This English version is a translation and may contain grammatical or wording errors; in case of any difference, the Catalan and Spanish versions prevail.
This policy explains how we process the data of your Aunova account at docent.aunova.app. It informs you; it does not ask for any acceptance.
In short
- Controller: Manuel-Alejandro Reyes Jiménez, tax ID (NIF) 46983824E, Avenida de Madrid 141, 1-1, es Iz, 08028 Barcelona, España. Contact: [email protected].
- What we do with it: we create and maintain your account (your name, your personal e-mail address, language and region), we store what you do in it (your material) and we measure, without saying which pages, whether you use the tool and how much, to know whether the beta works and for security.
- Legal basis: performance of the service you have requested and legitimate interest in security and in knowing whether the tool is used (sections 3.3 and 3.4).
- Who receives it: our hosting and e-mail providers (Cloudflare, Resend and GitHub), who act on our behalf. We do not disclose it for anything else.
- Do not enter student data. Aunova does not ask for it and has no fields for it.
- Your rights: access, rectification, erasure, objection, restriction and portability, by writing to [email protected]. You can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).
1. What this document is
This is the privacy policy of the teacher edition of Aunova: a teacher's personal account at docent.aunova.app. It does not cover the website aunova.es (which has its own policy) nor the school and institution editions, which are governed by the contract signed with each of them.
Aunova is a platform for planning and preparing teaching. It does not store student data: it has no student accounts, no marks, no reports, no files and no field designed for this. It only processes professional data of adult teaching staff and the material that they write.
2. Who is the controller
| Holder | Manuel-Alejandro Reyes Jiménez, natural person |
|---|---|
| Tax ID (NIF) | 46983824E |
| Address | Avenida de Madrid 141, 1-1, es Iz, 08028 Barcelona, España |
| Contact and data protection e-mail | [email protected] |
Aunova is the controller of the processing of the data of your account (sections 3.1 to 3.6) and the processor of the free text that you write in your space (section 8). We have not appointed a data protection officer; for anything, write to [email protected].
3. Which data we process, what for and on which basis
3.1 The account
| Data | What for |
|---|---|
| An opaque identifier, the name you write, the language, the mode (independent or linked), the status of the account and when it was created | To have your account and show you your name |
| Your personal e-mail (never the school's), which one is the main one and when it was verified | To log in and to communicate with you |
| In which fragment your work lives and with which school code | So that your space is yours |
| The beta invitation you used (the code only as a hash; the e-mail, if it was tied to a person) and when | To register you |
| One-time codes (as a hash, 10 minutes), sessions (as a hash, with the identifier, not with the e-mail) and the limit of attempts per address | To log in securely |
| Optional: the name and logo of the school where you work and the region, for each school year, with when you ticked the declaration and which text | So that each document is printed with the branding of your school year. No school sees it. It can be corrected and deleted |
| Optional: the e-mail you send from, if you choose one (it may be the school's), whether you have confirmed it, and the confirm and deactivate codes only as a hash | To send the e-mails that you ask for. It is never used to log in or to recover the account. Whoever receives it can deactivate it without an account |
| If you signed up before, what you left on the waiting list (language and region) | To fill in your account with what you had already chosen |
Legal basis: performance of the service you have requested (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
The real e-mail never enters the fragment: within your work you are an internal identifier. Changing e-mail only affects the directory.
3.2 What you do with the tool (your material)
The material you create (teaching programmes, exams, notes, tasks…) and its authorship trail (who wrote it and when). For free text, see section 8.
Legal basis: performance of the service (Article 6(1)(b)).
3.3 Security and limits
Error log without screen content or address parameters, and login-attempt limits, to keep the service secure and working.
When you log in to your account, the browser receives a cookie with a random number. We keep only its hash, with when you first and last logged in from that browser and whether it was new to your account. Its only purpose is to let you see, in Account › Security, the logins from a new device in the last 30 days, so you can tell whether someone else has got into your account. We do not keep which browser it is, the IP address or where you are, and we do not show it to anyone else.
Legal basis: legitimate interest in the security of the service and in avoiding use that causes us costs we cannot bear (Article 6(1)(f)). Balancing: the processing is the bare minimum (it carries no content or IP address), it serves an interest that is also yours (that your account and the service are secure) and, given its scope, we do not expect it to harm you; you have the right to object (section 10).
3.4 Activity measurement
Aunova measures whether you use the tool and how intensively:
- One row per 5-minute interval with activity (your identifier, the start of the interval and how many pages you have opened).
- Per day and tool: the language and region at that time, how many pages you have opened and how many times you have saved.
They do not say which pages you have opened or what you did in them. They carry no text and no IP address. They are read only by the holder, to know whether the beta is used and which tools are used. It is an activity measurement per person; that is why we tell you about it.
Legal basis: legitimate interest (Article 6(1)(f)): knowing whether the service works and is used. Balancing: only counts are stored, with no content, and they are kept for 12 and 13 months; the interest (improving a free beta and detecting abusive use) justifies the processing, which is not invasive; you have the right to object by writing to [email protected] (section 10).
3.5 Cookies and storage
We only use technical cookies and storage, exempt from consent: the session, the cookie that recognises the browser you log in from (section 3.3; it lasts 400 days and is not deleted when you log out) and what the browser remembers of your preferences (language, active subject, options). There are no analytics, advertising or tracking cookies.
The platform's fonts and libraries are served from our own domain: we do not load anything from third-party services.
3.6 Communications
Essential service communications (login codes, beta notices, changes of conditions) do not require consent. News is only sent if you ask for it, with a separate, unticked box. You can stop receiving it at any time by writing to [email protected].
4. How long
| Data | Period |
|---|---|
| Account, material and authorship trail | While you have the account. After you leave, the periods in section 9 of the beta conditions |
| Activity measurement per 5-minute interval | 12 months; when it is read, the oldest intervals are deleted |
| Activity measurement per day and tool | 13 months; when it is read, the oldest are deleted |
| Error log | 90 days |
| Browsers you have logged in from (section 3.3) | 400 days without logging in from that browser: they are deleted the next time you log in. All of them, when you close the account |
| Deleted material (bin) | 30 days |
| Backups of the databases | 35 days; and a 30-day database history |
| One-time codes | 10 minutes |
| Sessions | Until they expire or you close them |
| Waiting list, if you signed up | Until you leave or 31 December 2027 at the latest; pending confirmation, 30 days |
When you leave and the account is deleted, we delete the data of the account and of your space, except what the law obliges us to keep. Backups keep what was there until they expire (35 days) and are not restored for anything else.
5. Who receives the data
5.1 Our providers (processors)
We do not disclose your data to third parties for their own purposes. It is processed, on our behalf, by:
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database and files | The databases of the directory and of the teachers are in Western Europe, without a jurisdictional restriction to the EU; the service runs on Cloudflare's network, which is not only European |
| Resend (Plus Five Five, Inc.) | Sending e-mails (codes, notices) | May process data in the United States |
| GitHub, Inc. | Executor of the daily backup of the databases: the data spends a few minutes there in clear before being encrypted | May process data in the United States |
The teacher edition has no AI integrated by Aunova, so no AI provider receives anything from us.
5.2 The recipients you choose
They are not ours: they are your decisions.
- Your AI, connected through the connector (Claude, ChatGPT, Gemini or the one you choose). What you let it see is processed by it, under its own conditions, not by us.
- The e-mails you send from Aunova, from the address you have chosen.
- The teachers you share with, if you share material.
6. Transfers outside the European Economic Area
Cloudflare, Resend and GitHub may process data in the United States. Transfers are made with the safeguards provided for by law for these cases. If you want more information, write to [email protected].
7. Security
We apply appropriate technical and organisational measures:
- Each teacher is a separate "school" within their fragment, and permissions are verified on the server on every write.
- Login with verified e-mail and a one-time code; optional second factor.
- Encrypted traffic (HTTPS); codes and passwords never in clear.
- Daily backups for 35 days and a 30-day database history.
Known limitations (we state them plainly): the files you upload have no backup; no penetration test has been carried out; the holder has technical access to the infrastructure, so it cannot be said that "no one else" sees what you write.
8. The free text you write (Aunova as processor)
Aunova does not ask for student data and has no field that is one. But you can write free text (remarks, meeting minutes, notes) and what you write may contain data of other people. We do not monitor you field by field: we treat it as if it did.
- For free text, Aunova acts as processor on your behalf, in accordance with the annex of the beta conditions. Normally, the controller of this text is your school; if you have none, it is you.
- You have undertaken not to enter identifying data of students or families. If any appears, it is your responsibility and that of your school, and you can tell us so that we help you delete it.
9. Your data and AI
In the teacher edition Aunova has no integrated AI. If you connect your own AI, see section 5.2: it is your decision and it is processed by it.
10. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected]. We answer within one month (extendable under the law).
- Access and portability: ask us for a copy of your space and we send it to you by e-mail, to the personal address of the account, within 15 days at the most.
- Rectification: your name, language and e-mail addresses, from your account.
- Erasure: you can ask for the account to be deleted by writing to us; it is deleted at the latest 30 days after.
- Objection to processing based on legitimate interest (sections 3.3 and 3.4).
- Withdrawal of consent, at any time, for whatever is done only with consent; it does not affect what was done before.
- Complaint: to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (www.aepd.es).
We do not take automated decisions or profile you.
11. Minors and age of majority
Aunova is for people aged 18 or over and for professional teaching use. There are no student accounts.
12. Change of holder
If the service comes to be provided by a company, we will tell you by e-mail at your personal account at least 30 days beforehand, with the company's details, and you will only move to it if you expressly accept (beta conditions, section 1). The personal data will be processed by the company for the same purposes and under the same conditions; we will inform you of the new controller before the operation. As long as you do not accept, the current holder remains liable for what arose before.
13. Changes to this policy
If we change this policy, we will publish it with a date and version. If the change affects how we process your data, we will tell you by e-mail. You do not need to accept it again: it is not accepted, it is informed.