Privacy Policy

Last updated: 18 October 2026 · Public beta

Aurevin is in public beta. This page explains what we collect, why, and what you can ask us to do with it. It is written in plain language. If something is unclear, email us.

What we collect

Account: your email address and a password. The password is handled by our authentication provider, Supabase, and we never see it in plain text.

Your content: the inventory, recipes, suppliers and orders you enter, tied to your account.

Anonymous usage counts: while you are signed in, the app adds one to a daily total each time a feature is used (for example "recipe added" or "inventory exported"), and once per visit whether your screen is narrow or wide. A total holds only the day, the feature name and a number: never your name, email, account, device, IP address or anything you typed, so it cannot be traced back to you. We use the totals to decide what to improve. You can switch this off in Settings. Guests are not counted.

Payments: when paid plans start, payments are handled by our payment provider. We receive your plan, billing status and dates. We never see or store your full card number.

Guests: if you browse as a guest, nothing is saved on our servers. The example data you see is held in your own browser.

In your browser: we keep your sign-in session and your display choices (theme, units, selected business) in your browser's storage so the app works. We don't use tracking cookies.

What we use it for

To run the app, keep you signed in, and send the emails that go with your account, such as confirming your email address, resetting your password, and notices about your subscription. We don't send marketing email.

Why we may use it (legal bases)

To create and run your account and give you the service you asked for (performing our contract with you). To keep the service secure and working (our legitimate interest in running a safe service). To keep invoices and tax records (a legal obligation, once paid plans start). You need to give us an email address and a password to have an account.

What we don't do

We don't use advertising or tracking scripts, and we don't sell your data. Your content is visible only to you: no other account can see it.

Who handles your data

We use a small number of providers to run Aurevin. They process data only to provide those services to us:

Supabase: database and sign-in (your account, your content, and for now the account emails).
Netlify: hosting the website (sees technical data such as your IP address when you load a page).
Resend: sending account emails from our own address, if and when we start using it.
Proton Mail: our support mailbox, for messages you send us (once set up).
A payment provider, chosen before paid plans start: payments and billing (not in use today).
Namecheap: our domain name (no user data).

We will update this list when it changes. Everything the app needs to load comes from our own domain, not from third-party networks.

Other people's details

If you enter details of other people, such as supplier contacts or staff, you are responsible for having a lawful reason to do so. We process that data on your behalf, only to run Aurevin for you (see the Terms).

Where data is processed

Some of our providers may process data outside the European Economic Area, for example in the United States. When they do, we rely on the protections the law allows for such transfers, such as the EU-US Data Privacy Framework or standard contractual clauses.

Age

Aurevin is for people aged 18 and over.

How long we keep it

We keep your data while your account exists. When you delete your account in Settings, your account and all your data are deleted straight away. Backups may keep a copy for a short period afterwards. Invoices and accounting records we are required to keep by law are kept for the period the law requires.

Your choices

You can delete your account yourself in Settings, download a copy of your data there (JSON or CSV), and switch off the anonymous usage counts. You can also ask us to access, correct or export your data, or to delete it, to restrict how we use it, or to object to how we use it, by emailing the address below. We will answer within one month. If you are not happy with our answer you can complain to the Data Protection Commission (dataprotection.ie) or your local data protection authority. We do not make decisions about you by automated means.

Beta notice

Aurevin is still being built. Data may occasionally be reset or lost, so keep your own copy of anything important and avoid entering information you wouldn't want stored in a test product.

Changes

If we change this policy we will update the date above, and tell you by email if the change is significant.

Contact

Aurevin is operated by [YOUR NAME OR COMPANY].

Questions about this policy or your data: aurevin@proton.me