Privacy Policy

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials when you create an account
• Profile Information: Age, height, weight, sex, activity level, and health goals you provide during onboarding
• Health Data: Daily logs including calories, steps, workouts, weight entries, habits, and related notes you manually enter
• Productivity Data: Tasks, notes, meeting information, and CRM contacts you create

2.2 Information from Third-Party Services

When you connect third-party services, we may collect:

• Fitbit: Steps, calories burned, heart rate, sleep data, weight, and activity metrics (based on your sync preferences)
• Google: Basic profile information for authentication
• Other Integrations: Health and fitness data from connected devices and apps

You control which data is synced through your integration settings and can disconnect these services at any time.

2.3 Automatically Collected Information

• Device information and browser type
• Usage patterns and feature interactions
• Error logs and performance data
• IP address and approximate location (country/region level)

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Calculate health metrics such as BMR, TDEE, and calorie recommendations
• Display personalized dashboards and insights
• Sync data between Aurora and connected third-party services
• Send service-related communications
• Respond to your requests and support inquiries
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize sharing with third parties
• Service Providers: With trusted vendors who assist in operating the Service (hosting, analytics) under strict confidentiality agreements
• Legal Requirements: When required by law, legal process, or government request
• Safety: To protect the rights, safety, and property of Aurora, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Third-Party Integrations

When you connect third-party services like Fitbit:

• We only access data you authorize through the connection settings
• Data is synced according to your configured preferences
• You can modify sync settings or disconnect at any time in Settings > Integrations
• Disconnecting will stop future syncing but you may choose to retain or delete previously synced data

Third-party services have their own privacy policies. We encourage you to review them before connecting your accounts.

6. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Row-level security ensuring users can only access their own data
• Regular security assessments and monitoring
• Secure authentication with support for OAuth providers

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services.

• Account Data: Retained until you delete your account
• Health & Activity Data: Retained until you delete it or your account
• Audit Logs: Retained for up to 90 days for security and debugging purposes

You can delete specific data (daily logs, weight entries, profile information) through Settings, or delete your entire account to remove all data.

8. Your Rights and Choices

You have the right to:

• Access: View and export your data through the Service
• Correction: Update inaccurate information in your profile and logs
• Deletion: Delete your data or account through Settings
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Disconnect third-party integrations at any time
• Opt-Out: Unsubscribe from non-essential communications

To exercise these rights, visit your Settings page or contact us at privacy@aurora-app.com

9. Children's Privacy

Aurora is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

• Email: privacy@aurora-app.com