Aura Privacy Policy

Last Updated: 28 September 2026
Effective date: 28 September 2026

1. Introduction

This policy explains how Aura: Biohacking & Longevity ("Aura", "we", "us") handles your information. Aura is built to keep your data on your own devices and in your own iCloud. We want this to be easy to read, so we keep it short and plain.

The short version:

• You do not create an account. We never ask for your name, email or phone number.
• There are no ads in Aura, and we do not track you across other apps or websites.
• Your Apple Health data is processed on your device. We never sell it, never use it for advertising and never share it with data brokers.
• We collect anonymous app-usage analytics that never include health values.

2. Information we do not collect

• No account. Aura has no sign-up or sign-in.
• No contact details. We do not collect your name, email address, phone number or postal address.
• No advertising identifier. Aura does not use the IDFA and does not show the App Tracking Transparency prompt, because there is nothing to track.
• Your content stays yours. Your rituals, logs and bio age history are stored on your device, and in your own private iCloud if you turn on sync. They are not stored on our servers.

3. Apple Health data

With your permission, Aura reads data from Apple Health. Aura only reads. It does not write data to Apple Health.

What Aura reads:

• Date of birth and biological sex
• Heart rate, resting heart rate and heart rate variability (HRV)
• VO2 max and respiratory rate
• Steps, flights climbed, active energy and time in daylight
• Height and body weight
• Sleep and workouts
• Menstrual flow, only if you turn on Cycle-aware scoring (see below)

You choose which of these to allow. Aura works with whatever you share.

Cycle-aware scoring (optional, off by default): if you turn it on in Settings, Aura asks separately for permission to read the periods you log in Apple Health. It uses them on your device to work out your cycle phase and to compare your HRV and resting heart rate with the same phase of your own past cycles. Aura does not store your period data; it reads it from Apple Health when needed. Your cycle data, your phase and even whether the setting is on are never sent to our analytics provider. Turn it off in Settings at any time, and remove the permission in the Health settings below.

How Aura uses it: to estimate your bio age and your Fitness, Heart and Sleep ages, and to show readiness, wellness scores and Discoveries. These calculations happen on your device.

What we never do with health data:

• We never sell it.
• We never use it for advertising or marketing.
• We never share it with data brokers or other third parties.
• We never send it to our analytics provider.

iCloud sync: if you are a Pro user and turn on iCloud sync, your Aura snapshots (which include values derived from Health data) sync to your own private iCloud database so they appear on your other devices. We cannot read your private iCloud database. See section 6.

Your devices: Aura's widgets and Apple Watch app receive data from the iPhone app over Apple's on-device channels (an App Group and WatchConnectivity). This data moves only between your own devices.

Revoking access: you can change or remove Aura's access at any time in iPhone Settings > Health > Data Access & Devices > Aura.

4. Analytics (TelemetryDeck)

We use TelemetryDeck to understand how Aura is used so we can fix problems and decide what to build next. TelemetryDeck is a privacy-focused analytics service. It uses no tracking cookies, and it receives an anonymized, hashed identifier instead of any personal information.

What we send (app usage only):

• Which screens, sections and features you open or tap
• How far you get in onboarding
• Paywall views, purchase events and plan type
• Whether you have Pro
• Streak length
• Referral events (for example, a code shared or a reward granted)
• Which widget or Apple Watch command you used
• Whether a bio age reading is estimated, and which inputs were unavailable
• When you tick off a ritual: its category (Supplement, Diet or Activity) and time of day, never its name
• Which built-in caffeine drink you log (for example, Espresso), or "Custom"

TelemetryDeck also records standard technical details such as app version, iOS version, device model and language/region settings.

What we never send:

• Your bio age, chronological age or any other age Aura calculates
• Your wellness or readiness scores
• Any health measurement (such as heart rate, HRV, VO2 max, sleep, steps or weight)
• Anything about your menstrual cycle: logged periods, your cycle phase or day, or whether cycle-aware scoring is on
• Otto's summaries
• Anything you type, such as ritual names

We may use this anonymous data to test different versions of a screen (A/B testing). TelemetryDeck's privacy policy: https://telemetrydeck.com/privacy

5. On-device AI (Otto)

On supported devices, Otto's summaries are written by Apple Intelligence (Apple's on-device Foundation Models) directly on your iPhone. Your data is not sent to an AI server, ours or anyone else's. On devices without Apple Intelligence, Aura shows standard summaries instead.

6. iCloud

Aura uses Apple's iCloud (CloudKit) in two ways.

Your private iCloud database. Only you can read it. We cannot.

• Pro iCloud sync (optional): your snapshots, rituals and logs, if you turn sync on.
• Streak protection: your streak freezes and repair dates.
• Referral rewards: your record of referral rewards earned and used.

Aura's public database (referral program only). To make referrals work, Aura stores a small amount of data in a CloudKit database that the Aura app can read:

• A referral code record: your personal code (for example, AURA-XXXXXX) and your CloudKit user ID. This ID is a pseudonymous identifier created by Apple for Aura. It is not your Apple ID, name or email.
• A referral record, created when a friend starts a trial with the referral offer: it is labeled with the friend's App Store transaction ID and holds your pseudonymous ID and your code.

We use these records only to credit rewards and prevent fraud (for example, to stop duplicate or self-referrals and to apply reward limits). They contain no names, emails or health data.

7. Data stored only on your device

Your onboarding answers (such as age, sex and activity level), settings and cached calculations are stored on your device. Reminders and notifications are scheduled locally on your device. We do not receive this data.

8. Purchases

Aura is funded by subscriptions and a one-time purchase, not by ads. Aura offers monthly, yearly (with a free trial), Family yearly (shared through Apple Family Sharing) and Lifetime plans.

Apple processes all payments. We never see your payment details. Aura receives only the purchase information Apple provides through the App Store (such as which plan is active and its transaction details) so it can unlock Pro. Apple's privacy policy: https://www.apple.com/legal/privacy/

9. How we use information

We use the information described above only to:

• Provide Aura's features and calculations
• Unlock and manage Pro purchases
• Run the referral program and prevent referral abuse
• Understand app usage in anonymous form to improve Aura

We do not sell personal information. We do not share it for targeted advertising. We do not build advertising profiles.

10. Children

Aura is intended for adults. It is not directed to children under 13 (or under 16 in the EEA and UK, where that age applies), and we do not knowingly collect information from them. The Family plan is intended for adult family members. If you believe a child has used Aura and you want data removed, contact us.

11. EEA and UK users (GDPR)

Controller: Northern Virginia Capital, DBA, United States of America. Contact: auraapp.support@gmail.com

Legal bases:

• Contract: to provide the app, its features and your purchases.
• Legitimate interests: anonymous usage analytics to improve Aura, and referral fraud prevention. We keep these minimal and privacy-preserving.
• Consent: access to Apple Health data, which you give through the iOS permission screen and can withdraw at any time in Settings.

Your rights: you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. You can also complain to your local data protection authority.

How to exercise them: email auraapp.support@gmail.com. Because we do not have accounts or your contact details, most of your data is already under your control on your device and in your iCloud. For referral records, include your referral code so we can find them.

International transfers: Apple and TelemetryDeck may process data outside your country. TelemetryDeck GmbH is based in Germany and uses hosting providers in the EU and the United States. Where data is transferred outside the EEA or UK, these providers rely on recognized safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

12. U.S. users

Some U.S. states have laws that give extra protection to consumer health data. Aura does not sell your health data, does not share it for targeted advertising, and does not share it with third parties. You can ask us questions or request deletion of any data we hold by emailing us.

13. Retention and deletion

• On your device: delete the Aura app to delete its on-device data.
• Your iCloud: go to iPhone Settings > [your name] > iCloud > Manage Storage (or Manage Account Storage), choose Aura, and delete its data.
• Referral records in Aura's public database: email us with your referral code and we will delete them. We may keep a record needed to prevent repeat referral abuse, without any other data.
• Analytics: kept in anonymized form according to TelemetryDeck's policy.
• Apple Health: your Health data stays in Apple Health. Aura does not store a separate copy on our servers.

14. Security

Your data is protected by Apple's platform security, including device encryption and iCloud's protections. Analytics are sent over encrypted connections and contain no personal information. No system is perfectly secure, but we design Aura to keep as little data as possible outside your control.

15. Changes to this policy

We may update this policy as Aura changes. When we do, we will change the "Last Updated" date above. For significant changes, we will also let you know in the app or on this website.

16. Third-party policies

• TelemetryDeck privacy policy: https://telemetrydeck.com/privacy
• Apple privacy policy: https://www.apple.com/legal/privacy/
• Apple Standard EULA (Aura's license terms): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

17. Contact

Questions or requests? Email us at auraapp.support@gmail.com.