Privacy policy

# Aurora Privacy Policy

**Last Updated: September 2, 2026**

**Effective Date: July 25, 2026**

Welcome to Aurora (the “App”). Aurora is an Android file-management, productivity, utility, and media application. This Privacy Policy explains what information the App accesses or processes, why it does so, where the information is stored, and the choices available to you.

Please read this Privacy Policy carefully before using the App. If you do not agree with this Policy, you may decline the relevant permissions or stop using the corresponding features.

## 1. How We Process Information

### 1.1 Files and File Information

With your authorization, the App may access files and folders in shared storage to scan, categorize, browse, preview, play, delete, extract, create, and open files. This may include:

- File names, paths, types, sizes, and modification times;

- Images, videos, audio, documents, archives, APK files, and other files you select or permit the App to access;

- Thumbnails and media metadata used to display previews;

- Playlist names, audio names, content URIs or file locations, track order, and creation times.

This information is processed locally for file-management and media features and is not uploaded by us. When you delete, extract, save, or otherwise modify a file, the App performs the operation you requested. Deleted files and folders may not be recoverable.

### 1.2 Document Scanning and Camera Data

When you choose Document Scan and grant camera permission, the App uses the camera to display a preview and capture document pages. Captured pages are processed locally and temporarily stored in the App’s cache. If you create a PDF, the resulting file is saved to the location you select. The App does not upload scanned images or generated PDFs to our servers.

Temporary scan pages may remain in the App’s cache until they are deleted by the App, you clear the cache, Android removes them, or you uninstall the App. A PDF saved to shared storage remains there until you delete it.

The App also uses the camera when you choose QR and barcode scanning. Barcode data is analyzed on the device by Google ML Kit. The App does not upload camera frames or save the camera preview as a recording. If you choose to open a scanned result, such as a URL, phone number, message, contact, or Wi-Fi setting, Android passes the information to the app or system setting that you select. When you create a QR code, the entered content is processed locally; saving or sharing the generated image happens only after you choose that action.

When you use the Flashlight feature, the App may request camera permission because Android requires camera access to control the device torch on some devices. The App uses the permission only to turn the torch on or off and does not capture photos or videos in that feature.

### 1.3 Voice Input, Microphone Data, and Text-to-Speech

When you choose voice input and grant microphone permission, the App records audio only while the voice-input feature is active and uses an Android speech-recognition service to convert speech into text. Depending on your device, settings, language, and selected speech-service provider, audio and related information may be transmitted to and processed by that provider’s servers. That provider’s privacy policy and settings govern its processing. The App does not retain the raw microphone recording in its own database.

When you choose text-to-speech, the text you provide is passed to the text-to-speech service installed or selected on your device. Processing may be local or network-based depending on that service.

### 1.4 Translation and Handwriting Recognition

The App uses Google ML Kit for on-device translation and digital-ink recognition. Text, handwriting strokes, and recognition or translation results are processed on your device by ML Kit and are not sent to Google as input data by these APIs. ML Kit may contact Google servers to download language models, bug fixes, updates, or hardware-compatibility information.

If you save handwriting-recognition results, the recognized text and creation time are stored locally in the App’s database until you delete the record, clear the App’s data, or uninstall the App.

### 1.5 Exchange Rates and Network Information

When you use the exchange-rate feature, the App connects over HTTPS to the Frankfurter API (`frankfurter.dev`) and sends the selected base and quote currency codes to retrieve currency lists and exchange rates. The service necessarily receives network information such as your IP address and may receive standard connection information such as request time and user-agent or device-network details. We do not control the service provider’s logs or retention practices.

The App stores currency information, exchange rates, request dates, and failed-request counts locally to provide cached results and limit repeated requests. It does not send task contents, mood records, handwriting history, scanned documents, or your local files to the exchange-rate service.

### 1.6 Tasks, Mood Records, and Other Local App Data

The App stores information you create in its productivity features locally, including:

- Task-list titles, task contents, completion, favorite and pinned status, order, and timestamps;

- Mood selections, optional descriptions, and timestamps;

- Handwriting-recognition history;

- Exchange-rate cache and request-control data;

- Playlists and App preferences;

- Browser favorites, browsing history, private-mode settings, and references to downloads;

This data is used to preserve your entries and provide the features you request. We do not operate an account service and do not receive this local data. You can delete supported records in the App or remove all App-specific data through Android settings or by uninstalling the App.

Browser pages and downloads are requested from the websites or services that you choose to visit. Those websites may receive your IP address, browser or device information, cookies, and any information you submit to them under their own privacy policies. Aurora stores browser history and favorites locally and does not upload them to Aurora-operated servers. Browser downloads are saved locally and can be opened or deleted by you.

When you use the installed-app information feature, Aurora reads information about launchable non-system apps on the device and displays it locally. This information is not uploaded by Aurora. When you inspect an APK, the App reads the selected APK locally to display its package name, version, label, and requested permissions. Aurora does not silently install APKs or update itself; if you choose to open an APK or another file with an external app, Android grants temporary read access to the app you select.

### 1.7 Temporary Cache

To scan documents, open content supplied by other apps, read EPUB files, safely extract archives, or perform similar operations, the App may create temporary copies or intermediate files in its app-specific cache. Android may remove cached files when storage is low. You may clear the App’s cache through Android settings.

### 1.8 Advertising, Consent, and Device Information

The App uses Google Mobile Ads (AdMob) to load and display app-open, interstitial, and native ads. When an ad is requested or displayed, Google Mobile Ads and participating advertising partners may automatically collect or receive:

- IP address, which may be used to infer a general location;

- App and ad interactions, such as app launches, ad impressions, taps, and video views;

- Diagnostic and performance information, such as app or SDK launch time, hangs, crashes, and energy usage;

- Device and account-related identifiers, which may include the Android advertising ID, App Set ID, and other identifiers available to Google; and

- Device, operating-system, language, network, consent, and ad-request information.

Google and its advertising partners use this information to provide and measure ads, limit how often an ad is shown, detect and prevent fraud or abuse, maintain security, diagnose performance, and, where permitted, personalize advertising. Personalized ads may be based on information such as prior activity, inferred interests, general location, or demographic information. Non-personalized ads are based primarily on contextual information, but may still use IP addresses, cookies, mobile ad identifiers, or similar technologies for ad delivery, frequency capping, aggregated reporting, security, and fraud prevention.

The App uses Google’s User Messaging Platform (UMP) to request and record advertising privacy choices where required. UMP may process consent status, privacy signals, device or app information, IP address, and locally stored consent records to determine whether a consent message should be shown and which advertising treatment applies. Available choices depend on your region, Google’s configuration, and applicable law. Declining personalized advertising does not necessarily remove all ads.

We do not intentionally provide your local files, scanned documents, task or mood content, handwriting content, playlists, browser history, or browser favorites to Google Mobile Ads for ad targeting. We do not use this information to make credit decisions. We do not sell or rent personal information for money; however, advertising-related disclosures to Google or advertising partners may be considered a “sale,” “sharing,” or “targeted advertising” under some privacy laws.

The current version of the App does not require registration or sign-in and does not request location, contacts, text messages, or call logs. If you choose to create a QR code, you may enter contact details or other content yourself; that information is processed locally and shared only when you choose an external action.

### 1.9 Firebase Services in Future Versions

The App may use one or more Google Firebase services in a future version. The Firebase services actually included and enabled in the version installed on your device determine what processing occurs. Potential services and information include:

- **Google Analytics for Firebase:** app-instance or installation identifiers, app events, feature and screen interactions, session information, device and operating-system information, general location derived from IP address, and advertising information where permitted, to understand App use and improve features;

- **Firebase Crashlytics:** crash reports, stack traces, Firebase installation identifiers, device and App state, operating-system information, and diagnostic logs to identify and fix crashes;

- **Firebase Performance Monitoring:** Firebase installation identifiers, IP address, App startup, rendering, and network-performance measurements to diagnose and improve performance;

- **Firebase Cloud Messaging:** Firebase installation identifiers and registration tokens, device and App information, message-delivery information, and notification content needed to deliver notifications you enable;

- **Firebase Remote Config and A/B Testing:** Firebase installation identifiers, configuration-fetch information, device or App properties, and, if Analytics is enabled, related event and audience information to configure or evaluate App features; and

- **Other Firebase cloud features:** if a future feature provides accounts, cloud storage, synchronization, or another service that requires new categories of user content or identity information, we will update this Policy and provide any notice or choice required by applicable law before that processing begins.

Firebase may process information on Google’s global infrastructure or other locations described in its service documentation. Some Firebase services begin collecting technical information automatically when included, while others can be configured or enabled only when needed. Where required by law, we will request consent or provide an applicable opt-out before enabling optional analytics, advertising personalization, or similar processing.

### 1.10 Quick Tools, Printing, Wallpaper, and Settings

If you enable Persistent quick tools in the App settings, the App runs a user-controlled foreground service and displays an ongoing notification with shortcuts to QR scanning, the flashlight, and translation. The App stores your enabled or disabled preference locally. The service does not read notification content from other apps and is not used for hidden activity, tracking, or transferring your files or feature content. You can disable it in the App settings or through Android notification controls.

When you choose to print a PDF or image, the App passes the selected document or a locally rendered print representation to the Android printing framework. The system print service or printing app that you select may receive and process the print job under its own terms and privacy policy. Aurora does not upload the print job to an Aurora-operated server.

When you choose Set as wallpaper, the App gives the Android system wallpaper service temporary access to the image you selected so that you can crop and apply it. Aurora does not upload the image as part of this action.

The App settings allow you to clear temporary cache files created by Aurora, enable or disable Persistent quick tools, open this Privacy Policy, and contact us using an email app installed on your device. Opening the Privacy Policy sends the normal network request to the configured policy website. Contacting us opens your selected email app; any information you include is sent only when you choose to send the message and is then processed by your email provider and by us for responding to your request.

## 2. Permissions

The App follows the principle of least privilege. Permissions are requested for the features described below. You may decline or revoke a permission, but the corresponding feature may be unavailable or limited.

### 2.1 All Files Access

On Android 11 and later, the App may request All files access (`MANAGE_EXTERNAL_STORAGE`) for its core file-manager functionality, including scanning and displaying shared-storage files and folders, categorizing files, and viewing, playing, deleting, or extracting files in response to your actions.

This permission is not used to give advertising or analytics services access to your local files, and it is not used for credit assessment or purposes unrelated to file management. You may revoke it through Special app access or the App settings.

### 2.2 Legacy Storage Permissions

On older supported Android versions, the App may request read or write external-storage permissions (`READ_EXTERNAL_STORAGE` and `WRITE_EXTERNAL_STORAGE`) for the same file-management purposes.

### 2.3 Camera

The App requests camera permission (`CAMERA`) only when you use Document Scan, QR or barcode scanning, or the Flashlight feature. Document Scan uses the camera to capture document pages, QR and barcode scanning analyzes the live preview to detect codes, and Flashlight uses camera access to control the device torch without capturing photos or videos. You can revoke the permission in Android settings; other features can continue to operate.

### 2.4 Microphone

The App requests microphone permission (`RECORD_AUDIO`) only when you start voice input. It is used for speech recognition as described in Section 1.3. You can revoke it in Android settings and continue to enter text manually.

### 2.5 Internet and Network State

The App uses network access (`INTERNET` and `ACCESS_NETWORK_STATE`) to load and measure ads, obtain and apply advertising consent choices, browse websites and download content that you request, retrieve exchange rates, download or update ML Kit language models and related components, and support network-dependent speech or text-to-speech services selected on your device. Future versions may also use network access for the Firebase services described in Section 1.9. These permissions do not give Aurora access to your messages, contacts, or local-network passwords. Websites opened in the App receive the information normally required to provide their pages, subject to their own privacy policies.

### 2.6 Foreground Media Playback

Foreground-service and media-playback foreground-service permissions allow audio playback you initiate to continue in the background, provide system media controls, and show the playback notification required by Android. They are not used for tracking or background collection of file contents.

### 2.7 Notifications and Persistent Quick Tools

On supported Android versions, the App requests notification permission (`POST_NOTIFICATIONS`) only when needed to show user-visible notifications, including the optional Persistent quick tools notification and media-playback controls. If you enable Persistent quick tools, foreground-service and special-use foreground-service permissions (`FOREGROUND_SERVICE` and `FOREGROUND_SERVICE_SPECIAL_USE`) allow the user-controlled shortcut notification to remain available. The service provides shortcuts only, performs no hidden scanning or tracking, and stops when you disable the feature or notifications are unavailable.

### 2.8 Set Wallpaper

The set-wallpaper permission (`SET_WALLPAPER`) supports the user-initiated Set as wallpaper action. The selected image is provided to the Android system wallpaper interface only after you choose that action. This permission is not used to change wallpaper silently.

## 3. Sharing and Third-Party Processing

We do not actively sell or rent your personal information. Information may be processed by or disclosed to another party only in the following situations:

1. When you use voice recognition or text-to-speech, audio, text, language settings, and related technical information may be processed by the system service or provider installed or selected on your device;

2. When ML Kit downloads or updates models and components, Google may process connection and device-related information under its own terms and privacy practices, while the text and handwriting input processed by the ML Kit APIs remains on-device;

3. When you request exchange rates, the selected currency codes and connection information are sent to the Frankfurter API;

4. When you browse a website or download content, the selected website or download service processes the request and related network information under its own privacy policy;

5. When you choose Open with another app, open an APK, share content, or use a similar system action, Android grants the app or service you select temporary access to the selected content;

6. When the App loads ads or manages advertising consent, Google, participating advertising partners, and consent providers may process the advertising, device, network, interaction, diagnostic, and consent information described in Section 1.8;

7. If Firebase services are enabled, Google and its service providers may process the information needed for the enabled services as described in Section 1.9;

8. When you print a PDF or image, the Android printing framework and the print service or printing app you select receive the selected print job;

9. When you set an image as wallpaper, the Android system wallpaper service receives temporary access to the selected image;

10. When you choose to contact us, your selected email provider processes the message and any information you include;

11. When disclosure is required by applicable law, legal process, or a lawful request from a competent authority;

12. When necessary to protect significant lawful interests as permitted by law.

Third-party services are governed by their own terms and privacy policies. We recommend reviewing Google’s privacy information and the settings and privacy information of your device’s speech-recognition, text-to-speech, backup, and other selected service providers. Advertising partners available through Google may vary by region and consent choice.

## 4. Storage, Retention, Backup, and Security

App-created records and preferences are generally stored in app-specific storage. They remain until you delete the relevant record where the feature supports deletion, clear the App’s data, or uninstall the App. This includes the local Persistent quick tools preference and whether a notification-permission request was previously declined. Files you save to shared storage, including generated PDFs, remain until you delete them. Advertising consent choices and SDK identifiers may be stored on your device until they expire, are reset, App data is cleared, or the App is uninstalled.

The App permits Android system backup and device transfer. Depending on your Android and Google Account backup settings, App preferences, local databases, and other eligible App-specific data may be backed up to or transferred by the system-service provider. This processing is controlled by your device settings and the provider’s privacy policy. Shared-storage files are not uploaded by the App as part of its own backup service.

Google and other third-party providers determine the retention periods for information they process. Those periods may vary by service, information type, legal obligation, consent choice, and security need. Firebase retention also varies by enabled service; for example, Firebase’s published retention terms for Crashlytics and Performance Monitoring apply if those services are enabled.

Network communications initiated directly by the App use HTTPS. Information collected by Google Mobile Ads is encrypted in transit. We also use app sandboxing, Android permission controls, restricted file sharing, and temporary access grants. No security measure can guarantee absolute protection, so you should also protect your device and system accounts.

## 5. Your Rights and Choices

You can manage information and permissions in the following ways:

- Grant or revoke storage, camera, microphone, and notification access in Android settings;

- Clear browser history and remove browser favorites or downloads in the App;

- Stop using voice input or select and configure a different speech-recognition or text-to-speech provider;

- Delete supported task, mood, handwriting-history, playlist, and other records in the App;

- Clear the App’s cache or all App data through Android settings;

- Clear temporary cache files and enable or disable Persistent quick tools in the App settings;

- Manage Android or Google Account backup settings;

- Use an advertising consent or privacy-options message when one is made available for your region, and adjust advertising privacy choices provided by Google or your device;

- Reset or delete the advertising ID through supported Android settings;

- Directly manage or delete files saved in shared storage;

- Uninstall the App to remove its App-specific local data;

- Contact us to ask questions, submit a complaint, or exercise rights available under applicable law.

Because the current App has no account system and we do not receive its locally stored databases, we generally cannot identify your device or remotely access, correct, or delete local records. You can manage those records using the App and device controls described above. Requests concerning information processed by Google or another provider may also need to be directed to that provider using its privacy controls.

Withdrawal of authorization does not affect processing lawfully conducted before the withdrawal.

## 6. Protection of Children

The App is not specifically directed at children under the age of 14 and does not knowingly operate an account system for children. Children should use the App under the guidance of a parent or guardian. If a guardian has questions about a child’s use of the App, please contact us.

## 7. Third-Party Services

The current version uses or may interact with:

- **Google Mobile Ads (AdMob) and advertising partners**, to request, display, personalize where permitted, limit, measure, secure, and report ads;

- **Google User Messaging Platform (UMP)**, to request, store, and communicate advertising privacy and consent choices where required;

- **Google ML Kit**, for on-device translation and digital-ink recognition and for downloading related models and updates;

- **Google Firebase services, if enabled in a future version**, potentially including Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, Remote Config, and A/B Testing for the purposes described in Section 1.9;

- **Frankfurter API**, for currency lists and exchange-rate results;

- **Websites and download services that you choose to visit**, for browser pages and user-requested downloads;

- **Android system or installed service providers**, for speech recognition, text-to-speech, backup, device transfer, media playback, notifications, printing, wallpaper selection, file selection, opening content, and other system actions;

- **Your selected email provider**, only when you choose to compose and send a message to us.

The App currently integrates advertising and consent SDKs, but does not currently integrate Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, Firebase Cloud Messaging, Firebase Remote Config, Firebase A/B Testing, or a social-platform SDK. Third-party services may change their practices independently, and their processing is governed by their own terms and privacy policies.

For more information, see [Google’s explanation of how it uses information from apps that use its services](https://policies.google.com/technologies/partner-sites), the [Google Privacy Policy](https://policies.google.com/privacy), and [Privacy and Security in Firebase](https://firebase.google.com/support/privacy).

## 8. Changes to This Policy

We may revise this Policy when features, data practices, laws, or security requirements change. For material changes, we will provide notice through an in-app notice, release notes, the distribution platform, or another appropriate method. Where applicable law requires consent, we will request it before the changed processing begins.

The dates at the top indicate the latest revision and effective date. The September 2, 2026 update reflects version 1.5.0 and adds disclosures for the optional Persistent quick tools notification, its user-controlled foreground service, system printing, setting an image as wallpaper, cache controls, opening the Privacy Policy, and user-initiated email contact. It also clarifies that these local and system-integrated features do not upload files to an Aurora-operated server.

## 9. Contact Us

Personal Information Handler / Operator: **puerto rico**

Contact Email: **puertoricocici@gmail.com**

If you have questions, comments, or complaints about this Policy, the App’s information-processing practices, or your privacy rights, please contact us using the details above. After verifying your request, we will respond within the period required by applicable law.