Privacy Policy & Terms

1. Introduction

Welcome to AuraBase ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. Your health data is deeply personal, and we've built our entire platform around keeping it secure and private.

If you have any questions or concerns about this privacy notice or our practices, please contact us at [email protected].

2. What Data We Collect

• Account Information: Name, Email, Age, Gender (for authentication and personalization)
• Body Metrics: Weight, Height, Activity Logs, Workout Data, Nutrition Logs
• Sensitive Health Data (Encrypted): Women's Health/Cycle Tracking, Vice Management, Mindset/Mental Wellness, Advanced Health/Lab Results
• Technical Data: IP Address, Browser/Device info (for security and debugging only)

3. How We Store Your Health Data (Zero-Knowledge Architecture)

We use a two-tier storage system to balance convenience with maximum privacy:

4. Do We Share Your Data?

NO. We do not sell, rent, or share your personal health data with third parties.

The only exception: We use Supabase (our database provider) to store cloud-synced data. Supabase is SOC 2 Type II certified and GDPR compliant. Your PrivateVault data is encrypted before reaching Supabase, so even they cannot read it.

5. Your Rights (GDPR & CCPA)

• Right to Export: You can download a complete copy of all your data (including encrypted PrivateVault data in plain text) via Settings → Your Data & Privacy → Export My Data.
• Right to Delete: You can permanently delete your account and all associated data at any time. This action is irreversible and wipes all data from our servers and your encrypted backups.
• Right to Access: You can request a detailed report of what data we store about you and how it's used.
• Right to Portability: Your exported data is in JSON format, making it easy to import into other applications.

6. Request to Delete your account

To request deletion of your AuraBase account, email us at [email protected] and clearly ask us to delete your account. Please include your full name and the email address associated with your AuraBase account so we can complete your request.

7. How Long We Keep Your Data

• Active Accounts: We retain your data as long as your account is active.
• Deleted Accounts: All data is permanently deleted within 30 days of account deletion.
• Encrypted Backups: Deleted immediately when you delete your account.
• Logs/Analytics: Anonymized technical logs are retained for 90 days for security purposes.

8. Security Measures

9. Where Is Your Data Stored?

Your data is securely stored using a hybrid approach. Sensitive data resides encrypted on your local device, while synced data is hosted on secure Supabase servers located in Canada, ensuring compliance with Canadian data sovereignty and privacy laws.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Significant changes will be communicated via email or in-app notification.