Aufera gives a soundtrack to what you read. To do that it needs to know very little about you, and this document explains exactly what, why and for how long. No beating about the bush.
| Controller | P. Pons (full details at the end) |
| Contact | info@aufera.com |
Aufera is a project by P. Pons, provided as a professional activity, with no advertising. Reading is free; what you pay for is composing the soundtrack of a book of yours.
The text of your books does not leave your device. When you add an EPUB, it is processed and stored on your own device. We don't receive it, we don't store it and we can't read it.
With one exception, and you decide it: if you tap "Request soundtrack", that specific book is sent to our servers so it can be analysed. It is explained in detail below.
| Email address | To create your account and identify you when you sign in. If you sign in with Google or Apple, they give it to us (with Apple you can choose to give us a forwarding address instead of yours). |
| Password | If you use a password, we never see it: our authentication provider handles it, encrypted. If you sign in with Google or Apple, there is no password with us: they do the check, and all we receive is a signed identity with your email and a code for your Google or Apple account. |
| Username | To address you inside the app. |
| Year of birth | Optional. To know which ages the product is useful for. |
| Gender | Optional, and you can leave it out. Same statistical purpose. |
| Genres you like to read | Optional. To guide recommendations. |
| Reading pace | Optional. To set the initial speed of the music. |
| Your library | Title and author of each book, the names of its chapters and how many words each one has. Not the text. If you give it a cover, that image is stored too. If the EPUB carries an ISBN, that is stored as well: it is what lets us show the edition's cover. |
| Your progress | Which chapter you are on and whether you have finished it. So you can carry on from another device. |
| Your purchases and balance | Each purchase (which pack, when, from which store and the transaction number the store gives) and each soundtrack you use or get back. It lets us know how many you have left and sort out any problem with a payment. We never see your card details: they stay with the store. |
| The phone fingerprint | Only in the mobile app. It is a code calculated from the identifier the phone's system gives Aufera on that phone, passed through a function that can't be reversed (SHA-256). We receive that result, not the identifier. It is used only so that the free soundtrack is given once per phone and not once for every account someone creates. It is not used for anything else, nor cross-referenced with usage measurement. |
| Settings | Reading speed, pace, volume, reader type, font size and music genres. They are stored with your account so you find them the same on another device. They say nothing about you that you didn't choose yourself. |
| What you write to us | Only if you send us a comment from Settings (“Tell us”): what you write, the app version, whether it is Android or iPhone and the language, stored with your account so we can reply to your email. Only we read it, and it is deleted if you delete your account. |
To know whether this works we need to measure things: how many people open the app, how many get as far as reading, whether a track is always skipped. This is how we do it:
| A random identifier | The first time you open the app, your device makes up a random code (something like d7f3k9x2m1p4) and stores it there. It is not derived from an email, a name or your phone: it is a random number. It is not tied to your account, and we don't cross-reference it with your account: we don't use that code to find out who you are. |
| What is sent with it | That the app was opened, that the demo was tried, that an account was created, that a book was added (and from where: the catalogue or a file of yours, never which one), that reading started, how many minutes have been read, that a chapter or a book was finished, which track played, how much of it was heard and which was skipped, which setting was changed, that a soundtrack was requested (and whether it went through), that the headphone buttons were used (with how many presses), which of the app's tips were shown, whether the first steps were completed or hidden and that a comment was sent (not what it says). Nothing else. |
| What is NOT sent | Not the text of your books, not your email, not a stored IP address, nothing that identifies you. And we don't cross-reference this measurement with your account. |
If you clear your browser data or uninstall the app, that code disappears and the next one will be different: there is no way to reconstruct the same person.
To compose a book's soundtrack it has to be read, and that can't be done on your phone. So, and only if you tap that button, the full text of that book is sent to our servers, where it is processed with the help of an artificial-intelligence model.
What happens next:
Before tapping that button, bear in mind: if the book is protected by copyright, sending it makes a copy on our servers. You should only request it for works you have the right to copy in that way. And if you don't want it to leave your device, simply don't request it: the rest of the app works the same.
| Performance of the contract | Email, password, library, progress, purchases and balance: without them there is no service to provide. |
| Legal obligation | Keeping the record of purchases for as long as tax and consumer law requires. |
| Consent | Age, gender, tastes and pace. They are optional and you can leave them blank. |
| Explicit consent | Sending a book's text, which only happens if you request it. |
| Legitimate interest | Anonymous usage measurement (to know whether the product is useful and fix what isn't), the anti-bot check at sign-up (so the app doesn't fill up with fake accounts) and the phone fingerprint (so the free soundtrack isn't exploited by creating accounts). None of the three involves a profile of you, and you can object by writing to us. |
We don't sell data to anyone. But for this to work there are providers that process data on our behalf:
| Supabase | Database and user accounts. Servers in Ireland (European Union). |
| Resend | Sends your account emails: the password reset one and, when needed, the one to confirm your email. It receives your email address and the content of that message, nothing else. It is a US company. |
| Cloudflare | Music files and delivery of the website. Servers in Western Europe. |
| Cloudflare Turnstile | The "I'm not a robot" check when creating an account. To work, Cloudflare receives your IP address and some signals from your browser. It only appears at sign-up, and it is there so nobody creates fake accounts by the thousand. |
| Google Fonts | The typefaces the app is written in are loaded from Google's servers, which receive your IP address when serving them. It is a US company. No cookies or tracking are attached to that load. |
| jsDelivr and cdnjs | Two public repositories from which three pieces of free software the app needs are loaded: the one that talks to the database and the ones that open PDFs and EPUBs. They receive your IP address when serving them. No cookies. |
| Open Library | That is where some book covers come from. It is only involved if the EPUB you added carries an ISBN: then your device asks it for an image — and, the first time, which book that number belongs to, to check it matches yours before we trust it. They see your IP address and that ISBN. We don't tell them who you are or what you are reading, but an ISBN is a specific book, so you should know. It is a non-profit project of the Internet Archive, in the United States. If you don't want this to happen, the app works the same: it keeps the plain-colour cover. |
| Google Books | If Open Library has no cover for that ISBN, your device asks Google Books (books.google.com) for the image. They see the same: your IP address and the ISBN, nothing else. It is a Google service, in the United States. As above: if you'd rather not, the cover stays plain-coloured. |
| Google Play and the App Store | They take payment for purchases with their own payment system and are responsible for that data under their own policies. They only tell us what was bought. |
| RevenueCat | It checks with the store that each purchase is real and lets us know. It receives the code of your Aufera account (not your email) and the purchase details. It is a US company. |
| Google and Apple, for signing in | Only if you choose to sign in with them: they check who you are and send us your email and a code for your account. They are US companies. |
| OpenRouter | Provides access to the artificial-intelligence model that reads the book. It is only involved if you request a soundtrack, and it only receives the text of that book. OpenRouter passes it on to one of the companies that run that model, which also receives it and may be outside the European Union. OpenRouter is a US company, so that transfer leaves the European Economic Area. |
Where a provider processes data outside the European Economic Area, it does so under the standard contractual clauses approved by the European Commission.
The app lets you search for and download public-domain works from Project Gutenberg. If you use that search — and only then — your device makes requests to Project Gutenberg, to its Gutendex index and, when a browser restriction has to be worked around, to one of three public bridges: corsproxy.io, allorigins.win or codetabs.com. Those services see your IP address and which book you are asking for. They are not ours and we have no contract with them: they are public, free services. If that doesn't suit you, don't use that search — you can add your EPUBs from your phone without any request going out.
| Your account and your data | For as long as you keep it open. If you delete it, they disappear immediately, except for what is explained in the next two rows. |
| Purchase records | The notice of each purchase the store sends us is kept even if you delete your account, for as long as tax and consumer law requires, only to comply with it and handle claims. Then it is deleted. |
| Phone fingerprint | Kept even if you delete your account, no longer linked to it: if it were deleted, deleting the account and creating another on the same phone would give another free soundtrack. |
| Text of a requested book | Until its analysis finishes. Then it is deleted. |
| Emotional analysis | Kept, because it no longer identifies anyone: they are a book's coordinates, not yours. |
| Anonymous usage measurement | Kept because it no longer identifies anyone: they are counts tied to a random code, not to you. |
| What is stored on your device | Until you delete it or uninstall the app. We can't reach it. |
You can exercise two of them right now, without writing to anyone or waiting for a reply. They are in Settings → Your account:
If you no longer have the app installed, or can't sign in to your account, you can still ask us to delete it: it is explained step by step in how to delete your account.
You also have the right to correct anything inaccurate, to object to processing, to restrict it, to withdraw your consent and to take your data to another service. For any of them, write to us at info@aufera.com.
If you think we haven't done things properly, you can complain to the Spanish Data Protection Agency (AEPD).
To use Aufera you must be 14 or older. If you are younger, a parent or guardian needs to create the account. If we detect an account belonging to someone under 14 without that permission, we will delete it.
The connection is encrypted end to end. Passwords are stored encrypted by our authentication provider, and we never see them. Each user can only access their own data: this is enforced in the database, not just in the app.
Even so, no system is infallible. If a breach that affects you ever happens, we will let you know.
If this changes in any meaningful way, we will tell you inside the app before it takes effect. The date at the top always shows the latest version.
Owner: Pau Pons Fernandez · Tax ID (NIF) 43216705G · Camí Can Coler, 8, 07015 Palma (Balearic Islands, Spain) · info@aufera.com