Privacy and cookies policy
Edition of 26 October 2026.
This policy covers the website aura-aum.com: its pages, the early-access form, the account area (/account) and the account deletion page (/account/delete). The Aura app for iOS and Android and the Aura mini app in Telegram have their own privacy policy: aura-aum.com/mobile/privacy. The Russian-language site aura-aum.ru has its own policy in Russian.
Who is responsible for your data
The controller of your data is Individual entrepreneur Maksim Kuleshov (Republic of Armenia), registration number RB22-E283-7DEC-1724, address 26A Khorenatsi St., Yerevan, Armenia.
For any question about your data, write to info@aura-aum.ru. We have not appointed a separate data protection officer or an EU representative at this stage; requests go to the e-mail above.
In short
- We collect only what a feature needs.
- We do not sell your data. We do not show ads on the site; we measure our own ads in Google Ads only after your consent.
- Analytics cookies are set only after you click "Accept" in the cookie banner. If you click "Only necessary", no analytics runs.
- You can ask us what we hold about you, correct it, delete it or withdraw your consent at any time.
What we collect and why
Early-access list
When you leave your e-mail in an early-access form and tick the consent box, we store:
- your e-mail address;
- the language of the page;
- which form you used: the main page (top or bottom form), the page for teachers, the page for students or a city page;
- the campaign tags of the link you came from (UTM tags), if there were any;
- the date and time you gave consent.
That is the whole list. We do not store your IP address or browser details with the sign-up.
Why: to send you one e-mail when Aura launches, in the language you read the site in. The source and campaign tags show us where people hear about Aura. We do not use the address for other mailings and do not pass it to anyone.
Legal basis: your consent (the checkbox under the form).
How long: until we send the launch e-mail or until you withdraw consent, whichever comes first. We delete the waiting list 6 months after the launch e-mail is sent.
A separate teacher early-access form is planned on the teachers page; until it is live, the waiting-list form on that page is used for teachers and students alike.
Account area
The account area lets you see your Aura account: name, role, e-mail, Premium status and payment history.
- Signing in. You get a one-time sign-in link by e-mail, from the Aura bot in Telegram or from the Aura mini app. The code in the link stays in your browser and is not sent in the page address to our server logs.
- What the site keeps in your browser. The session lives in your browser's session storage (
sessionStorage) for up to 12 hours and is erased when you close the tab or sign out. The account area uses no cookies, no analytics and no fonts from third-party servers. - Payments. There are no payments on aura-aum.com. Premium bought in the App Store or Google Play is managed and refunded in the store; the account area only shows its status.
- What the server keeps. The data of your Aura account itself is described in the app privacy policy.
Legal basis: performance of our agreement with you (the Aura terms of use).
Account deletion page
On /account/delete you enter the e-mail of your Aura account, and we send a confirmation link to it. The link works once, for 24 hours. When you confirm, sign-in closes at once, and your personal data is anonymised 30 days later, as described in the app privacy policy. We use the e-mail only to send the link.
Legal basis: performance of our agreement with you and our legal obligation to delete data on request.
Analytics cookies (Google Analytics 4)
Only if you click "Accept" in the cookie banner, the site loads Google Analytics 4 (Google LLC / Google Ireland Ltd). It sets cookies in your browser and receives your IP address, browser and device details, the pages you open, and actions: clicks on App Store, Google Play and Telegram links, links that lead off the site, and whether a form was opened, sent or failed. It also receives the campaign tags of the link you came from. Your e-mail address is never sent to analytics.
We use these reports to understand which pages help people and to improve the site. We do not use them for advertising. Google Signals and ads personalisation are switched off in GA4; data retention is 14 months; IP addresses are truncated by Google Analytics 4 by default.
Legal basis: your consent. You can withdraw it at any time with "Cookie settings" at the bottom of every page. When you withdraw it, we erase the analytics cookies of our own domain and reload the page without analytics.
Yandex Metrica runs only on aura-aum.ru, not on aura-aum.com.
Advertising measurement (Google Ads)
Only if you click "Accept" in the cookie banner, the site also loads the Google Ads conversion tag (Google LLC / Google Ireland Ltd). It lets us see that a visit came from our own ad and what the visitor then did on the site. For this, Google receives your IP address and browser details, and sets the cookie _gcl_au (90 days, Google default). We use it only to measure our ads; the site itself shows no ads.
Legal basis: your consent. You can withdraw it at any time with "Cookie settings" at the bottom of every page. When you withdraw it, we erase the advertising cookies of our own domain and reload the page without the tag.
Necessary storage
These items are needed for the site to work and do not need consent:
| Name | Where | What it holds | How long |
|---|---|---|---|
aura-cookie-consent | local storage of your browser | your cookie choice ("accept" or "only necessary"), the version of the banner and the time you chose | until you change your choice or we change the banner text; then we ask again |
aura-account-session | session storage | sign-in tokens of the account area | until you close the tab or sign out, at most 12 hours |
aura-account-purchase | session storage | the identifier of the last payment you started (only on aura-aum.ru) | until you close the tab |
Analytics cookies set after consent
| Name | Set by | Purpose | How long |
|---|---|---|---|
_ga | Google Analytics 4 | tells visits of one browser apart | 2 years (Google default) |
_ga_<id> | Google Analytics 4 | keeps the state of the current visit | 2 years (Google default) |
| _gcl_au | Google Ads | links a visit to a click on our ad to measure the ad | 90 days (Google default) |
Fonts
Fonts are served from our own server; no requests go to Google Fonts.
Server logs
When you open the site or the account area, our web server and the Aura server record technical logs: time, requested address, response code, IP address and browser identifier (User-Agent). We use them to keep the service secure and to find errors.
Legal basis: our legitimate interest in security. How long: 30 days.
Who receives your data
- Beget LLC — hosting of our servers and sending of e-mails (sign-in links, deletion confirmation, the launch e-mail). It processes data on our instructions.
- Google — Google Analytics 4 and Google Ads conversion measurement (only after your consent).
- Telegram — only if you ask the Aura bot or mini app for a sign-in link.
- App Store and Google Play — if you bought Premium there, the store handles the payment under its own rules; we receive only the status of the subscription.
We disclose data to public authorities only when the law requires it.
Where your data is stored and international transfers
Our servers, database and backups are in Russia, at the hosting provider Beget (St Petersburg). The production server is located in St Petersburg, Russia; no copies of the data are kept in Kazakhstan.
This means your data is transferred to Russia, and Google may process analytics data in the United States. If you are in the European Economic Area, the UK or Switzerland, note that Russia has no adequacy decision. We transfer your data because it is needed to provide what you asked for (the early-access e-mail, the account area) and, for analytics, on the basis of your consent. The transfer relies on your explicit consent under GDPR Article 49(1)(a); Google processes data under its own standard contractual clauses.
How long we keep data
| Data | How long |
|---|---|
| Early-access list | until the launch e-mail or until you withdraw consent 6 months after the launch of the related feature |
| Account area session | at most 12 hours, in your browser only |
| Deletion request link | single use, works for 24 hours |
| Analytics (Google Analytics 4) | 14 months |
| Server logs | 30 days |
| Your cookie choice | in your browser until you change it |
Your rights
Wherever you live, you can:
- ask what data we hold about you and get a copy;
- ask us to correct it;
- ask us to delete it;
- ask us to limit how we use it or object to its use;
- get the data you gave us in a machine-readable form;
- withdraw consent at any time — this does not affect what we did before;
- complain to the data protection authority of your country.
To use any of these rights, write to info@aura-aum.ru from the address the request is about. We answer within 30 days. To leave the early-access list, it is enough to write "unsubscribe". To delete your Aura account, use aura-aum.com/account/delete or the app.
Children
Aura is for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us data, write to us and we will delete it.
Security
All traffic to the site and to the Aura server goes over HTTPS. Sign-in links are single-use and expire. Access to our servers is limited to the team and protected with keys.
Changes to this policy
We publish a new edition at this address with a new date. If a change needs your consent again, the cookie banner will ask you again.
Contact
Individual entrepreneur Maksim Kuleshov, 26A Khorenatsi St., Yerevan, Armenia. E-mail: info@aura-aum.ru. General support: info@aura-aum.ru.