Privacy policy

1. Who is responsible for your data

Aasta is the trading name of the service described in this policy. The data controller is Aasta Ispania SL (registered address: Calle de la Toronga 11-13 Centro, 28043 Madrid, Spain; Spanish tax ID (NIF): B82495250); Cefiro 8 Digital SL develops and publishes the app on the App Store and Google Play on behalf of Aasta Ispania SL.

For any privacy question, write to privacy@aasta.care.

2. What data we collect

Account data: name, email address, password (stored encrypted, never in plain text), and your role in the app (family member/monitor or older adult).

Pairing data: which accounts are connected to each other.

Phone number of the person being cared for: their family member enters it when creating the link, and it exists for one thing only — so that family member can call them from the app. It is not shared with anyone, it is not used to send them messages or advertising, and it never leaves the server except towards the app of the family member who entered it.

Location: only if the older adult explicitly turns it on from their own phone. Depending on the plan, we store a one-off lookup or a continuous history (see the retention section below).

Battery and phone activity: battery level, and whether the app is reporting normally.

Voice messages: the recordings the older adult and their family send each other in the app, including the audio file itself. Aasta has no text chat.

Photos their family sends them: a family member picks a photo from their own camera roll and the app uploads it so that it appears on the older adult's screen, either as the photo of the day or as a welcome photo in the background. It only ever travels one way: from the family's phone to theirs. Aasta does not read the older adult's camera roll and never asks them for photo-library permission, and nobody looks inside a photo: there is no face recognition and no tagging.

A family member's profile picture: each family member can, if they want, add a photo of themselves so the older adult recognises them by their face instead of their initials. Only you can set your own, and the server redraws the image before storing it, so nothing hidden in the original survives — in particular, the latitude and longitude the camera writes into the file are not kept.

Answers to "how are you?": when a family member asks how they are, we store that request and, if they answer, their answer — that they are fine, or that they would like a call. Only one is stored per link: a new request replaces the previous one. We measure nothing else about how the app is used: we do not store which screens are opened or where anyone taps.

Phone model and settings of the older adult: only if they expressly allow it from their own phone, one specific family member can see their phone model and the operating system and app versions, in order to suggest settings that make the phone easier to use (for example, larger text). This is a separate consent and can be withdrawn at any time. They also see whether the phone is connected over wifi or mobile data, so they know whether a call will get through.

Technical data: a device identifier so we can deliver push notifications, app and OS version, and technical error reports (via Sentry, see section 5) which may include an error trace but never your password or the content of your messages.

The phone's country: when the account is created or the pairing accepted, the app tells us which country the phone is set to (a two-letter code, for example ES), never the language. We use it to know which features are available in each country and to count how many people use Aasta in each one. It is not location: it says nothing about where anyone is.

Payment data: handled directly by Apple, Google, or our subscription provider (RevenueCat) — Aasta never stores your card number.

3. What we use your data for

To provide the service: pairing accounts, showing your family member’s status, sending and displaying alerts and messages.

To bill paid plans.

To provide support when you contact us.

To find and fix technical bugs.

Never for advertising. Aasta shows no ads and does not sell data to third parties for advertising purposes, and does not use Google Analytics or similar tracking tools.

4. Legal basis

Contract performance: data needed for the basic operation of the service (account, pairing, subscribed plan) is processed because it’s necessary to provide the service you signed up for.

Explicit consent: location, inactivity detection, and any feature the older adult must actively turn on rely on their explicit, revocable-at-any-time consent, given from within the app itself.

Legitimate interest: technical error reports (Sentry) are processed under a legitimate interest in keeping the service working correctly, with personal data kept to a minimum.

5. Who we share your data with

We never sell your data to anyone, under any circumstances.

We use the following processors, each limited to what their function strictly requires: server and database hosting; Sentry, for technical error reporting; RevenueCat, for managing paid subscriptions; Expo, which all our push notifications pass through before Apple (APNs) and Google (FCM) deliver them to the phone — the text of a notification may contain the first name of the person it is about; and our transactional email provider, for account emails (confirmations, weekly reports).

Some of these providers may process data outside the European Economic Area (for example, in the United States). Where that happens, the transfer relies on the European Commission’s Standard Contractual Clauses or an equivalent adequacy mechanism.

We would only share data with authorities if required by law or a court order.

6. How long we keep your data

While your account is active, we retain data according to your plan: 3-day history on Free, 30 days on Plus, 365 days on Total.

Voice messages are deleted automatically after 7 days on Free, 90 days on Plus and 365 days on Total.

A voice message that the person who received it has marked to keep is not removed by that automatic clean-up and is kept with no time limit, up to ten kept messages per link. Deleting the account removes them along with everything else.

Photos the family sends for their screen are deleted seven days after the day they were shown, except the one being shown at that moment, which stays while it is theirs; photos still waiting their turn do not expire. The welcome photo, the one that stays in the background of their screen, has no time limit: it goes when their family changes or removes it.

A family member's profile picture is kept while it is set. There is no history: a new one replaces the previous one and the previous file is deleted at the same moment.

The phone’s country is kept while the account exists. The answer to a "how are you?" is kept while the link exists. Both are removed when the account is deleted.

If you delete your account (see the "Delete my account" page), we remove your data completely within 30 days, except for information we’re legally required to retain (for example, invoices, for tax purposes), which is kept only for the minimum period the law requires.

7. Your rights

You have the right to access your data, correct it if inaccurate, request its deletion, ask us to restrict processing, object to a specific processing activity, and request portability of your data to another service.

You can exercise these rights by writing to privacy@aasta.care, or directly by deleting your account from the relevant page.

If you believe we haven’t handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your own country’s data protection authority.

8. Minors

You must be an adult to open a family member account, as the terms of use also say. We do not ask for a date of birth and we do not verify age at sign-up: this is a condition of use, not a technical check. If the connected older adult needs help from a minor to use their phone for any reason, responsibility for the account remains with the adult who created it.

9. Security

All communication between the app and our servers is encrypted (HTTPS/TLS). Passwords are always stored encrypted, never in readable text. Our team’s access to data is limited to what’s strictly necessary to provide support or keep the service running.

10. Changes to this policy

If we make a material change to this policy, we’ll notify you by email or with a notice in the app before the change takes effect.