Privacy Policy

Aura Up

Last updated: October 13, 2026.

Aura Up has three modes, and they don't ask the same things of you:

• Farm Aura (Classic) — plays without an account and without internet, always.
• Daily Challenge and Journey — ask you to sign in with your Google account, because both feed a leaderboard, and a leaderboard needs to know who each score belongs to.

This policy describes exactly what leaves your device, and nothing beyond that is collected.

What stays only on your device

Journey progress, records, stars, purchased items, sound on or off. None of this is sent while there is no account, and none of it is erased when you sign out.

What is sent when you create an account

• Nickname — shown on the leaderboard, to other people.
• Email — identifies the account. Never shown on the leaderboard.
• Password — stored only as a cryptographic digest (hash). No one, not even whoever runs the service, can read it.
• Google identifier, if you sign in with Google — only the identifier and the verified email, nothing else from your profile.

What is sent when you play

• Your Daily Challenge result and the day it refers to.
• Your result on each Journey level, in the current season.
• A mirror of your progress: total stars earned, level reached and the list of purchased items. It lets you recover your purchases on a new device.

• The start and end of each Daily Challenge and Journey match, timed by the server's clock. This is what lets us reject a score no one could have reached in the time that passed. This record is deleted automatically within a few days.
• A notification identifier, if you allow notifications. Without an account, it doesn't say who you are: it only lets the device receive general messages, such as a new season starting. With an account and the "Losing 1st place" option on in the menu, the server keeps this identifier with your account and the game's language, to let you — and only you — know when someone passes you at the top of a ranking. Turning the option off stops the notices; the identifier is deleted when you sign out or delete the account.
• The game's language — Portuguese, English or Spanish — with each request to the server, so the reply comes back in it. Apart from the notice above, it is not stored.
• A proof that the request came from the official app (Firebase App Check). Google checks the app and the device (Play Integrity, on Android) and gives the game a short-lived token that goes with each request — this is what stops any other program from sending fake scores to the ranking. The server only checks the token and counts how many requests arrived with and without one; the token is not stored and doesn't say who you are.

Classic mode results are not sent: the stage is random, so there would be nothing to compare.

What is not collected

Location, calendar, contacts, photos, microphone, browsing history and data from other apps. The game doesn't ask for any of these permissions.

The device's advertising identifier left this list when ads were added: it is read by Google AdMob, not by the game. The next section explains.

Who else sees it

Your nickname and your scores appear on the leaderboard to other players. Your email does not.

Along with them go the emblem and the card theme you picked in the store, and, if your account is Pro, the card shows glow effects — so anyone looking at the leaderboard may tell the account is Pro.

The data is not sold or shared with third parties. The service is run by the person responsible for the app, and the data lives in a database under their control.

Ads

Ads are served by Google AdMob. They appear in two places, and only these two:

• After you confirm a trade in the star store — the item is already yours when the ad appears, and it is never a condition for the purchase.
• As an optional offer to continue after losing, in the Journey. Watching is your choice, and declining takes nothing away from the game.

AdMob is a Google service and collects its own data to choose what to show — including the device's advertising identifier, model, language and an approximate network address. It does not receive your nickname, your email or your scores: the game gives it none of that.

What Google does with that data is governed by its own policy: how Google uses information from partner sites. You can reset or turn off the advertising identifier in your Android settings, under Google → Ads.

How long we keep it

For as long as the account exists. Daily Challenge results and points from past seasons are kept as the leaderboard's history.

Your rights

• See everything we store about you — the app offers an export on the account screen.
• Delete the account and everything that belongs to it, at any time, from the app or from this page, with nothing to install.

Deleting the account removes the nickname, email, results, points, progress mirror and open sessions. It is permanent.

Children

The game is not directed at children under 13 and does not knowingly collect their data.

Contact

Questions about this policy or about your data: easdigitais@gmail.com.