Aura doesn't need an account, keeps your decks on your phone, and sends your notes to an AI service only to make your flashcards.
This policy explains what information Aura: AI Flashcards & Study ("Aura", "the app") handles, why, and who it is shared with. Aura is made by Fernquill Studio, an independent developer based in British Columbia, Canada ("we", "us").
Effective date: October 12, 2026
Questions: fernquill.support@gmail.com
We collect only what the app needs to make cards, apply scan limits and handle subscriptions. We never ask for your name, email or phone number.
Study material you submit. Photos you take or choose, files you pick (PDF, Word, PowerPoint, text or Markdown) and text you paste. These are sent to our server to create cards and are not stored there afterwards (see the next section).
An anonymous app ID. On first launch the app creates a random ID so our server can recognize your device. It isn't linked to your name, email or phone number.
Usage records. For each scan: the date and time, the type of input (images, PDF or text), the AI model used, the amount of material processed and whether it worked. We also keep your monthly scan count and a daily total for the whole app. These records never contain your notes or cards.
Card reports. If you tap Report on a card, we receive the reason you chose and that card's question and answer text (up to 1,000 characters each), linked to your anonymous app ID.
Subscription status. If you subscribe, Google Play handles the payment. We receive whether your subscription is active, through our subscription provider. We never see your card or bank details.
Basic connection data. When the app connects to our services, the servers involved receive your IP address and basic device and network information, as with any internet service. It is used to deliver the service and keep it secure.
Crash reports. If the app crashes or hits an error, it sends a technical report so we can fix the problem: the error details, app version, device model and Android version, linked to your anonymous app ID. Crash reports never include your notes, cards, scanned text, files or photos.
Permissions. The app asks for camera access only to take photos of your notes, and opens your photos or files only when you choose them. If you turn on study reminders, it asks for permission to send notifications. Reminders are created and delivered on your phone, and nothing about them is sent to us.
What we don't do. We don't collect your contacts or location, the app shows no ads, and we don't sell your information or use it for advertising.
Your material goes to our server, then to Anthropic's Claude AI to write the cards, and the cards come back to your phone. Our server doesn't keep a copy.
You choose photos, a file or text in the app.
The app shrinks large photos and sends the material over an encrypted connection to our server, which is hosted by Supabase in Canada.
Our server sends it to Anthropic's Claude AI service, which writes the flashcards.
The cards come back to your phone. You review them, and only the ones you save are stored, on your phone.
Anthropic's handling. Anthropic processes the material under its commercial terms. Under those terms it doesn't use the material to train its AI models, and it deletes it automatically after a short period (currently up to 30 days). It may keep material longer if it is flagged for a safety review or if the law requires it. See Anthropic's privacy policy.
Please be careful what you scan. Don't send material you aren't comfortable sharing with an AI service, such as other people's personal information, medical or financial records, or ID documents.
Your decks, cards, review history and exam dates are stored only on your phone, and we can't see them.
They stay in the app's own storage on your device. If you uninstall the app or clear its data, they are deleted, and we can't recover them. To keep a copy, use Back up deck, or export a deck for Anki or as a spreadsheet. These files are created on your phone and go only where you choose to share or save them, such as your own cloud storage or email. Files you import are read on your phone and are not sent to us.
We use the information above only to run Aura. We don't sell it or use it for advertising.
To create your flashcards.
To apply the free and Pro scan limits and to prevent abuse.
To provide and restore your subscription.
To review reported cards and improve card accuracy.
To understand running costs and keep the service working.
To meet our legal obligations.
We share information only with the five providers below, and only what each needs to do its job.
Supabase hosts our server and database (in Canada). It receives your anonymous app ID, usage records and card reports, and your material passes through it while cards are made.
Anthropic provides the AI that writes your cards. It receives the material you submit for each scan.
RevenueCat manages subscriptions. It receives your anonymous app ID, subscription status and basic device information.
Sentry collects crash reports. It receives the crash details described above, linked to your anonymous app ID.
Google Play handles app distribution and payments. It receives your payment and purchase details, which Google manages.
We may also disclose information if the law requires it, or to protect the safety of our users or the service.
We keep server records only as long as we need them, and we never keep a copy of the material you scan.
Material you scan: not kept by us. Anthropic deletes it as described above.
Usage records and scan counts: up to 24 months, then deleted.
Card reports: until reviewed, and no longer than 12 months.
Anonymous app ID: until you ask us to delete it.
Connections between the app and our services are encrypted (HTTPS). Our database blocks access to other users' records, and the keys our server uses are never stored in the app. No system is perfectly secure, but we work to protect your information.
Aura isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has used the app and sent us information, contact us and we'll delete it.
You can ask to see, correct or delete the information we hold about your anonymous app ID.
To make a request, email fernquill.support@gmail.com with the app ID shown on the app's About screen. We have no name or email on file, so we need that ID to find your records.
To delete everything on your phone, uninstall the app or clear its data.
To cancel a subscription, use Google Play's Subscriptions settings.
If you're in Canada, you can also contact the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for BC. If you're in the European Union or United Kingdom, you have rights under the GDPR, including access, correction, deletion and objection, and you can complain to your local data protection authority.
Our server and database are in Canada. Anthropic, RevenueCat and Sentry are based in the United States, so information they receive may be processed there.
If we change this policy, we'll post the new version here with a new effective date. For important changes, we'll also let you know in the app.
Fernquill Studio, British Columbia, Canada
fernquill.support@gmail.com