Privacy at Aporo
Updated 2026-10-15 · private preview notice
Who is responsible and how to contact us
Aporo is the product name. The operator’s legal name and postal contact address must be confirmed before student enrollment opens.
Contact support@aporo.app for privacy questions, requests about your data, security concerns or an inappropriate response. Support correspondence is handled by the operator through Cloudflare email forwarding and Google Gmail. Please send only the information needed to explain your request; do not send passwords, session cookies or identity documents by ordinary email.
Information the service handles
- Browser identifiers and preferences. A random browser identifier connects saved work to this browser. Preferences can include appearance, spoken-reply settings and onboarding choices. This identifier is pseudonymous personal data, not an account or a guarantee of anonymity.
- Practice information. The software can save goals, test dates, supplied scores, answers, timings, lesson history, tutor assessments, notebook text, drawings and attached images. Use synthetic examples in the private preview. We have not migrated existing local learner stores into this deployment.
- Technical information. Hosting and security systems process network information such as IP address, request time, browser information and errors. Application diagnostics are designed to exclude lesson text, transcripts, images, credentials and raw provider errors. Disabling application request logs does not disable all infrastructure or provider security records.
- Usage and provider costs. Learner-linked monthly records can include model names, request identifiers, token counts, speech character counts, audio or session durations, saved activity counts and estimated provider costs. These records support service operation and cost monitoring; they do not contain lesson text or recordings. Browser-reported durations are unverified.
- Support information. If you contact us, we receive your address, message and attachments, and retain the correspondence needed to handle your request.
Why information is used
Information is used to provide requested practice and saved-work features, remember preferences, resolve support requests, and protect the service. For the limited operator preview, necessary technical operation, security and support are assessed under legitimate interests in running and securing the preview. A documented balancing assessment and the purposes and lawful bases for student accounts, tutoring, optional features and any payment records must be completed before launch. A microphone permission prompt is a device permission; it is not by itself GDPR consent.
We do not sell personal information or use practice content for advertising. No advertising, session replay or third-party product analytics service is enabled in the hosted preview. Any future optional analytics or marketing would require an updated notice and the appropriate choice before collection.
AI, voice and assessments
The hosted preview does not send practice content to an AI or voice provider. The application contains integrations for Anthropic (tutoring), AssemblyAI (speech recognition) and Deepgram (speech features). Before these are enabled, we must publish the actual data sent, provider retention and data-use settings, applicable safeguards and how optional voice is controlled. We have not verified zero retention or a provider-wide prohibition on training and do not promise either.
When enabled, tutoring may use your submitted work and previous lesson context to generate replies and provisional learning assessments. These are educational suggestions, not official SAT scores or admissions decisions. There is currently no automated decision granting school admission, credit or another legal entitlement. You can request a human review of a concern through the privacy contact.
Storage, recipients and international transfers
Cloudflare provides hosting, database, private document storage and email routing. Preview document bodies are stored in an EU-jurisdiction R2 bucket, and the D1 database was provisioned in Western Europe. Requests and container processing can involve Cloudflare’s wider network; this is not a promise that all processing stays in the EU. Authorized operators can access information for support and security.
Messages to support are forwarded to the operator’s Gmail inbox, so Google also handles that correspondence. Provider contracts, the applicable data processing terms and any international transfer mechanism and assessment must be recorded before student data is accepted. We do not claim those steps are complete. No payments are collected in the preview and no payment data is sent to Stripe by this deployment.
Cookies and information on your device
The essential aporo-prep-notebook-v1 cookie lasts up to one year and is HttpOnly, SameSite=Strict and Secure over HTTPS. It links this browser to saved work. Appearance and audio preferences can also use cookies. Browser storage can hold drafts, unsent work and preferences until the app or you remove them. Clearing the browser cookie can disconnect you from server work; it does not erase the server copies. There is no account recovery or cross-device account sync yet.
Use browser site-data controls to remove local copies. Native app storage, device backups and downloads can hold additional copies; removing a web cookie does not remove these. A separate native privacy disclosure and App Store data labels must match the released app.
Retention and deletion
The preview has no automatic retention schedule for saved documents. Earlier private document versions are retained for recovery. A production retention policy and deletion of all relevant versions, attachments, backups and provider copies must be implemented and tested before student enrollment. We do not promise that deleting a browser cookie deletes your work, or that all copies disappear immediately.
If real personal information is entered accidentally, stop using the preview and contact us so we can locate it, restrict use and handle deletion. Some information may need to be retained for a specific legal obligation or dispute; we will explain any applicable exception and period. We will not describe a request as completed until its actual scope and any remaining copies have been checked.
Your rights and choices
Depending on applicable law, you may request access and a copy, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may complain to a data protection authority, including in the EEA country where you live or work or where an alleged infringement occurred. See the EDPB authority directory.
Email the privacy contact to exercise your rights. We respond without undue delay and normally within one month under GDPR. If a legally permitted extension is necessary, we explain it within that month. We request only proportionate information to verify your authority over the records; we cannot safely identify someone’s work from an unrelated email address alone. There is currently no self-service export or deletion endpoint. A support request does not instantly erase data.
Children and student launch
The private preview is not open to children or students. Before inviting students we must establish the permitted ages and countries, an age-appropriate notice, any required parental authorization, reporting and safety procedures, and a documented assessment of risks to children. We do not infer parental consent from a school email address or a device permission.
Security and changes
The hosted preview uses HTTPS, private storage, server-side secrets, restricted routes and authenticated operator access. These controls reduce risk; they do not establish a compliance certification. Aporo has not obtained a SOC 2 report. A vendor’s certifications do not certify Aporo.
We will update this notice when processing changes and provide notice or seek a choice before a new use where required. The date above identifies this version.