This policy explains what Aura collects, why, who else sees it, and what you can do about it. Plain language, no dark corners.
What you write in Aura is stored so it can be given back to you, and sent to an AI provider so your content can be generated. Nothing else.
We do not sell your data. We do not run ads. We do not track you across other apps or websites.
You can delete everything from inside the app, at any time.
You never have to give us your real name, email or phone number to use the app.
Who we are
What we collect
What we do not collect
How we use it
AI processing
Who else processes your data
Where your data is stored
How long we keep it
Deleting your data
Your rights
Legal bases (EEA / UK)
Children
Security
Notifications and permissions
Changes to this policy
Contact
irems apps operates the Aura mobile application ("Aura", "the app"). We are the data controller for the personal data described in this policy. For anything in it, including privacy requests, write to iremsapps@gmail.com.
Your onboarding answers, the name you choose to be called, and anything you write in the app afterwards: desires, manifestations, wall entries, 369 ritual lines, action plans and favourites. Some of this may mention a city, a job, or people in your life, because you chose to mention it. Please do not enter other people's sensitive personal information.
An anonymous account ID is created for you on first launch, so your content can be saved without you giving us anything about yourself. If you choose Sign in with Apple, we also receive the identifier Apple gives us, and the name and email address you choose to share — which may be Apple's private relay address. We never receive your Apple ID password.
Whether you have an active subscription or trial, the product identifier, and the transaction status. Payment itself is handled entirely by Apple; we never see your card number, bank details or billing address.
Which screens you open, which features you use, and basic device and app information (device model, operating system version, app version, language, region, and a generated installation identifier). This is analytics, not content: it records that a screen was opened, not what you wrote in it.
If you allow notifications, a push token so a message can reach your device, and whether a notification was opened.
No precise location and no background location.
No contacts, photos, microphone, camera, health or fitness data.
No advertising identifiers, no cross-app or cross-site tracking, no data brokers, no advertising networks.
We do not ask for special-category data (health, religion, sexuality, politics). If you volunteer something sensitive in a free-text answer, it is stored and processed exactly like the rest of your content — and you can delete it at any time.
To run the app: to generate your stories, plans and ritual lines, and to show you your own content.
To keep your content across reinstalls and devices, if you sign in.
To handle subscriptions, trials and restoring purchases.
To send the reminders you asked for, and occasional product messages, if you allowed notifications.
To understand which parts of the app are used and where it breaks, so we can fix and improve it.
To protect against abuse, fraud and technical failure, and to comply with the law.
We do not use your content for advertising, we do not sell it, and we do not use it to build profiles about you for anyone else.
To generate your content, the app sends your interview answers and profile details to Anthropic, our AI provider, which processes them to produce a response and returns it to us. Under Anthropic's commercial terms, this input is not used to train its models.
The app does not use AI to make automated decisions that produce legal or similarly significant effects about you. Generated text can be inaccurate — see the Terms of Use for what that means for you.
If you would rather your writing were never sent to an AI provider, the app cannot work — generation is what it does. In that case, please do not use it.
We use a small number of service providers. Each processes data only to provide its service to us, under a contract that requires it.
Provider
What it does
What it sees
Apple
App distribution, Sign in with Apple, payments and subscriptions, push delivery
Account identifier, purchase records
Google Firebase
Authentication and the backup of your content (Cloud Firestore)
Account identifier and your saved content
Anthropic
Generating stories, plans, desires and ritual lines
Your interview answers and profile details
RevenueCat
Subscription status and receipt validation
Account identifier, purchase status
OneSignal
Delivery of push notifications
Push token, device basics, account identifier
Amplitude
Product analytics
Screen and event names, device basics — not the text you write
Unsplash
Background imagery loaded from their servers
Your device's IP address, as with any image on the internet
Your content is stored in Google Firebase's infrastructure, and our providers operate in several countries, including the United States. This means your data may be transferred outside your country of residence. Where required, these transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.
Your content — for as long as your account exists. Delete it and it is removed from your device and from our database.
Analytics events — kept in aggregated or pseudonymous form for up to 24 months.
Purchase records — kept for as long as tax and accounting law requires.
Reset & restart onboarding, on the app's profile screen, deletes your stories, desires, plans, rituals and wall entries.
Deleting your account removes your account and its stored content.
Deleting the app from your device removes the local copy. If you signed in, the backup stays until you delete the account.
You can always ask us to delete everything by writing to iremsapps@gmail.com.
Deleting your data does not cancel a subscription. Subscriptions are managed in your Apple account settings.
Depending on where you live, you have the right to:
access the personal data we hold about you, and receive a copy in a portable format;
have inaccurate data corrected;
have your data deleted;
restrict or object to how we process it;
withdraw consent at any time — for example by turning notifications off in your device settings;
not be discriminated against for exercising any of these rights.
To exercise any of these, write to iremsapps@gmail.com. We answer within 30 days. You also have the right to complain to your local data protection authority.
We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding twelve months.
Performance of a contract — running the app, generating your content, handling subscriptions.
Legitimate interests — security, abuse prevention, understanding and improving the app.
Consent — push notifications, which you can withdraw at any time in system settings.
Legal obligation — tax, accounting and responding to lawful requests.
Aura is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, write to iremsapps@gmail.com and we will delete it.
Data is encrypted in transit, and at rest by our infrastructure providers. Access to our systems is restricted, and our database rules allow each account to read and write only its own record. No system is perfectly secure, so we cannot guarantee absolute security — but if a breach affects you, we will notify you and the relevant authority as the law requires.
Aura asks for permission to send notifications so it can deliver the reminders you set up. You can say no, and the app still works. You can change your mind at any time in your device's settings; turning notifications off stops all messages from us.
If we change this policy materially, we will make the change visible in the app before it takes effect and update the date at the top of this page.
Privacy questions and requests: iremsapps@gmail.com