Last updated: Nov 2, 2025
This Privacy Policy explains how Aurestra Equestrian Inc. (“Aurestra”, “we”, “us”) collects, uses, and shares information about you when you use our website, mobile applications, and related services (collectively, the “Services”).
1. Information We Collect
- Account & Contact: name, email, optional phone, and preferences.
- Imported Contacts: if you choose to use contact import, we may collect contact details from your device address book, such as name, email address, phone number, and company or organization name, and upload those details to Aurestra’s servers to create contact records in your account.
- App Data: horse/stable/business records you create, files you upload.
- Usage: device identifiers, OS, app version, in-app actions, crash logs (for example, Sentry).
- Website Analytics: when you accept analytics cookies on our public website, we may collect pages viewed, approximate location derived from IP address, browser and device type, referring page or campaign, interactions with public links and download buttons, and cookie or similar analytics identifiers.
- First-Party Acquisition Measurement: on public marketing pages and our fixed App Store and Google Play links, we record the requested marketing page, time, limited campaign labels you received in the link, destination store, and a coarse automated-or-unclassified traffic category. We do not retain an IP address, user agent, full referrer, full query string, advertising click ID, or persistent browser or device identifier in these acquisition records.
- Contests and Event Activities: checkpoint progress, contest entries, a private progress identifier, and, when you choose to enter, your first name and either an email address or phone number. If you separately choose to receive Aurestra updates, we also retain that marketing choice and when it was made.
- Purchase: subscription status via App Store / Google Play / RevenueCat (no full card details pass through us).
2. How We Use Information
- Provide, maintain, and improve the Services.
- If you grant contact access and use the contact import feature, upload the contact details you import to our servers so you can store, organize, link, and manage those contacts within Aurestra.
- Use imported contacts to support features you request, such as contact management, stable and horse records, bookings, lessons, invoicing, ownership records, and invitations, invoice delivery, boarding updates, ownership confirmations, and other service-related communications you choose to send or enable through Aurestra.
- Personalize features and communicate about updates, security, and support.
- Process subscriptions and entitlements through Apple, Google, and RevenueCat.
- Use website analytics to understand public website traffic, measure campaign effectiveness, improve landing pages and public content, and measure App Store and Google Play click-through activity.
- Compare limited first-party acquisition request and click counts with campaign context supplied by store platforms or the Aurestra app at registration, and with aggregate registration, stable, and horse creation patterns.
- Save progress in contests and event activities, administer entries, contact selected winners, and fulfil prizes. Signing up for Aurestra marketing is separate and is not required to participate.
- Prevent abuse, secure accounts, and comply with legal obligations.
2A. Imported Contacts
Aurestra only accesses your device contacts after you grant the operating-system permission and use the contact import feature. If you do so, the contact details you import are transmitted to and stored on Aurestra’s servers as part of your account data.
We use imported contacts to create and maintain contact profiles, associate contacts with the horses, stables, bookings, lessons, invoices, and other records you manage in Aurestra, and to send invitations, invoice delivery, ownership confirmations, boarding updates, and other service-related communications you choose to send or enable through Aurestra. We do not sell imported contacts.
Imported contacts may be visible to you and to other authorized users within the relevant Aurestra account, stable, or workspace when you associate those contacts with shared records or workflows. If you use Aurestra to send or enable an invitation, invoice, boarding update, ownership request, or similar service-related communication, we may share the necessary contact details with our hosting, email, SMS, storage, and other service providers acting on our behalf to deliver that function, including Twilio for SMS delivery.
3. Legal Bases (EEA/UK)
We process personal data under: (i) contract (to provide the Services), (ii) legitimate interests (security, product improvement), and (iii) consent where required (for example, device contact access, contact import, and certain marketing).
3A. Website Analytics and Cookies
Separately from Google Analytics, Aurestra records privacy-minimized first-party counts when a public marketing page is requested or a fixed Aurestra store link is used. These records contain only normalized campaign labels and limited page, store, time, platform, and coarse automation information. They do not use cookies or persistent anonymous identifiers and do not represent unique visitors, people, or sessions.
Store platforms may process campaign-level parameters on Aurestra’s store links. Where the Aurestra app can retrieve and supplies limited campaign context when an account is created, Aurestra associates the first accepted attribution with the account so later creation of a stable or horse can be measured from Aurestra’s own records. Aurestra does not use this system for cross-company advertising tracking.
Aurestra uses Google Analytics on eligible public website pages only when website analytics is enabled and you have allowed analytics through our privacy choices. We use Google Analytics to understand website traffic, measure campaign effectiveness, improve landing pages and public content, and measure clicks to the App Store and Google Play. If you decline analytics, Aurestra does not load Google Analytics or send website analytics page views or events.
We do not intentionally send account records, authenticated user IDs, email addresses, names, phone numbers, horse records, stable or business data, invoice identifiers, contact-form message contents, or other sensitive app data to Google Analytics. You can allow or decline analytics through Aurestra’s privacy choices and change your choice later through the Privacy choices link in the public website footer.
Google may process analytics information outside your country, subject to applicable safeguards. Aurestra is not currently using Google Analytics for advertising personalization or remarketing.
4. Sharing
- Processors: hosting, analytics providers including Google Analytics/Google and Sentry, messaging, and storage providers.
- Imported Contacts: with your direction, imported contacts may be shared with authorized users in your account or workspace and with service providers needed to store the data and send invitations, invoices, boarding updates, ownership requests, and other service-related communications you request or enable through the Services, including Twilio for SMS delivery.
- Payments: Apple App Store, Google Play Billing, and RevenueCat for entitlements.
- Legal/Safety: to comply with law or protect rights and safety.
5. Data Retention
We retain data for as long as necessary for the purposes above, then delete or anonymize it unless a longer period is required by law or to resolve disputes.
Imported contacts are retained as part of your account until you delete the contact, remove the related record, or delete your account, unless we must keep limited information for legal, security, fraud-prevention, or recordkeeping reasons.
First-party marketing request and store-click records are not linked to an account and are retained for up to 180 days. Registration attribution remains associated with your account and is removed when the account is deleted.
Contest and event-activity records are retained for as long as needed to administer progress, select and contact winners, fulfil prizes, meet recordkeeping requirements, and resolve disputes. We then delete or anonymize them unless a longer period is required by law.
For account deletions, we process verified requests within 30 days; certain limited records may be retained as required by law (for example, billing and anti-fraud).
6. Your Rights
Depending on your location, you may request access, correction, deletion, portability, or restriction of your data. You can also object to certain processing. Contact us at info@aurestra.com.
6A. Account Deletion
You can delete your account in the Aurestra app by opening the Dashboard, clicking your avatar, choosing View Profile or Edit Profile, then scrolling to Delete Account.
If you cannot access the app, email info@aurestra.com to request deletion. We verify requests and complete deletion within 30 days. See aurestra.com/delete-account for full instructions.
- Scope: We delete your account profile, authentication details, user settings, and personal data stored in Aurestra.
- Shared records: Items you contributed to shared workspaces may remain available to authorized users, but will be disassociated from your identity where possible.
- Legal/financial records: We may retain limited information required by law or for legitimate interests (for example, invoice/payments metadata and audit logs).
- Backups: Redundant backups are overwritten on a rolling basis and purged during their normal cycle.
- Reversal: Account deletion is irreversible once complete.
7. International Transfers
Your data may be processed in countries other than your own. We use appropriate safeguards where required.
8. Children
The Services are not directed to children under 13 (or as defined by local law). We do not knowingly collect data from children.
9. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data. No method is 100% secure.
10. Third-Party Links
The Services may link to third-party sites. Their privacy practices are governed by their policies.
11. Changes to this Policy
We may update this Policy. We’ll revise the “Last updated” date and, where appropriate, notify you in the app or by email.
12. Contact
Aurestra Equestrian Inc.
Email: info@aurestra.com