Your data,
your call.

About this policy

This Privacy Policy applies to the Auras mobile app, the Auras website, and related services. It does not apply to services operated independently by Apple, Google, or other third parties.

Information we collect

We collect information you provide, information created through your use of Auras, and limited information needed to operate the service.

• Account information. When you sign in with Apple or Google, we receive an account identifier and may receive your email address. If you use phone verification on our website, we process your phone number and verification status.
• Profile information. This may include your first initial, birth date, country or region, interests, appearance choices, and other profile details you choose to provide.
• Answers and aura information. We process onboarding answers, daily responses, scenario answers, color choices, aura colors, traits, personality measurements, and related results needed to create and evolve your aura.
• Activity and purchase information. We process product interactions, consent choices, referral activity, and subscription or entitlement status. Apple processes your payment details. Auras does not receive your complete payment card information.
• Social content. If you use social features, we may process posts, comments, likes, follows, connections, messages, reports, and blocks that you create or direct us to share.
• Support communications. If you contact us, we receive your email address and the information you choose to include.
• Website security information. Our website providers may process device, browser, IP address, and security signals to deliver the site, prevent abuse, and complete phone verification.

Your journal stays on your device

In the current version of Auras, journal entries, transcripts, moods, prompts, recording duration, and Daily Ten progress are stored locally on your device. Auras uses participation patterns, such as days journaled, streaks, and use of voice journaling, to update your experience. It does not score or upload the meaning of your journal text.

Locally stored information may remain on that device until you delete the relevant entry or remove the app and its data. It is not restored from our servers after the local data is removed.

Microphone and speech recognition

If you choose to speak a journal entry, Auras requests microphone and speech recognition permission. Speech recognition runs on your device when supported. If on-device recognition is unavailable, Apple's speech recognition service may process audio under Apple's privacy terms. Auras stores the resulting transcript locally and does not keep a separate audio recording.

How we use information

We use information to authenticate accounts, create and evolve auras, personalize the experience, provide features you choose to use, maintain subscription access, operate referrals, respond to support, keep the service secure, prevent misuse, comply with law, and improve Auras when you have given the applicable permission.

Your optional data choices

Auras asks separately whether you want to help improve the color engine and matching, or contribute eligible responses to grouped research datasets. Both choices are off by default. The app continues to work if you decline.

Research contribution is available only to adults. Eligible research data is grouped or deidentified at the cohort level. It does not include your name, journal entries, private messages, or who you communicate with. Current consent does not permit Auras to create an individual digital replica of you.

You can review or withdraw either choice in Privacy & Data inside the app. Turning a choice off stops future use for that purpose and removes your information from the next research dataset release. It may not remove information from a dataset that was previously released in grouped or deidentified form.

When information is shared

We do not sell personal information or journal entries. We share information only with providers that help us operate Auras, when you ask us to share something, for grouped research you explicitly permit, during a business transaction subject to appropriate safeguards, or when reasonably necessary to comply with law, protect users, or enforce our rights.

Providers may include Apple for authentication, purchases, and speech recognition; Google for authentication; Supabase for authentication and backend services; Firebase and Google reCAPTCHA for website phone verification and abuse prevention; and hosting or infrastructure providers. We require providers processing information for us to use appropriate protections and process it only for the services they provide, subject to their own terms where they act independently.

Retention and security

We keep account and service information while your account is active and only as long as reasonably needed for the purposes described here, legal obligations, dispute resolution, security, and fraud prevention. Apple separately controls its transaction records. We use reasonable administrative and technical safeguards, but no system can guarantee absolute security.

After account deletion, Auras may retain a deidentified color record with no account owner solely to preserve the promise that an issued color is not reassigned. We may also retain limited information when legally required or necessary for security and fraud prevention.

Deletion and other choices

You can change optional data choices in Privacy & Data, manage device permissions in iOS Settings, delete individual journal entries, and delete your Auras account from the app's account settings. Account deletion permanently removes the account and information attached to it from our backend systems, subject to the limited retention described above.

Account deletion does not automatically cancel an Apple subscription. Manage or cancel subscriptions through your Apple Account settings. Because journal and Daily Ten information is stored locally, remove the app and its data to ensure all remaining local information is removed from the device.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. To make a request or get help when you cannot access the app, email team@auras.so. We may need to verify your identity before completing a request.

International processing

Auras and its providers may process information in the United States and other countries. Where required, we use appropriate safeguards for transfers across borders.

Children

Auras is not directed to children under 13, and people under 13 may not create an account. People under 18 are not eligible to contribute information to research datasets. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this policy as Auras evolves. We will post the updated policy here and revise the effective date. If a change materially expands how optional data is used, we will request a new choice when required.

Contact

Questions or privacy requests can be sent to team@auras.so.