Privacy Policy
Last updated: 2026-06-11 · v1.0
Averon ("we", "us") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, your rights, and how to contact us. It applies to the Averon website, web dashboard, mobile applications (iOS and Android), and related services (collectively, the "Services"). By using the Services, you agree to the practices described here.
1. Data Controller
Averon is the data controller responsible for processing your personal information. For any privacy question, contact privacy@averonapp.com.
2. Information You Provide
Account data: name, email, password (hashed), profile photo. Profile and content: posts, comments, course progress, messages, tickets, ratings. Payment data: handled by Stripe; we receive only non-sensitive metadata (last 4 digits, brand, status). We never store full card numbers.
3. Information Collected Automatically
Device data: model, OS, language, time zone, app version, unique device identifiers. Usage data: pages viewed, features used, session duration, crash logs. Network data: IP address, approximate location derived from IP, connection type. Cookies and similar technologies: session cookies, authentication tokens, and limited analytics identifiers.
4. Push Notifications
If you opt in, we collect a device push token (APNs / FCM) to deliver notifications. You can disable notifications at any time in your device settings.
5. How We Use Your Information
Operate, maintain, and secure the Services. Authenticate you and prevent fraud or abuse. Process transactions, deliver purchases, and manage subscriptions. Send transactional emails (password reset, account changes, receipts) and, with your consent, product updates. Personalize content, recommendations, and learning paths. Measure usage to improve features, reliability and performance. Comply with legal obligations and enforce our Terms.
6. Legal Bases (GDPR / LGPD)
We process your data based on: (a) performance of the contract with you; (b) your consent (e.g. marketing emails, push notifications); (c) our legitimate interests (security, fraud prevention, product improvement); and (d) compliance with legal obligations.
7. Sharing and Disclosure
We do NOT sell your personal data. We share data only with: • Service providers (sub-processors): hosting (Supabase, Cloudflare), payments (Stripe), email (Mailgun / SMTP providers), push notifications (Firebase Cloud Messaging / APNs), analytics, customer support tooling — all under contractual data-processing agreements. • Legal authorities when required by law, court order or to protect rights, safety or property. • Successors in a merger, acquisition or asset sale, with notice to you.
8. International Transfers
Your data may be processed in countries other than your own (including the United States and the European Union). Where required, we rely on Standard Contractual Clauses and equivalent safeguards.
9. Data Retention
Account data: kept while your account is active and up to 12 months after deletion to comply with legal and accounting obligations. Transaction records: kept up to 5 years (tax requirements). Support tickets and logs: 12 months. Analytics: aggregated, not personally identifiable, retained indefinitely.
10. Security
We protect your data with encryption in transit (TLS 1.2+), encryption at rest, hashed passwords, row-level security on databases, least-privilege access controls, and continuous monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11. Your Rights
Depending on your jurisdiction (GDPR, LGPD, CCPA and similar), you have the right to: access your data, rectify inaccuracies, erase your data, restrict or object to processing, data portability, withdraw consent, and lodge a complaint with your local data protection authority. To exercise these rights, contact privacy@averonapp.com. We respond within 30 days.
12. Children's Privacy
The Services are not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
13. Third-Party Services
The Services may link to or integrate with third parties (Stripe, Firebase, video providers). Their privacy practices are governed by their own policies — review them carefully.
14. Account Deletion
You can delete your account from within the app at any time, or by writing to privacy@averonapp.com. Deletion removes your personal profile and content within 30 days, except where retention is required by law.
15. Changes to this Policy
We may update this Policy. Material changes will be communicated by email or in-app notice at least 15 days before they take effect. The 'Last updated' date above always reflects the most recent version.
16. Contact
Privacy inquiries: privacy@averonapp.com General support: suporte@averonapp.com Website: https://averonapp.com