Version 1.3
Effective date: 9 November 2026
Last updated: 9 November 2026
1. Who we are
Aureley is operated by Sol Media (ABN 46 930 759 486), based in Victoria, Australia ("we", "us", "our"). Sol Media is responsible for your personal information (in EU and UK law, the "controller").
This policy explains what personal information Aureley collects, how we use it, who we share it with, and your rights. It applies to the Aureley mobile apps (iOS and Android) and the Aureley web app.
Contact: mail@solmedia.com.au (postal address available on request).
2. The short version
- We collect the least we need to run Aureley: your account, the documents you choose to import, your subscription status, and basic usage and crash data.
- To turn your documents into speech and to highlight words as they are read, the text of your document and the audio we generate are processed by Google in the United States. Australia has no local Google endpoint for this. See section 5.
- Your account, library and saved audio are stored in Australia.
- We never sell your personal information. We do not use it for advertising and we run no ad tracking.
- Nothing you import is used to train AI models, ours or anyone else's.
- You can access, correct, or delete your data at any time, including deleting your whole account from inside the app.
3. What we collect
a. Account information. Your email address, a unique account ID, and your chosen sign-in method (email and password, Sign in with Apple, or Google). If you use Sign in with Apple and choose "Hide My Email", we only receive Apple's relay address.
b. Content you provide. The documents you import (by file, paste, or link), and data we derive from them: the extracted text, the audio we generate, and any Summary or Quiz output. This content is stored under your account ID with access rules (row level security) so that only you can access it.
c. Subscription and billing. Your plan, trial status, and purchase and entitlement records (managed through RevenueCat). Web purchases are sold by Stripe, through its Link service, which collects your payment and billing details, tax information and refund requests as its own business, under Stripe's privacy policy. In-app purchases are handled by Apple and Google. We do not see or store your full card number.
d. Usage and diagnostics. In-app activity events (via PostHog) and crash reports (via Sentry), used to fix bugs and improve Aureley.
e. Communications. Transactional emails such as trial reminders and receipts (sent via SendGrid).
f. Device and technical data. Standard information such as device type, operating system, app version, and IP address, used for security and troubleshooting.
g. Your time zone. When you use the Aureley app, we keep your phone's time zone (for example "Australia/Melbourne") with your account, so the dates in our emails match your calendar. We update it when your phone's time zone changes, and it is deleted when you delete your account.
We do not access your microphone. Aureley never records your voice.
4. How we use your information
- To provide Aureley: import, read aloud, read-along highlighting, Summary and Quiz.
- To manage your account, trial, subscription, and receipts.
- To keep Aureley secure and to detect and prevent misuse.
- To fix bugs and improve the product.
- To send you service messages you need (for example, trial and billing notices).
- To meet our legal obligations.
We use analytics only to understand product usage and fix problems. We do not profile you, track you across other apps or websites, sell your information, or use it for advertising.
5. Overseas processing (Australian Privacy Principle 8)
To generate speech from your documents and to produce read-along highlighting, the text of your document and the audio we generate from it are sent to and processed by Google in the United States. Google does not offer an Australian location for this service. The same applies to the AI that produces Summary and Quiz results (Google Gemini, United States).
Some of our other service providers (payments, subscription management, analytics, crash reporting, and email) may also process limited personal information outside Australia, generally in the United States.
By using Aureley, you acknowledge this overseas processing. Where the Australian Privacy Principles require it, we take reasonable steps to ensure overseas recipients handle your information consistently with those principles.
Your account details, library, and saved audio are stored in Australia (Sydney).
6. Who we share it with
We share personal information only with the service providers that help us run Aureley:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, storage, authentication | Australia (Sydney) |
| Google Cloud (Text-to-Speech, Speech-to-Text) | Voice synthesis and read-along timing | United States |
| Google (Gemini) | Summary and Quiz generation | United States |
| Stripe (Link) | Sells web subscriptions and processes payment, tax and refunds (as seller of record, under its own privacy policy) | United States |
| Apple, Google | In-app purchases | Per their terms |
| RevenueCat | Subscription and entitlement management | United States |
| PostHog | Product analytics | United States |
| Sentry | Crash diagnostics | United States |
| SendGrid | Transactional email | United States |
We may also disclose information if required by law, or to protect our rights, users, or the public. We do not sell personal information.
7. Storage, security, and retention
- Data in transit is encrypted (TLS). Access is controlled by row level security so users can only reach their own data. Sign-in tokens are held in your device's secure store and are never logged.
- We keep your account and content while your account is active.
- When you delete your account (see section 8), we irreversibly delete your account and permanently purge your saved audio and associated data.
- App usage records (which features are used, for example "playback started" or "summary requested") are kept by our analytics provider, PostHog, for up to 7 years. They are linked to a random app ID, not to your name, email or account, and they never contain your documents. Crash reports are kept by Sentry for up to 90 days.
8. Your rights
You can, at any time:
- Access or correct the personal information we hold about you.
- Delete your account and data from inside the app. This permanently removes your account and purges your saved audio. Delete your Aureley account
- Contact us at mail@solmedia.com.au with any privacy question or request.
If you are in Australia and are not satisfied with how we handle a privacy issue, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Delete your Aureley account
You can delete your Aureley account, and everything in it, at any time. Aureley is operated by Sol Media.
In the app
- Open Aureley and sign in.
- Go to Settings › Delete my account.
- Confirm. Your account is deleted straight away.
Without the app
Email mail@solmedia.com.au from the email address on your account, with the subject "Delete my account". We delete it and confirm by email within two working days.
Delete some of your data, and keep your account
Delete any document from your library in the app. This removes the document, its summary, quiz and saved audio.
What we delete
Your login, documents, summaries, quizzes, bookmarks and saved audio. This cannot be undone.
What we keep
- App usage records linked to a random app ID, not to your name or email: kept by PostHog for up to 7 years. Crash reports: kept by Sentry for up to 90 days.
- A record of past purchases, kept by Google Play, the App Store or Stripe, and our billing provider, as the law requires.
Your plan
Deleting your account does not cancel a paid plan. Cancel it where you bought it: Google Play, the App Store or our website.
9. Where Aureley is available
Aureley is available in most countries, including the European Union (EU), the European Economic Area (EEA) and the United Kingdom (UK). This policy applies wherever you use Aureley. If you are in the EU, EEA or UK, section 13 also applies to you.
10. Children
Aureley is not directed to children. You must be 16 or older to use Aureley. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact mail@solmedia.com.au and we will delete it.
11. Changes to this policy
We may update this policy from time to time. If we make a material change, we will update the "last updated" date and, where appropriate, notify you in the app.
12. Contact us
Questions or requests: mail@solmedia.com.au.
13. If you are in the EU, EEA or UK
The EU General Data Protection Regulation (GDPR) and the UK GDPR give you the following extra protections.
Why we use your information (legal bases).
| What we do | Legal basis |
|---|---|
| Run your account, import and read your documents, Summary and Quiz | Performing our contract with you |
| Manage your trial, subscription, payments and receipts | Performing our contract with you |
| Keep Aureley secure and prevent misuse | Our legitimate interest in a safe, working service |
| Crash reports and product analytics, to fix bugs and improve Aureley | Our legitimate interest in a reliable product |
| Service emails you need, such as trial and billing notices | Performing our contract with you |
| Meet tax, accounting and other legal duties | Legal obligation |
We do not use your information for advertising, we do not sell it, and we do not make decisions about you by automated means that have legal or similarly significant effects.
Your rights. As well as the rights in section 8, you can:
- ask for a copy of your information in a portable format;
- ask us to limit how we use it;
- object to any use based on our legitimate interests; and
- complain to a data protection authority.
Email mail@solmedia.com.au to use any of these rights. We reply within one month. We may need to confirm your identity first.
Where to complain. In the EU or EEA, contact the data protection authority in the country where you live or work. In the UK, contact the Information Commissioner's Office (ICO) at ico.org.uk. We would like the chance to help first, so please contact us too.
Transfers outside the EU, EEA and UK. Your account, library and saved audio are stored in Australia, and some processing happens in the United States (see sections 5 and 6). Where the law requires it, we protect these transfers with recognised safeguards, such as the European Commission's standard contractual clauses and the UK's International Data Transfer Addendum, or rely on an adequacy decision where one applies. You can ask us for more detail at mail@solmedia.com.au.
Our EU, EEA and UK representatives (Article 27). If you are located in the EU, EEA or UK and have questions or concerns about your personal data, you may contact our appointed GDPR representatives:
EU representative:
Euverify Limited (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland
Email: gdpr@euverify.com
UK representative:
Euverify Ltd (UK)
3rd Floor
86-90 Paul Street
London
EC2A 4NE
United Kingdom
Email: gdpr@euverify.com
Version history
- v1.3 — 9 November 2026. Section 7: the "short period" line replaced with the real keeping periods for app usage records (PostHog, up to 7 years) and crash reports (Sentry, up to 90 days), on Mel's ruling 07-10-26. To publish with the Euverify portal link. No other change.
- v1.2 — 7 October 2026. Aureley now available in the EU, EEA and UK (D-466). Section 9 rewritten; new section 13 adds EU/UK legal bases, rights, complaints, transfers and the EU and UK representatives (Article 27). Section 1 names Sol Media as controller. Section 3 adds item g, your time zone (Mel's approval 07-10-26). Representatives block uses Euverify's supplied wording (Mel, 07-10-26). Portal link held back until Euverify hides the home address on its public page (Mel, option B, 07-10-26). No other commitment, disclosure or right changed.
- v1.1 — 7 August 2026. First published version. Product renamed from Aria to Aureley; effective date set to the date of publication. No change to any commitment, disclosure or right.
- v1.0 — 30 July 2026. Drafted, not published.