AONA Privacy Policy
Last updated: 30 September 2026
AONA is an app that helps families agree on how they use their phones. It's used by children and teenagers, so we collect as little as possible and explain it plainly. If anything is unclear, email us at [email protected].
1. Who is responsible for your data
AONA is operated by Carlos García Álvarez, trading as Velycio. Full details are in section 12.
2. What data we handle
| Who | What data | Why |
|---|---|---|
| Parent or guardian (tribe leader) | Email address, nickname, age and role | To create the account, sign in with a code sent by email and manage the tribe |
| Kids and other members | Only a nickname and an age, and their role | To suggest rules based on age and apply them on their phone |
| The whole tribe | The pact (rules, modes and schedules), proposals and replies, signatures, change history, sparks, rewards, completed activities and their ratings | So the pact works on every phone and there's a record of who changed what and when |
| The whole tribe | Threshold alerts (for example, “agreed time exceeded”) and requests for extra time | So leaders can approve or decline and see how the pact is going |
| Whoever pays | Subscription status (plan and end date) | To know whether the family has AONA Family. We never see card details: payment is handled by Apple or Google |
| People who sign up on the website | Email address, what phone their kids have and which campaign they came from | To let you know when the app opens, with your offer saved |
What we don't collect: children's real names, exact dates of birth, children's location, photos, contacts, messages or the content of what's viewed on the phone.
What stays on the phone and never reaches us: exact minutes of use per app and how often the phone is picked up (on iPhone these are handled by Apple's Screen Time and never leave the device), the tribe's profile for activities (hobbies, what you own, suburb or town, and today's location) and activity history.
To suggest activities based on the weather, the app checks the forecast for your area with Open-Meteo and public holidays with Nager.Date. Only the approximate coordinates of the town chosen by a leader are sent, with no personal information.
3. Why we're allowed to handle it
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, because we're based in Spain, the EU General Data Protection Regulation:
- To provide the service you signed up for: account, tribe, pact, phone lock and subscription.
- With your consent: the website waiting list. You can withdraw it at any time.
- Legitimate interests: keeping the service secure and preventing misuse.
Children. A tribe is always created by an adult, who consents on behalf of their children when adding them, and a child's phone can only join with the tribe's code. We follow the development of the Children's Online Privacy Code being prepared by the OAIC and will update this policy when it takes effect.
4. Who we share data with
We don't sell data. There are no ads and no analytics that track children. Only these service providers handle data on our behalf:
| Provider | Why | Where |
|---|---|---|
| Supabase | Database and accounts | European Union (Paris) |
| RevenueCat | Subscription status | United States, under standard contractual clauses |
| Apple and Google | Payments and on-phone locking | Under their own policies |
| Cloudflare | aona.app website and email | Global network, under standard contractual clauses |
This means your information may be stored or processed overseas, mainly in the European Union and the United States. If the app ever uses artificial intelligence to adapt activity text, it will run on our servers, never sending any member's name or nickname, and we'll update this policy first.
5. How long we keep it
- For as long as the account is active.
- When you delete your account in the app (Profile › Account), your data is deleted straight away. If you're the only leader, the whole tribe is deleted (pact, sparks and history) along with its phones' accounts, and those phones are unlocked.
- Waiting list details until the app opens or you unsubscribe, and for no more than 2 years.
- Anything the law requires us to keep (for example, billing records), for as long as it requires.
6. Your rights
You can ask to access, correct or delete your information and your children's, or object to how it's used, by emailing [email protected]. We'll respond within 30 days.
If you're not happy with how we've handled your request, you can complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).
7. Security
- Every database table has access rules (RLS): each family only sees its own data and nobody can see another family's.
- Third-party service keys live only on our servers, never inside the app.
- All communication is encrypted (HTTPS).
8. Emergencies
Calls, messages to parents and maps are never locked. On iPhone, the Phone app can't be paused; other essential apps are left out of the lock by design.
9. Cookies
The aona.app website doesn't use tracking or advertising cookies. It only stores the language you choose in your browser.
10. Changes to this policy
If we change anything important, we'll let you know in the app before it applies.
11. Contact
For privacy questions, email [email protected]. For anything else, [email protected].
12. Our details
| Operator | Carlos García Álvarez |
| Trading name | Velycio |
| Spanish tax ID (NIF) | 45549258N |
| Address | Carrer Barcelona 33, 3.º 1.ª, 17002 Girona, Spain |
| Privacy email | [email protected] |
| General email | [email protected] |