Privacy Policy
Draft pending legal review. This document describes the intended behaviour of the product and must be reviewed by counsel before public release.
1.0-draft · 2026-09-16
What we collect
Account information: your email address and the identifiers your sign-in provider returns.
Health information you choose to track: cycle and period days, symptoms, mood, energy, sleep perception, sexual health entries, fertility observations, medications and free-text notes.
Health information you choose to connect: sleep, heart rate, heart rate variability, temperature change, activity and weight from Apple Health or Health Connect.
Technical information needed to run the service: device platform, app version, and error diagnostics with sensitive values removed.
What we never do
We do not sell your health data.
We do not use your health data for advertising, and we do not build advertising audiences from your cycle, fertility, pregnancy status, symptoms, medications, sexual activity or health metrics.
We do not send health values to third-party product analytics.
How AI is used
When you ask Aura a question, our servers compute statistics from your data and send those structured results, not your raw records, to a language model provider so it can phrase an explanation.
The model is not permitted to state a diagnosis, assert a cause, or report a number that was not computed from your own data. Answers are validated before you see them.
Your conversations are stored in your account so you can review them, and are deleted when you delete your account.
Your choices
You can export everything you have tracked at any time.
You can delete your account and data from inside the app.
You can disconnect a health data source at any time; disconnecting stops new data from arriving and does not change what you already tracked.
Analytics is off unless you opt in, and can be turned off again at any time.
Retention
Health data is retained while your account is active.
When you delete your account, your health data is deleted. Records that prove a consent was given, and security logs, are retained without your identity attached.
Exports are temporary and their download links expire.
Contact
Questions about this policy: privacy@aura.emachado.ai