Welcome to Aurora (“the App”). This Privacy Policy explains how Papp Gergely Matyas, sole proprietor registered at Pomázi út 2, 2011 Budakalász, Hungary (“we”, “us”), acts as the data controller and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws. The App and any related websites, emails or features are collectively called the “Services”.
We do not collect your precise location, health metrics such as weight or allergies, or your contacts.
| Why we process your data | What personal data is processed | Legal ground for the processing |
|---|---|---|
| So you can create and keep your account and so we can identify and authenticate you when you log in | Account Creation Data, Third-Party Sign-in Data | Performance of the contract between You and the App |
| So you can scan products and add missing information so the App can show product details and scores | Food Data | Performance of the contract between You and the App |
| So we can process your requests, complaints and reports | Communications Data | Our legitimate interest to reply to users about the App (customer support) |
| So we can keep the App running smoothly and secure (fix bugs, prevent fraud, monitor crashes) | Device and Technical Data, Usage Data | Our legitimate interest to provide a safe and reliable App |
| So we can measure the App’s performance and improve features | Device and Technical Data, Usage Data | Our legitimate interest to develop and optimise the App |
| So we can communicate with you about the Service (non-marketing service messages) | Account Creation Data, Communications Data | Performance of the contract / Our legitimate interest to inform you about the Service |
| So we can send optional tips, updates or promotional push notifications | Account Creation Data, Device and Technical Data, Usage Data | Consent – you can withdraw it at any time in Settings |
| So we can analyse voluntary research responses and improve features | Research and Survey Data | Our legitimate interest to improve the App and (where applicable) consent |
| So we can comply with laws, court orders or enforce our Terms | Any of the above categories needed for the specific legal request | Compliance with our legal obligations |
| If we ever restructure or sell the business | All categories of data held at that time | Our legitimate interest in a business transfer |
We do not sell your personal data or share it for third-party advertising.
We disclose information only in these limited situations:
We host our databases and main servers exclusively in the European Union. As a rule, your personal data stays within the EEA.
If we ever need to use a non-EEA service provider (for example, Apple or Google when you choose their sign-in), we will:
You can request a copy of our current transfer safeguards by emailing us at the address below.
We keep your personal data only for as long as it is needed to provide the App and meet legal or regulatory requirements, in line with guidance from data-protection authorities. When it is no longer required, we delete or anonymise it securely.
Privacy is a fundamental human right. That means everyone who uses the App—wherever you live—gets the same protections under the GDPR. You can:
Right to access and obtain a copy of your data
You may request access to the personal data we hold about you. We will provide all information required by law, including why we process it, which categories are involved, who receives it, how long we keep it, and the rights you can exercise.
Right of rectification
You may ask us to correct any personal data that is inaccurate or incomplete.
Right to erasure (deletion)
In certain circumstances, you may request that we erase your personal data. We may still need to retain limited pieces if the law requires or if we need them to establish or defend legal claims.
Right to restrict processing
You may ask us to limit processing—for example, while we verify accuracy or consider an objection.
Right to withdraw consent
Where processing relies on your consent (such as push notifications), you can withdraw that consent at any time in the App settings or by emailing us. Withdrawal does not affect processing already performed.
Right to object
You may object at any time to processing carried out on the basis of our legitimate interests or, if ever applicable, for direct-marketing purposes.
Right to data portability
In certain cases, you can obtain your personal data in a commonly used, machine-readable format and have us transmit it to another service.
Digital legacy
(Only if you are a French resident). If you are located in France, you have the right to set out instructions (general or specific) about what happens to your personal information after your death.
If you are in the European Union, EFTA States, or the United Kingdom and wish to raise a concern about our data practices, you may also complain to your local supervisory authority or to the Hungarian Data Protection Authority (NAIH).
Only you—or someone legally authorised to act for you—may make a request. We may ask for proof of identity or authorisation to protect your data.
Please email us at gergo.vigapps@gmail.com to exercise any of the rights listed above.
If you would like to exercise your right to request erasure of your account, simply contact us by email and include “Delete” in the subject line so we can prioritise your request. You can also delete your account directly in the App under Settings → Delete Account.
We will address your request within one month of receipt. In some cases—such as securely erasing data from encrypted backups—it can take up to 90 days. If we need more time, we will let you know and explain the reason for the delay.
We apply industry-standard technical and organisational measures to protect your data, including:
No online service can guarantee absolute security, but we continuously review and enhance these safeguards to keep your information as safe as reasonably possible.
You have to be at least 18 years old to use Aurora. Do not use these Services if you are under 18. Our Services are not designed, nor otherwise intended, for children or anyone under 18.
We implement technical measures to prevent individuals under 18 from creating an account or otherwise using the App. If we become aware that someone under 18 may have provided us with personal data, we will investigate and, if applicable, delete the account and remove the data.
We may update this Privacy Policy from time to time.
If we make material changes, we will let you know by email and with an in-app notice before the update takes effect.
The “Last updated” date at the top of the Policy tells you when it was last revised. Continued use of the App after the new Policy becomes effective means you accept the changes.
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
We aim to respond within a few business days.