Privacy and data

Privacy Policy

How Aurestra collects, uses, shares, and protects information across the website, mobile app, and connected records you manage.

Last updated Nov 2, 2025

This Privacy Policy explains how Aurestra Equestrian Inc. (“Aurestra”, “we”, “us”) collects, uses, and shares information about you when you use our website, mobile applications, and related services (collectively, the “Services”).

1. Information We Collect

  • Account & Contact: name, email, optional phone, preferences, and any optional answer you provide about how you heard about Aurestra.
  • Imported Contacts: if you choose to use contact import, we may collect contact details from your device address book, such as name, email address, phone number, and company or organization name, and upload those details to Aurestra’s servers to create contact records in your account.
  • App Data: horse/stable/business records you create, files you upload.
  • Usage: device identifiers, OS, app version, in-app actions, crash logs (for example, Sentry).
  • Website Analytics: when you accept analytics cookies on our public website, we may collect pages viewed, approximate location derived from IP address, browser and device type, referring page or campaign, interactions with public links and download buttons, and cookie or similar analytics identifiers.
  • First-Party Acquisition Measurement: on public marketing pages and our fixed App Store and Google Play links, we record the requested marketing page, time, limited campaign labels you received in the link, destination store, and a coarse automated-or-unclassified traffic category. We do not retain an IP address, user agent, full referrer, full query string, advertising click ID, or persistent browser or device identifier in these acquisition records.
  • Contests and Event Activities: checkpoint progress, contest entries, and a private progress identifier. For a self-entry, we collect the participant’s first name and either an email address or phone number. When a parent or legal guardian enters for a minor, we collect only the child participant’s first name, the adult’s name and email address or phone number, and the adult’s confirmation that they consent to the child’s participation and accept the contest rules on the child’s behalf. We do not request a birth date or birth year for contest entry. If the adult separately chooses to receive Aurestra updates for themselves, we also retain that marketing choice, when it was made, and the applicable consent version.
  • Purchase: subscription status via App Store / Google Play / RevenueCat (no full card details pass through us).
  • Invoices & Online Payments: invoice, billed-contact, amount, currency, payment-status, refund, and limited Stripe account or transaction identifiers needed to offer and reconcile online invoice payments. Stripe processes payment-card and bank-account details; Aurestra does not store full payment credentials.

2. How We Use Information

  • Provide, maintain, and improve the Services.
  • If you grant contact access and use the contact import feature, upload the contact details you import to our servers so you can store, organize, link, and manage those contacts within Aurestra.
  • Use imported contacts to support features you request, such as contact management, stable and horse records, bookings, lessons, invoicing, ownership records, and invitations, invoice delivery, boarding updates, ownership confirmations, and other service-related communications you choose to send or enable through Aurestra.
  • Personalize features and communicate about updates, security, and support.
  • Process subscriptions and entitlements through Apple, Google, and RevenueCat.
  • Offer, confirm, reconcile, and support online invoice payments and refunds through Stripe when an issuing stable or equine business enables that option.
  • Use website analytics to understand public website traffic, measure campaign effectiveness, improve landing pages and public content, and measure App Store and Google Play click-through activity.
  • Compare limited first-party acquisition request and click counts with campaign context supplied by store platforms or the Aurestra app at registration, and with aggregate registration, stable, and horse creation patterns.
  • Use optional self-reported registration answers to understand how people say they heard about Aurestra. These answers are reported separately from technical campaign attribution.
  • Save progress in contests and event activities, administer entries, contact selected winners or the responsible parent or guardian, and fulfil prizes. Contest data does not create an Aurestra account. Signing up for Aurestra marketing is separate and is not required to participate, and we do not use a minor participant’s details for direct marketing.
  • Prevent abuse, secure accounts, and comply with legal obligations.

2A. Imported Contacts

Aurestra only accesses your device contacts after you grant the operating-system permission and use the contact import feature. If you do so, the contact details you import are transmitted to and stored on Aurestra’s servers as part of your account data.

We use imported contacts to create and maintain contact profiles, associate contacts with the horses, stables, bookings, lessons, invoices, and other records you manage in Aurestra, and to send invitations, invoice delivery, ownership confirmations, boarding updates, and other service-related communications you choose to send or enable through Aurestra. We do not sell imported contacts.

Imported contacts may be visible to you and to other authorized users within the relevant Aurestra account, stable, or workspace when you associate those contacts with shared records or workflows. If you use Aurestra to send or enable an invitation, invoice, boarding update, ownership request, or similar service-related communication, we may share the necessary contact details with our hosting, email, SMS, storage, and other service providers acting on our behalf to deliver that function, including Twilio for SMS delivery.

We process personal data under: (i) contract (to provide the Services), (ii) legitimate interests (security, product improvement), and (iii) consent where required (for example, device contact access, contact import, and certain marketing).

3A. Website Analytics and Cookies

Separately from Google Analytics, Aurestra records privacy-minimized first-party counts when a public marketing page is requested or a fixed Aurestra store link is used. These records contain only normalized campaign labels and limited page, store, time, platform, and coarse automation information. They do not use cookies or persistent anonymous identifiers and do not represent unique visitors, people, or sessions.

Store platforms may process campaign-level parameters on Aurestra’s store links. Where the Aurestra app can retrieve and supplies limited campaign context when an account is created, Aurestra associates the first accepted attribution with the account so later creation of a stable or horse can be measured from Aurestra’s own records. Aurestra does not use this system for cross-company advertising tracking.

Aurestra uses Google Analytics on eligible public website pages only when website analytics is enabled and you have allowed analytics through our privacy choices. We use Google Analytics to understand website traffic, measure campaign effectiveness, improve landing pages and public content, and measure clicks to the App Store and Google Play. If you decline analytics, Aurestra does not load Google Analytics or send website analytics page views or events.

We do not intentionally send account records, authenticated user IDs, email addresses, names, phone numbers, horse records, stable or business data, invoice identifiers, contact-form message contents, or other sensitive app data to Google Analytics. You can allow or decline analytics through Aurestra’s privacy choices and change your choice later through the Privacy choices link in the public website footer.

Google may process analytics information outside your country, subject to applicable safeguards. Aurestra is not currently using Google Analytics for advertising personalization or remarketing.

4. Sharing

  • Processors: hosting, analytics providers including Google Analytics/Google and Sentry, messaging, and storage providers.
  • Imported Contacts: with your direction, imported contacts may be shared with authorized users in your account or workspace and with service providers needed to store the data and send invitations, invoices, boarding updates, ownership requests, and other service-related communications you request or enable through the Services, including Twilio for SMS delivery.
  • Subscriptions & Payments: Apple App Store, Google Play Billing, and RevenueCat for subscription entitlements, and Stripe for online invoice payments, connected-account verification, payouts, and eligible refunds.
  • Legal/Safety: to comply with law or protect rights and safety.

5. Data Retention

We retain data for as long as necessary for the purposes above, then delete or anonymize it unless a longer period is required by law or to resolve disputes.

Imported contacts are retained as part of your account until you delete the contact, remove the related record, or delete your account, unless we must keep limited information for legal, security, fraud-prevention, or recordkeeping reasons.

First-party marketing request and store-click records are not linked to an account and are retained for up to 180 days. Registration attribution remains associated with your account and is removed when the account is deleted.

Contest and event-activity records are retained for as long as needed to administer progress, select and contact winners, fulfil prizes, meet recordkeeping requirements, and resolve disputes. We then delete or anonymize them unless a longer period is required by law.

For account deletions, we process verified requests within 30 days; certain limited records may be retained as required by law (for example, billing and anti-fraud).

6. Your Rights

Depending on your location, you may request access, correction, deletion, portability, or restriction of your data. You can also object to certain processing. Contact us at info@aurestra.com.

6A. Account Deletion

You can delete your account in the Aurestra app by opening the Dashboard, clicking your avatar, choosing View Profile or Edit Profile, then scrolling to Delete Account.

If you cannot access the app, email info@aurestra.com to request deletion. We verify requests and complete deletion within 30 days. See aurestra.com/delete-account for full instructions.

  • Scope: We delete your account profile, authentication details, user settings, and personal data stored in Aurestra.
  • Shared records: Items you contributed to shared workspaces may remain available to authorized users, but will be disassociated from your identity where possible.
  • Legal/financial records: We may retain limited information required by law or for legitimate interests (for example, invoice/payments metadata and audit logs).
  • Backups: Redundant backups are overwritten on a rolling basis and purged during their normal cycle.
  • Reversal: Account deletion is irreversible once complete.

7. International Transfers

Your data may be processed in countries other than your own. We use appropriate safeguards where required.

8. Children

The Services are not directed to children under 13 (or as defined by local law). We do not knowingly collect data from children.

9. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data. No method is 100% secure.

The Services may link to third-party sites. Their privacy practices are governed by their policies.

11. Changes to this Policy

We may update this Policy. We’ll revise the “Last updated” date and, where appropriate, notify you in the app or by email.

12. Contact

Aurestra Equestrian Inc.
Email: info@aurestra.com