Privacy Policy

1. Who this policy covers

This Privacy Policy explains how AuraSage ("AuraSage", "we", "us") handles information in the AuraSage mobile application for Android and on this website. It applies to the app distributed through Google Play and to every page on this site.

AuraSage is published by an independent developer. The accountable party is the developer account that publishes AuraSage on Google Play. If you need to reach us about this policy, use the developer contact details published on the AuraSage listing on Google Play, or start from our support page.

2. What AuraSage is, and what it is not

AuraSage is a daily affirmation app. Each day it offers a small, limited deck of short affirmations chosen to suit the focus areas and tone you selected, and it can surface one of those affirmations through notifications, home-screen widgets and lock-screen widgets.

AuraSage is a general wellness product. It is not a medical device, it does not diagnose, treat, cure or prevent any condition, and it does not provide medical, psychological or crisis care. It is not a social network, it has no public profiles, no follower counts and no public likes, and it does not contain an infinite content feed.

If you are in crisis or may be at risk of harming yourself, contact your local emergency number or a local crisis line immediately. AuraSage cannot respond to emergencies.

3. Information we do not collect

We have deliberately designed AuraSage so that the most personal parts of the practice never leave your device. We do not collect, receive or store:

• Your name, email address, phone number, postal address or any other contact details.
• Precise or approximate location, GPS data, or any location history.
• Your contacts, calendar, call logs, SMS messages, photos or files.
• The text of affirmations you write, reflections you enter, or recordings you make. The weekly content request includes only AuraSage-provided phrases so the service can avoid repeats.
• The text of any reflection you write after a practice session.
• Any voice recording you make of an affirmation.
• Health records, medical history, or data from any health platform.
• Financial or payment card details. Where subscriptions are offered, Google Play processes the payment and we never see your card data.
• Advertising identifiers used to build a cross-app advertising profile.

4. Information that stays on your device

The following is created by using the app and is stored locally in the app's private storage. Except for the limited aggregate signals described in section 5, it is not uploaded to us:

• Your onboarding choices: intent, focus areas, tone, and any topics you asked not to see.
• Your daily deck, your saved favourites, and your chosen Anchor affirmation.
• Affirmations you write yourself and any collections you create.
• Your full resonance profile. A limited snapshot of topic, tone and length weights, recent interaction types and content exclusions may be sent weekly to select new phrases; it contains no account identifier or words you wrote.
• Practice history, reflection notes, and your rhythm calendar.
• Theme, appearance, accessibility and notification settings, including reminder times and quiet days.
• Any voice recordings made in Voice Practice, stored as audio files in the app's private storage.

Uninstalling AuraSage removes this data from your device. If your device has an operating-system-level backup enabled (for example Android Auto Backup or Google One device backup), a copy may be included in that backup under Google's terms rather than ours. You can exclude AuraSage from device backup in your Android settings.

5. Information we do collect

To understand whether the product actually works, we collect a small amount of anonymous, aggregated diagnostic information. It is not linked to your identity, because we do not hold your identity.

• App activity: anonymous product events such as onboarding completed, daily deck opened, affirmation saved, practice started, practice completed, theme selected, notification opened, and paywall viewed. Events record that something happened, never the content involved.
• App info and performance: crash reports, error traces, app version, and basic performance timings.
• Device info: device model, operating-system version, screen size class, and language or region setting, used to reproduce bugs and to size layouts correctly.
• Subscription identifier: a pseudonymous RevenueCat customer ID is used to confirm paid access before a premium narration is generated. It is not your name, email address, store account ID, or advertising ID.
• Weekly content preferences: selected focus areas, tone and length preferences, content exclusions, aggregate topic weights, and recent interaction types. These are used only to generate up to ten relevant phrases, are sent without an account identifier, and never include user-authored text, reflections or recordings.

These events carry no user identifier that we can tie back to a person, and they never carry the text of an affirmation, a custom affirmation, a reflection or a recording.

6. Why we collect it, and what we never do with it

We use the information described in section 5 for a limited set of purposes:

• To fix crashes and defects, and to keep notifications and widgets reliable.
• To understand which features are used, so that we know what to improve or remove.
• To measure whether the app is delivering value without requiring long screen-time sessions.
• To detect abuse of the service and to meet our legal obligations.

We do not use any of this information for advertising, ad targeting, ad measurement, credit decisions, employment decisions, insurance eligibility, or any unrelated profiling. We do not sell or rent personal information, and we do not share it with data brokers.

7. Device permissions we ask for

AuraSage asks for as few permissions as possible, and asks only at the moment a feature needs one. Declining a permission never blocks the core practice.

• Notifications - used only to deliver the affirmation reminders you configured. We ask only after showing you what a reminder looks like, and never re-enable reminders you have turned off.
• Microphone - requested only if you start Voice Practice to record an affirmation in your own voice. Recording is captured and stored on device, is never streamed to us, and is only made when you actively hold to record.
• Photos and media (optional) - requested only if you choose a photo background in Wallpaper Studio or a photo widget theme. The image is processed on device; we never receive a copy.
• Storage / save to device (optional) - requested only when you export a share card or wallpaper to your gallery.

AuraSage does not request location, contacts, calendar, SMS, call logs, camera, or accessibility-service permissions.

8. Service providers and third parties

Some infrastructure is operated by third parties. Each one receives only what it needs to perform its function, and each acts under its own privacy terms:

• Google Play - distributes the app and handles installation, updates, ratings, and any future in-app purchase or subscription billing. Google receives purchase and account information directly from you under Google's own privacy policy; we receive only anonymised transaction status, never your payment details.
• RevenueCat - manages subscription entitlements and assigns a pseudonymous customer identifier so premium access can be restored and verified without an AuraSage account.
• Analytics and crash reporting - processes the anonymous event and crash data described in section 5 on our behalf, under contract, and is not permitted to use it for its own advertising purposes.
• Website hosting - this website is served by a hosting provider that keeps standard server logs (IP address, user agent, requested URL, timestamp) for security and abuse prevention for a short retention period. We do not use those logs to identify visitors.
• OpenAI - processes the limited weekly content request described in section 5 to propose new affirmation text, and converts AuraSage-provided or generated phrases into AI narration when that feature is used. It never receives an affirmation, reflection or recording you created.
• Cloudflare R2 - stores generated narration for non-private AuraSage phrases so the same audio can be reused instead of generated repeatedly. User-written affirmations and personal voice recordings are never uploaded.

We will disclose information if we are legally required to do so by a valid legal process, and we will limit any such disclosure to what is strictly required.

9. This website

This website is a marketing and support site. It has no advertising trackers, no cross-site tracking pixels, and no third-party advertising cookies.

The site does not ask for health information, and it does not run a contact form that collects personal details. Any interactive element on the site - for example the quote book - runs entirely in your browser and stores nothing about you.

10. How long information is kept

• On-device data is kept until you delete it in the app or uninstall AuraSage. We cannot delete it for you, because we never hold it.
• Anonymous analytics and crash events are retained in aggregate for up to 14 months and are then deleted or permanently aggregated beyond re-identification.
• Website server logs are retained for a short operational period, typically no longer than 30 days.
• Weekly content request bodies are processed to return a response and are not stored in the AuraSage database. Generated phrases accepted by the app remain on your device until you delete app data or uninstall.

11. Your choices and controls

Because AuraSage is local-first, most controls live inside the app rather than in an account dashboard:

• Content exclusions - choose topics you would rather not see. The exclusion is respected across the daily deck, explore, widgets and notifications.
• Notifications - set frequency, exact times, quiet days and sleep windows, or turn reminders off entirely, in the app or in your Android system settings.
• Analytics - you can turn anonymous analytics off in Settings. The app remains fully functional with analytics disabled.
• Export - export your saved affirmations, custom affirmations and collections to a file you control.
• Delete all my data - a single action in Settings that erases your local library, resonance profile, recordings, reflections and preferences.

See the Delete my data page for step-by-step instructions.

12. Your legal rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, to object to certain processing, and to lodge a complaint with your local data protection authority. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR; residents of California have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

In practice, because AuraSage does not collect information that identifies you, we normally hold nothing to access, correct or export on your behalf, and the fastest route to erasure is the in-app deletion described in section 11. Where we do process anonymous diagnostics, our legal basis is our legitimate interest in keeping the app reliable and safe.

If you wish to make a request or raise a concern, use the developer contact details published on the AuraSage listing on Google Play. We may be unable to comply with a request if doing so would require us to collect additional information in order to identify you.

13. Security

• App data is stored in the app's private, sandboxed storage, which other apps on your device cannot read.
• All network traffic between the app, this website and our providers is encrypted in transit using TLS.
• Analytics and crash payloads are transmitted without user identifiers and are stored by our processor under contractual security obligations.
• Because the practice is local-first, the strongest protection for your data is your device lock. We recommend keeping a screen lock and device encryption enabled.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

14. Children

AuraSage is intended for people aged 13 and over, and is not directed to children. We do not knowingly collect personal information from children, and the app is not enrolled in the Google Play Families programme.

If you believe a child has provided us with personal information, contact us through our support channel and we will investigate and delete anything we hold.

15. International processing

AuraSage is available internationally. The anonymous diagnostics and hosting described above may be processed on servers outside your country, including in the United States and the European Union. Where personal data is transferred internationally, our providers rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.

16. Changes to this policy

We may update this policy as the app changes - for example if optional accounts, cloud backup or subscriptions are introduced. When we do, we will revise the effective date at the top of this page, and we will describe any material change prominently in the app before it takes effect.

If a change would involve collecting a new category of personal data, we will ask for your consent before that collection begins rather than relying on a silent policy update.

17. How to reach us

We do not publish a public email address, because it attracts more automated mail than genuine questions. For privacy questions, data requests, or anything else covered by this policy, use the developer contact details published on the AuraSage listing on Google Play. That channel reaches the developer directly.

Our support page lists what to include so we can answer quickly, and what never to send us.