Back to Home

Privacy Policy

Last updated: March 21, 2026

Aurora Deck ("we," "us," or "our") is a family dashboard application designed to help households manage calendars, family members, chores, routines, photos, and rewards. This Privacy Policy explains how we collect, use, store, share, and protect your personal information, including data obtained through Google APIs.

By using Aurora Deck, you agree to the practices described in this policy. If you do not agree, please discontinue use of the application.

1. Data We Collect

Google Account Data

When you sign in with Google OAuth, we collect the following information from your Google account:

  • Your name and email address

This data is used solely to create and identify your Aurora Deck account.

Google Calendar Data

With your explicit permission, Aurora Deck requests access to your Google Calendar to display your calendar events on the family dashboard. Specifically, we access:

  • Calendar event titles, dates, times, and descriptions
  • Calendar names and colors

Aurora Deck requests read-only access to your Google Calendar. We do not create, edit, or delete calendar events on your behalf. You can revoke this access at any time through your Google Account Permissions.

Application Data

We also store data that you enter directly into the application, including:

  • Household name and configuration
  • Family member names and roles
  • Chores, routines, and reward assignments
  • Photos uploaded to the dashboard and/or screensaver feature

2. How We Use Your Data

We use the data we collect exclusively to provide and improve Aurora Deck's features. Specifically:

  • Authentication: Google account data (name, email, profile picture) is used to authenticate you and personalize your experience.
  • Calendar display: Google Calendar data is fetched and displayed on your family dashboard in read-only mode. It is not stored permanently — calendar data is retrieved on demand and cached only briefly to reduce API calls.
  • Dashboard functionality: Application data (family members, chores, routines, rewards, photos) is stored to power the household management features you configure.
  • Service improvement: Aggregated, anonymized usage patterns may be reviewed internally to improve application performance and features. No personal data is used for this purpose.

Aurora Deck does not use Google user data to train AI or machine learning models, and does not use your data for advertising or profiling purposes.

3. Data Sharing

We do not sell, rent, or trade your personal information or Google user data to any third parties. We do not share your data with advertisers, data brokers, or analytics companies.

Your data may be disclosed only in the following limited circumstances:

  • Infrastructure providers: Aurora Deck is hosted on Google Cloud Platform (Cloud Run and Cloud SQL). Your data resides on GCP infrastructure solely for the purpose of running the application. GCP is bound by its own privacy policies and does not have permission to use your data independently.
  • Legal requirements: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Aurora Deck, its users, or the public.

No Google user data is shared with any third party for commercial, marketing, or analytical purposes.

4. Data Storage & Protection

All application data is stored in a PostgreSQL database hosted on Google Cloud SQL within the United States. We implement the following security measures to protect your data:

  • Encryption in transit: All communication between your browser and our servers is encrypted using TLS (HTTPS).
  • Encryption at rest: Database storage is encrypted at rest via Google Cloud SQL's built-in encryption.
  • OAuth token security: Google OAuth tokens (used to access Calendar data) are encrypted using AES-256-GCM before being stored in the database.
  • Authentication: Access to Aurora Deck requires Google OAuth authentication. JSON Web Tokens (JWTs) are used for session management and are signed with a secret key.
  • Access control: Household data is scoped to authenticated household members. Users can only access data associated with their household.

While we take reasonable precautions, no system is completely secure. We encourage you to use a strong, unique password for your Google account and to review your connected applications regularly.

5. Data Retention & Deletion

We retain your data for as long as your account is active and you continue to use Aurora Deck. Specifically:

  • Account data (name, email, profile picture) is retained while your account exists.
  • Google Calendar data is not permanently stored — it is fetched on demand and held only transiently for display purposes.
  • Application data (household members, chores, routines, photos, rewards) is retained until you delete it or request account deletion.
  • OAuth tokens are stored encrypted and are deleted when you revoke access or delete your account.

Requesting Data Deletion

You have the right to request deletion of all personal data associated with your Aurora Deck account. To submit a deletion request:

  • Open an issue on our GitHub repository with the subject "Data Deletion Request" and the email address associated with your account.
  • We will delete all associated data within 30 days of receiving your request and confirm deletion via email.

Revoking Google Access

You can revoke Aurora Deck's access to your Google account at any time by visiting Google Account Permissions. Revoking access will prevent Aurora Deck from reading your Google Calendar data.

6. Google API Services User Data Policy

Aurora Deck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the Google data necessary to operate Aurora Deck's calendar display feature, do not transfer Google user data to third parties, and do not use it for advertising or AI/ML model training.

7. Children's Privacy

Aurora Deck is intended for use by adults managing a household. While the app may display profiles for child family members (e.g., names and chore assignments entered by a parent or guardian), children do not create their own accounts or directly submit personal data to our service. We do not knowingly collect personal information directly from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Continued use of Aurora Deck after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please send an email to auroradecksupport@gmail.com.