Privacy notice

Account details such as your email, display name, roles, and account status.

Practice progress, confidence, bookmarks, and notes you choose to save.

Quality ratings and suggestions you submit, including optional details, any contact email you choose to provide, and technical request signals used for abuse protection.

Billing entitlement data such as Paddle customer, transaction, and subscription identifiers, subscription status, billing-period end, and provider event timestamps. Aporeon does not store full payment-card details.

Security and operational data such as login outcomes, device and IP hashes, user agent, and service logs.

To provide accounts and sessions, save practice state, review quality feedback, operate ad-free Supporter access, reconcile billing events, and prevent abuse.

Aporeon does not sell personal data.

Paddle acts as merchant of record for purchases and processes checkout, payment, tax, invoicing, subscription management, and refunds. Paddle receives the payment and billing information needed to provide those services under its own privacy terms.

Aporeon receives only the identifiers and status information needed to associate a purchase with your account, maintain ad-free access, reconcile provider notifications, and help with billing support.

Aporeon uses Cloudflare Web Analytics to receive aggregate page-view, referral, device, country, and performance reports. Cloudflare Web Analytics does not use cookies or track individual visitors.

Analytics reports do not include account identifiers, query strings, practice notes, saved answers, or feedback details. When separate Web Vitals reporting is enabled, Aporeon may additionally send page-level performance measurements, a measurement event ID, and the public route path to the configured provider.

Aporeon uses an HTTP-only session cookie, a device identifier used for abuse protection, and browser local storage for your theme. Anonymous quality ratings use the device identifier and rate limits to prevent duplicate or automated abuse.

Public content pages may display advertising supplied by Google. Google and its partners may use cookies, web beacons, IP addresses, or similar identifiers to deliver, limit, and measure advertisements.

Where consent is required, advertising cookies are controlled through the consent choices shown to you. You can also manage personalized advertising in Google Ads Settings.

Candidate account deletion is a soft deletion: access is closed and sessions are revoked, while the account, practice history, suggestions, and security records remain available for recovery and service protection.

For permanent erasure or another privacy request, email support@aporeon.com. Some limited records may need to remain where required for security, legal claims, or compliance.

Account and practice data is kept while your account is active. Soft-deleted account records may be retained for recovery, abuse prevention, and legal protection. Billing records and provider event receipts may be kept as needed for accounting, tax, dispute handling, and subscription reconciliation.

Aporeon is independently operated from the Republic of North Macedonia.

Infrastructure, email delivery, payments, advertising, analytics, and abuse-protection providers process only the data needed to provide their services. Contact Aporeon for current provider and retention details.

Questions can be sent to support@aporeon.com.