Privacy Policy

Aura is an AI assistant. To work, it needs to send the text or voice you write to a server, run an AI model on it, and send the response back. We store enough to make the app useful — your account, your conversations, and the things you ask Aura to remember. We don't sell your personal data. You can delete everything any time from Profile → Delete Account.

"Aura" (we, us, our) is the operator of the Aura mobile app and the related services at auraapp.zahaibali.com and aura-companion-api.lingering-snow-32fb.workers.dev. You can contact us at zahaibali92@gmail.com.

• Account data. Email address, display name, password hash (PBKDF2 + salt — we never see your plaintext password), and authentication provider (email, Google, or guest).
• Conversations. Every message you send to Aura and every reply Aura sends back. Stored on our servers so the conversation is available across devices and so memory works.
• Voice data. If you use the voice assistant, real-time microphone audio is streamed to our voice partner (ElevenLabs) for transcription and text-to-speech. Audio is not persisted on our servers — only the transcribed text is stored as part of the conversation.
• Memory.Facts and preferences Aura learns from your conversations (e.g. "you like concise answers" or "your dog's name is Rex"). You can review, edit, or delete every memory from Memory → Settings.
• Tool usage. Inputs and outputs of tools like the Image Generator, Code Assistant, Translator, etc. — kept in history so you can revisit results.
• Subscription & billing. If you subscribe to Aura Pro, Google Play handles the payment. We receive only the purchase token (not your card or billing address) so we can verify your subscription.
• Device & analytics. Anonymous device type, OS version, app version, and crash diagnostics. Aggregated, never tied to your identity.
• Advertising data.If you're on the free plan, AdMob may collect ad-related identifiers (Google Advertising ID) to serve relevant ads. See section 5.

• To run the AI model that answers you.
• To keep your conversations and memories synchronized across devices.
• To verify your subscription and unlock Aura Pro features.
• To send transactional emails — email verification, password reset, account notifications. We do not send marketing emails without your consent.
• To enforce per-day usage limits on free accounts (chat messages, voice minutes, image generations).
• To detect abuse, spam, or security incidents.
• To show ads to free-tier users (AdMob). Premium users see no ads.

We use the following service providers to deliver Aura. Each receives only the minimum data they need to do their job, and each is bound by data-processing terms.

We do not sell your personal data, and we do not share it with anyone else for their own marketing.

Free accounts may see banner, interstitial, native, and rewarded ads served by Google AdMob. AdMob may use the Android Advertising ID to deliver relevant ads, measure ad performance, and prevent fraud. You can reset or opt out of personalized ads from Settings → Google → Ads on your device. Premium subscribers never see ads.

We declare our app to AdMob via the IAB app-ads.txt standard at auraapp.zahaibali.com/app-ads.txt.

Aura uses third-party AI models to generate replies, images, code, and voice. AI-generated content can be inaccurate, biased, or inappropriate. You should not rely on Aura for medical, legal, financial, or other professional advice. Every AI message in the app includes a flag-and-report option — please use it for unsafe output so we can improve safety filters.

• Account & conversations. Until you delete your account.
• Voice audio. Not stored — discarded after transcription.
• Email tokens (verify / reset). 24 hours (verify), 1 hour (password reset), single-use.
• Crash logs / diagnostics. Up to 90 days, anonymized.
• Audit logs. Up to 1 year for security investigation purposes.

• Access & export. Request a copy of your data by emailing us.
• Edit memory. Memory → Settings lets you delete individual memories or wipe all memory.
• Delete account. Profile → Delete Account permanently removes your account, conversations, memories, and all related data. Full instructions and an email-based path are available at auraapp.zahaibali.com/account-deletion.html.
• Opt out of personalized ads. Reset Advertising ID in Android Settings.
• Withdraw consent for email or notifications. Settings → Notifications.

For users in the EU/UK, you also have rights under GDPR including rectification, restriction, portability, and to lodge a complaint with your data protection authority. For California users, you have rights under the CCPA/CPRA, including the right to know, the right to delete, and the right not to be discriminated against for exercising your rights.

Aura is not intended for users under 13 (or under 16 in the EU/UK). If you believe a child has created an Aura account, please email us and we will delete it.

We use HTTPS for all client/server traffic, hash passwords with PBKDF2, hash session tokens with SHA-256, and apply strict admin access controls. No system is perfectly secure — please report suspected vulnerabilities to zahaibali92@gmail.com.

We'll update this page when we change something material and will notify active users in-app or by email. The date at the top reflects the most recent revision.

Questions, requests, or complaints about your data: zahaibali92@gmail.com