Privacy Policy
This policy explains how AuraPvP processes personal data in the mobile app and on aurapvp.app.
Controller: Alin Daniel Epure, Italy. Contact: info@lentita.com. Last updated: 11 September 2026.
Data we process
Account identifiers supplied by Google or Apple, public profile name and photo, challenge and battle activity, follows, device push token, votes, and location samples used to verify attendance. Payment data is handled by the app stores and RevenueCat only when subscriptions are enabled; AuraPvP does not receive full card details.
Location and votes
Precise location is requested only for on-site check-in and presence verification during an active battle, including in the background after a user starts check-in. It is never displayed to other users. Individual votes are not shown publicly; only totals and results are published.
Purposes and legal bases
Data is processed to provide the service and enforce its rules, to secure the platform and prevent fraud, to send reminders chosen by the user, and to comply with legal duties. The legal bases are performance of the service contract, legitimate interests in security and fair play, legal obligations, and consent where the law requires it.
Retention
Account and profile data remain until deletion. Raw presence samples are kept for up to 30 days; battle, vote-integrity and aggregated attendance records may be kept for up to 24 months to resolve disputes and protect rankings. Push tokens are removed when notifications are disabled, the account is deleted, or the token becomes invalid. Required legal or anti-abuse records may be retained longer in restricted form.
Providers and transfers
AuraPvP uses Google Firebase and authentication, Vercel, Expo push services, Apple authentication where available, RevenueCat when subscriptions are enabled, and GitHub Pages for the website. These providers may process data outside the EEA under their contractual safeguards. Data is not sold and is not used for behavioural advertising.
Your choices and rights
You can disable notifications and location permissions in device settings, and delete the account inside the app. You may also use the web deletion procedure. For access, correction, deletion, restriction, portability or objection, contact info@lentita.com. You may complain to your data-protection authority.
Children and safety
AuraPvP is not directed to children under 16. Users must meet the minimum age required in their country and follow local rules for public events.