This privacy notice applies to the Aura Parental Controls. It should be read in conjunction with Aura’s general Privacy Policy and it describes personal data processing practices as it relates to the personal data we collect from children. Data we collect about you, the parent, along with Aura’s contact data, can be found in our general Privacy Policy. Where there is an inconsistency between the general Privacy Policy and this notice, this notice prevails.
This section describes the specific categories of data that the Aura Parental Controls products collect from your minor child. We use the data collected to deliver Aura’s Parental Controls services to you, the parent or legal guardian.
Personal Data we collect from Children
In addition to the personal data collected from you as part of your Aura account registration and mobile application use, when you install the Aura Parental Controls software on any devices operated by your children, you authorize Aura to collect and process the following personal data and other data from your children:
- Communications Data: The Parental Controls software captures the content of communications associated with any accounts you expressly authorize Aura to access on your behalf. This data collection may include the identities of the social posters or message authors, the content of the posts or messaging, as well as the date, time and frequency of the messaging. This content is not retrievable by Parents or other users through the software. The data collected is exclusively used to provide Parental Controls alerts to Parents and to improve our software. AS DESCRIBED IN OUR TERMS OF SERVICE, BY USING THE PARENTAL CONTROLS SOFTWARE, YOU EXPRESSLY AUTHORIZE AURA TO PROCESS THIS DATA ON YOUR BEHALF, AND INDEMNIFY AURA FROM ANY THIRD PARTY CLAIMS, INCLUDING ANY STATE OR FEDERAL ‘WIRETAP’ LAW CLAIMS, ASSOCIATED WITH THE COLLECTION OF THIS DATA ON YOUR BEHALF.
- Device Data. Aura will collect the following data from your children’s devices to Aura in our administration of the Services:
- Device navigation (such as the websites visited or apps used, and the times and days allocated to such uses);
- Amount of time the device is used;
- Device data, including certain persistent identifiers (IP addresses, device identifiers, timezone, device type, carrier network, and an internal identifier);
- Keystrokes. If you activate Parental Controls and add the Aura keyboard to your minor child's device to enable Online Balance, Aura will collect the keystroke patterns of the child's device and the platforms, apps, and websites those keystrokes took place. You may deactivate this feature at any time to stop the collection of keystroke patterns.
- Third Party Account Data. If you, the parent or legal guardian, activate Parental Controls and provide your minor child’s third party account credentials as part of Online Balance, Aura may access the accounts and extract the following data:
We also may collect the following data from you about your children:
- Identity Data. When adding a child to the Parental Controls, Aura will collect the name of your child and their date of birth. You may also choose to provide Aura the gender of your child.
- Photos. You may choose to upload and provide us with an image of your child that is stored on your device.
How Do We Use Your Minor Child’s Personal Data?
Aura uses your minor child’s data for the purposes described below. Aura employs internal risk management functions to ensure we continue to only use this personal data for the purposes we disclose to you and are taking appropriate steps to protect that personal data from exposure.
Sale or Sharing of Data: We never sell personal data from the Aura Parental Controls product and we do not share data with third parties for their own marketing or advertising purposes, or creating advertising profiles. Additionally, our app is not ad supported, and we do not share personal data from our app with third party advertising services, and we do not or to advertise third party products in the Aura Parental controls product.
- To provide, maintain, troubleshoot, and support our services. We use your minor child’s personal data for this purpose on the basis that it is required to fulfill our contractual obligations to you. Examples: provide you with insights into your minor child’s online behaviors; block content or applications on your minor child’s device that you find objectionable; identify which websites visited or apps used, as well as the times and days allocated to such uses.
- To operate or improve our services and advance our legitimate interests. We want to offer you the best services and user experiences we can. Where applicable, we have a legitimate interest in continually improving and optimizing our services. To do so, we use your minor child’s personal data to help ensure the effective delivery of our services and communications to you. Examples of when we may use your minor child’s personal data for this purpose:
- enable participation in interactive features of our services;
- analyze certain usage, device, and diagnostic data to understand aggregated usage trends and user engagement with our services (and, for example, invest in technical infrastructure to better serve regions with increasing user demand);
- use device and threat data to conduct sleep, mental health, behavioral and other scientific research to improve our detection capabilities;
- improve our machine-learning algorithms to enhance our services;
- For measurement, research and analytics, including to develop new services. Where applicable, we have a legitimate interest in using your minor child’s personal data for measurement, research and analytics, including to plan for and develop new services. For example, we may analyze certain usage data to understand a device user’s sleep patterns.
- Aggregated or anonymized data, for any purpose where the data is aggregated or anonymized so that no individual data is directly, or indirectly, identifiable.
- To prevent harm or liability. We may use data for security purposes (such as to investigate security issues or to monitor and prevent fraud) and to prevent abuse. We may do this to comply with our legal obligations, to protect an individual’s vital interests, or because we have a legitimate interest in preventing harm or liability to Aura and our users. For example, we may use account, usage, and device data to determine if an entity is engaging in abusive or unauthorized activity in connection with our Services.
- For legal compliance. We internally use your minor child’s data as required by applicable law, legal process, or regulation. We also use your minor child’s data to enforce our legal rights and resolve disputes and complaints.
- Use of Persistent Identifiers: As described above in the “Personal Data We Collect from Children” section, Aura may collect and process certain persistent identifiers, including IP addresses and device identifiers. We use these persistent identifiers solely for the purpose of supporting internal operations. Specifically, we use this data for analytics, research, and to overall improve our products and services. We do not use persistent identifiers for behavioral advertising or creating a profile on any specific individual. We ensure that persistent identifiers are not used for unauthorized purposes by implementing strict policies and procedures, including technical and administrative measures. We retain persistent identifiers only for as long as necessary to support our internal operations. For information about how Aura shares persistent identifier data with third party service providers, please refer to the “Who Do We Share Your Child’s Personal Data With and Why?” section below.
Who Do We Share Your Child’s Personal Data With and Why?
Aura shares the above categories of data as follows with service providers as part of our continuous improvement process of our Parental Controls product and to ensure it continues to provide industry-leading protection in light of ever evolving threats:
- Technical Service Providers. We share this data with our technical service providers to enable us to make our services available to you. These service providers are contractually restricted from using this data for their own independent business purposes.
- Where Legally Required. We do not share this data with third parties unless required to comply with our legal obligations; to comply with legal process; and to respond to valid law enforcement requests relating to a criminal investigation, or alleged or suspected illegal activity that may expose Aura, you, or any of our other users to legal liability. If we share your data for these purposes, we limit the data shared to what is legally necessary and challenge data requests that we believe are unlawful, overbroad, or otherwise invalid.
Data Retention
Aura generally retains children’s personal data for only as long as is reasonably necessary to fulfill the specific purpose for which the data was collected, such as to provide the services to you, the parent or legal guardian. We may also retain personal data if required by law, or, where applicable, for our legitimate interests, such as abuse detection and prevention, and defending ourselves from legal claims. Residual copies of personal data may be stored in backup systems for a limited period as a security measure to protect against data loss.
Your Rights Regarding your Child’s Account or Data
A parent or legal guardian has a right to request to review or have deleted their child’s personal data and may withdraw consent for Aura to collect any further personal data from the child. You may exercise these rights by submitting a request at https://preferences.aura.com/privacy or contacting us at privacy@aura.com.
Contact Us
If you have any questions or complaints about our privacy practices, you can contact us by telephone at +1 (844) 914-2991, via email at privacy@aura.com, or by mail to the following address:
Aura Sub LLC dba Aura
250 Northern Ave.
3rd Floor
Boston, MA 02210
For all other policies and practices related to Aura’s data collection, use, sharing, retention and security controls, please refer to our Privacy Policy.