Privacy Policy

1. Overview

Aura Pharm Academy (“we”, “us”, or “our”) operates the website at aurapharm.ca and the study application at app.aurapharm.ca. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

When you sign in with Google, we receive:

• Your name and email address (from your Google account)
• Your profile photo URL (if available)

We also collect:

• Quiz progress and performance data (questions answered, scores, streaks)
• Question ratings and feedback you submit
• Basic website analytics such as page views, scrolls, and outbound clicks
• When checkout measurement is enabled, a browser/session reference, checkout starts, and confirmed purchase totals, currency, and transaction references
• Your name, email address, optional phone number, subject, and message when you use the contact form
• Email address and optional name submitted to the Counsel by Aura early-access list
• Your contact record in Resend and its Counsel early-access topic and segment preferences
• The date, source, and version of the consent you provide for Counsel emails
• Cloudflare Turnstile challenge and network data used to protect the contact and early-access forms from automated abuse

3. How We Use Your Information

• To authenticate your identity and manage your account
• To track your study progress and provide personalized analytics
• To improve the quality of our question bank based on aggregate performance data
• To understand which public pages and channels help learners find Aura Pharm
• To measure which public pages lead to paid registrations, without sending names, email addresses, quiz answers, or private study activity to Google Analytics
• To respond to messages you send through the contact form
• To communicate with you about your account (e.g., approval status)
• To manage the Counsel by Aura early-access list and send a welcome email, launch emails, or access updates when you have given consent
• To honor the unsubscribe link in Counsel emails and manage your Counsel topic and segment preferences

4. Data Storage

Your data is stored securely using Google Firebase (Firestore) hosted in North America. For contact-form messages, Resend acts as a service provider and processor for email delivery. For the Counsel by Aura early-access list, Resend processes Resend Contacts, the dedicated Counsel topic, and the dedicated Counsel segment. Resend may process or store contact-form and early-access information outside Canada, including in the United States or other locations, where applicable to its service operation and data-residency arrangements. We do not sell your personal information. We share data only with the service providers needed to operate the Service: Google Firebase for authentication and storage, Google Analytics for aggregated website analytics, Stripe for payment processing if you purchase a paid plan, and Resend for contact-form messages and the Counsel early-access list. Cloudflare provides Turnstile and its verification service for those forms and may process challenge, browser, device, and network information needed to distinguish people from automated abuse. Stripe handles your card details directly; we never see or store them.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

We retain your Counsel early-access email address and optional name while the list is active and for as long as needed to manage invitations and launch communications, unless you ask us to delete them sooner. You may withdraw consent or request deletion by contacting us. When you use the unsubscribe link, we opt you out of the dedicated Counsel topic and remove your contact from the dedicated Counsel segment. We may retain the underlying Resend Contacts record and limited suppression or audit information as needed to honor your preference, operate the service, and meet legal obligations. Consent audit information includes when consent was given, the form source, and the consent-copy version.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing at any time
• Withdraw consent for the Counsel early-access list, use its unsubscribe link, or request removal from it

7. Cookies

We use essential cookies and local storage for authentication state and theme preferences. We also use Google Analytics on the public website to measure aggregate traffic and outbound clicks, and Cloudflare Turnstile security technology on the contact and Counsel early-access forms to prevent automated abuse. We do not sell personal information.

A short-lived first-party cookie can connect a public website visit to checkout in the study app. It contains only a pseudonymous browser reference, session reference, and timestamp, and expires after 30 minutes. Checkout measurement uses that reference only when available; blocked, expired, or opted-out references are not replaced with new tracking identifiers. The study app does not load the Google Analytics browser script to track private study screens.

8. Contact

For privacy-related inquiries, please use our contact form on the homepage or email support@aurapharm.ca.

Mailing address: Aura Pharm Academy, Ontario, Canada.

9. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

This policy is an operational description of our current data practices and is not legal advice.