aufi access only to a hidden, private folder created specifically for Aufi within your personal Google Drive account. Aufi cannot see, access, read, modify, or delete any of your existing personal files, documents, photos, or spreadsheets stored in Google Drive.
• What Is Stored in Your Drive Folder: Sync stores your reading state, including Story Memory (character names and phonetic replacements), metadata of imported books and documents in your Library, reading progress (current chapter, audio playback position), and technical sync timestamps. Audio files are never synced or uploaded to Google Drive.
• Direct, Encrypted Transfer: Synced data travels directly between your device and Google Drive servers over an encrypted TLS connection. Aufi does not copy, duplicate, or maintain your library or reading history on our own servers.
• Zero Commercial Exploitation: Aufi does not sell, rent, monetize, or share your Google Drive data with any third party. Your data is never used for targeted advertising, credit assessment, or training machine learning / artificial intelligence models.
• Google API Services User Data Policy Adherence:
  Aufi's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention and Deletion

• On-Device Local Data: Reading history, downloaded chapters, and local settings remain on your physical device until you delete them within the app, clear app data, or uninstall the application.
• Google Drive Sync Data: Synced files remain in your personal Google Drive hidden app data folder under your control. Listening history older than 30 days is pruned automatically. You can delete all sync data at any time by:
  1. Opening Aufi and tapping Profile → Sync across devices → Delete sync data; or
  2. Opening Google Drive on the web → Settings → Manage Apps → Aufi → Delete hidden app data; or
  3. Revoking Aufi's permissions at myaccount.google.com/permissions.
• Account Deletion Request: You can delete your Aufi account at any time directly in the mobile app by navigating to Profile → Delete account. Alternatively, you can submit an account deletion request by emailing [email protected] with the subject line "Account Deletion Request". Upon verification, your account record and associated credentials will be permanently purged from our backend database within 30 days.

5. Third-Party Service Providers

To deliver the Services, we integrate with trusted third-party service providers that process data strictly in compliance with privacy regulations:

• Google Play Services & Apple App Store: In-app purchase processing and authentication.
• Firebase (Google LLC): Analytics, crash diagnostics, and remote configuration.
• Sentry (Functional Software, Inc.): Native crash tracking and exception reporting.
• Google Drive API: Cross-device user data synchronization (under user authorization).

6. Security Measures

We employ industry-standard technical and organizational security measures to protect your information, including end-to-end encryption in transit (HTTPS / TLS 1.3), restricted API access keys, and sandboxed storage architectures.

7. Children's Privacy

The Services are not directed to individuals under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without parental consent, we will take immediate steps to delete such information.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements, legal requirements, or changes in our data practices. When significant modifications occur, we will update the "Last Updated" date at the top and, where required by law or app platform guidelines, prompt you to review and accept the revised policy inside the application.

9. Contact Us

If you have any questions, inquiries, or privacy requests regarding this Privacy Policy, please reach out to us:

Aufi Studio
Email: [email protected]
Website: https://aufi.io