Privacy Policy

Aurora (“we”, “us”) is a personal assistant for work, health and money. Because of what it does, you may choose to store sensitive information in it — meals, weight, workouts, and money records. This policy explains exactly what we collect, where it goes, and the rights you have over it. The short version: your data belongs to you, we never sell it, and you can export or delete it at any time.

What we collect

• Account data — your email address and authentication identifiers, via Firebase Authentication (email/password or Google sign-in).
• Content you add — projects, tasks, notes, chat messages, context and memories, meals, weigh-ins, workouts, transactions, recurring items and lending records. All of it is stored against your account and visible only to you.
• Usage counters — a daily count of AI actions, used to enforce plan limits.
• Billing data — if you subscribe to Pro, payments are processed by Stripe. We store your subscription status and Stripe customer reference. We never see or store your card details.

How your data is used

• To run the product: store your records, sync them across devices, and show you charts, scores and forecasts.
• To power the assistant: when you use an AI feature, the relevant content (your message, plus a snapshot of the projects, tasks, health and money data needed to answer) is sent to Google Gemini for processing and a response.
• To bill you, if you subscribe to Pro (via Stripe).
• We do not sell your data, show ads, or use your content to train AI models.

Health data

Nutrition, weight and workout records can be special-category data under UK/EU GDPR. We process them solely to provide the tracking and coaching features you ask for, on the basis of your explicit consent — which you give by choosing to log this data, and can withdraw at any time by deleting it or your account. Aurora provides general wellness information only and is not a medical service.

Who processes your data

• Google Firebase — authentication and database hosting (Google Cloud).
• Google Gemini API — AI processing of the content you send to assistant features. Under Google’s paid API terms this content is not used to train Google’s models.
• Stripe — subscription payments and invoicing.
• Vercel — application hosting.

Retention & deletion

Your data is kept while your account is active. You can delete individual records in the app at any time, export everything as CSV, or ask us to delete your account and all associated data by emailing reachwiseai.ltd@gmail.com. Deletion requests are completed within 30 days.

Your rights

Under UK/EU GDPR you have the right to access, correct, export, restrict or delete your personal data, and to object to processing. Contact us at the address above to exercise any of these. You also have the right to complain to your supervisory authority (in the UK, the ICO at ico.org.uk).

Security

Data is encrypted in transit, access is scoped per-account by database security rules, and AI API keys are held server-side only. No system is perfectly secure — if we become aware of a breach affecting your data we will notify you without undue delay.

Children

Aurora is not intended for anyone under 16, and we do not knowingly collect data from children.

Changes

If we make material changes to this policy we will update this page and note it in the changelog. Continued use after a change means you accept the updated policy.

Contact

Questions about privacy: reachwiseai.ltd@gmail.com