PRIVACY & DATA SOVEREIGNTY CHARTER

Privacy Policy

We believe privacy is an inviolable architectural guarantee, not an afterthought. Here is our transparent commitment to your data sovereignty.

Effective: September 2024·Version 2.4·Zero advertising tracking

Core Privacy Pillars

Zero Behavioral Ads

We never track you across the web, profile your taste, or sell your reading and viewing habits to advertisers.

Local-First Architecture

Your personal notes, ratings, and quotes are saved in your local device cache first for instant private access.

Encrypted Cloud Sync

When cloud backup is enabled, your data travels across encrypted TLS channels to our dedicated hardened storage.

Full Right to Erasure

Export your entire archive anytime or permanently wipe your account and all associated data with 1-click.

Section 01

Our Privacy Philosophy

Avuno was founded on a singular premise: your cultural memories and personal reflections belong solely to you.

Unlike modern social networks that treat your attention as an ad inventory commodity, Avuno operates as a calm sanctuary. We generate revenue through transparent, direct subscriptions — never through surveillance capitalism or data brokering.

Section 02

Information We Collect

We collect only the minimal data strictly required to deliver a world-class personal media tracking service:

1. Account & Authentication Details

Your email address, hashed passwords (argon2/bcrypt), full name, and optional avatar URL. If authenticating via Google OAuth, we receive only your public name and verified email.

2. Cultural Media Vault Items

The films, books, interactive games, music, and anime you catalog, along with your private ratings, review quotes, journal entries, tags, and progress timestamps.

3. Operational Telemetry & Crash Diagnostics

Aggregated, anonymized performance metrics (API latency, database throughput, and error stack traces) to maintain 99.9% platform availability.

Section 03

Information We NEVER Collect or Sell

✓ The Avuno Non-Collection Guarantee:

We do NOT sell, rent, or monetize your personal data with third-party brokers.
We do NOT track your GPS location or device sensor telemetry.
We do NOT run third-party advertising tracking pixels (Facebook Pixel, Google AdSense, etc.).
We do NOT feed your personal journal entries or reflections into public generative AI training corpora.

Section 04

How We Use Your Information

Your data is processed strictly for the following functional purposes:

Rendering your personal library, chronological timelines, and statistics.
Generating your end-of-year cultural memory summaries ("Avuno Wrapped").
Sending critical security notices, password reset links, and billing receipts.
Executing client-side search and fast fuzzy filtering across your vault.

Section 05

Third-Party Infrastructure & Sub-Processors

To provide high reliability, Avuno utilizes a select group of SOC2/ISO-certified enterprise infrastructure providers:

Stripe Inc.

Payment processing and billing vault. Avuno never stores raw credit card numbers or banking secrets.

Cloudflare Inc.

Edge CDN routing, DDoS defense, SSL/TLS cryptographic termination, and web asset acceleration.

Dedicated Hardened VPS

PostgreSQL 16 relational storage, automated daily Age-encrypted backups, and Redis session caching.

Resend

Transactional email delivery for password verification and security alerts.

Section 06

Data Security & Cryptographic Safeguards

We implement defense-in-depth security engineering to ensure your vault remains impenetrable:

In-Transit Encryption: All HTTP traffic is enforced over TLS 1.3 with strict HSTS headers.
At-Rest Encryption: Production database disks and automated daily backups are encrypted with Age public-key cryptography.
Credential Hashing: Passwords are protected using modern cryptographic hash functions with unique salt keys.
Principle of Least Privilege: Backend microservices run under unprivileged non-root container users (`avuno` UID 1001).

Section 07

Cookies & Local Storage Policy

Avuno uses strictly necessary HTTP-only authentication cookies and client-side LocalStorage tokens required to keep you signed in. We do NOT utilize third-party advertising cookies, fingerprinting scripts, or cross-site tracking beacons.

Section 08

Your Rights (GDPR, CCPA & Global Compliance)

Regardless of your physical location, Avuno extends complete data sovereignty rights to every registered member:

Right to Access & Portability

Export your entire cultural archive in standard JSON, Markdown, or CSV at any moment from settings.

Right to Complete Erasure

Delete your account with 1-click. All personal items are immediately purged from production databases.

To exercise your rights or contact our Data Protection Officer, email support@avuno.xyz.