Your data. Your choices.

1. Who controls your data

The data controller for AUREA is A.L.V.K. S.r.l., Via Loderingo degli Andalò 3/2, 40124 Bologna (BO), Italy, VAT and tax code 04195291200. For privacy and account requests, contact support@aurealongevity.ai.

2. What AUREA is

AUREA is a lifestyle and wellbeing service that uses the information you provide to generate a personal score, priorities, plans, actions and progress insights. AUREA does not provide medical diagnosis, treatment or emergency services and is not a substitute for professional healthcare.

3. Data we process

We may process account and contact information, assessment answers, AUREA scores and derived wellbeing insights, goals and preferences, plan and action progress, feedback, product-usage events, technical information needed to operate the service, and subscription status and billing identifiers received from our payment provider. We do not store full payment-card details.

Depending on the information you choose to provide, some assessment or progress information may relate to health or wellbeing and may qualify as special-category personal data under applicable law.

4. Why we use your data

We use personal data to create and maintain your account, deliver and personalize AUREA, calculate scores and recommendations, provide plans and progress tracking, manage subscriptions, maintain security, troubleshoot the service, communicate with you, respond to support requests and improve product reliability and usability.

5. Legal bases

Depending on the activity, we process data because it is necessary to perform the service you request, to comply with legal obligations, or because we have a legitimate interest in operating, securing and improving AUREA. Where required for wellbeing or other special-category information, we rely on your explicit consent. You may withdraw consent at any time for future processing by contacting support@aurealongevity.ai.

6. Service providers

We use selected technology and payment providers to operate AUREA, including Supabase for application database and authentication services, Vercel for application hosting and delivery, Stripe for payment and subscription processing, and Google Workspace for business email and support communications. These providers process data under their own security and contractual frameworks and may act as processors or independent controllers depending on the service.

7. International transfers

Some service providers may process data outside the European Economic Area. Where required, transfers are protected through appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

8. How long we keep data

We retain personal data only for as long as reasonably necessary to provide AUREA, maintain account history, meet legal and accounting obligations, resolve disputes and protect the service. Retention periods can differ by data category. You may request deletion of eligible data by contacting support@aurealongevity.ai.

9. Your rights

Subject to applicable law, you may have the right to access, correct, delete or restrict your personal data, object to certain processing, request data portability, and withdraw consent where processing is based on consent. You may also lodge a complaint with the competent data-protection authority, including the Italian Garante per la protezione dei dati personali where applicable.

10. Security

We use technical and organizational measures designed to protect personal data, including authenticated access, database access controls and restricted server-side credentials. No online service can guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy as AUREA evolves or legal requirements change. The current version and update date will be published on this page. Material changes may also be communicated within the service or by email when appropriate.

Questions or privacy requests: support@aurealongevity.ai