AONA Privacy Policy

Last updated: 30 September 2026

AONA is an app that helps families agree on how they use their phones. It's used by children and teenagers, so we collect as little as possible and explain it plainly. If anything is unclear, email us at privacy@aona.app.

1. Who is responsible for your data

AONA is operated by Carlos García Álvarez, trading as Velycio. Full details are in section 12.

2. What data we handle

What we don't collect: children's real names, exact dates of birth, children's location, photos, contacts, messages or the content of what's viewed on the phone.

What stays on the phone and never reaches us: exact minutes of use per app and how often the phone is picked up (on iPhone these are handled by Apple's Screen Time and never leave the device), the tribe's profile for activities (hobbies, what you own, suburb or town, and today's location) and activity history.

To suggest activities based on the weather, the app checks the forecast for your area with Open-Meteo and public holidays with Nager.Date. Only the approximate coordinates of the town chosen by a leader are sent, with no personal information.

3. Why we're allowed to handle it

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, because we're based in Spain, the EU General Data Protection Regulation:

• To provide the service you signed up for: account, tribe, pact, phone lock and subscription.
• With your consent: the website waiting list. You can withdraw it at any time.
• Legitimate interests: keeping the service secure and preventing misuse.

Children. A tribe is always created by an adult, who consents on behalf of their children when adding them, and a child's phone can only join with the tribe's code. We follow the development of the Children's Online Privacy Code being prepared by the OAIC and will update this policy when it takes effect.

4. Who we share data with

We don't sell data. There are no ads and no analytics that track children. Only these service providers handle data on our behalf:

This means your information may be stored or processed overseas, mainly in the European Union and the United States. If the app ever uses artificial intelligence to adapt activity text, it will run on our servers, never sending any member's name or nickname, and we'll update this policy first.

5. How long we keep it

• For as long as the account is active.
• When you delete your account in the app (Profile › Account), your data is deleted straight away. If you're the only leader, the whole tribe is deleted (pact, sparks and history) along with its phones' accounts, and those phones are unlocked.
• Waiting list details until the app opens or you unsubscribe, and for no more than 2 years.
• Anything the law requires us to keep (for example, billing records), for as long as it requires.

6. Your rights

You can ask to access, correct or delete your information and your children's, or object to how it's used, by emailing privacy@aona.app. We'll respond within 30 days.

If you're not happy with how we've handled your request, you can complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

7. Security

• Every database table has access rules (RLS): each family only sees its own data and nobody can see another family's.
• Third-party service keys live only on our servers, never inside the app.
• All communication is encrypted (HTTPS).

8. Emergencies

Calls, messages to parents and maps are never locked. On iPhone, the Phone app can't be paused; other essential apps are left out of the lock by design.

9. Cookies

The aona.app website doesn't use tracking or advertising cookies. It only stores the language you choose in your browser.

10. Changes to this policy

If we change anything important, we'll let you know in the app before it applies.

11. Contact

For privacy questions, email privacy@aona.app. For anything else, info@aona.app.

12. Our details