Privacy Policy

This Privacy Policy explains how Aura(“Aura,” “we,” “us”) collects, uses, and protects your information. It covers both this website (auravoiceapp.com) and the Aura mobile app, where you meet Buddy - an AI companion that chats, talks with you by voice, remembers, checks in, and can help with your calendar, email, reminders, and the web.

The short version

• We collect only what we need to run Aura and make Buddy useful to you.
• We never sell your data, and we never use your Google data (Gmail or Calendar) to train AI models.
• On the website, analytics stay cookieless until you accept cookies. The voice demo streams your audio for a real-time reply and we don’t store that audio, though we do keep an anonymized text transcript of the demo chat to make Buddy better.
• You can disconnect Google, revoke access, or request deletion at any time. Revoking access stops future access but does not, by itself, delete information you previously asked Aura to save.

Information we collect

On this website

• Waitlist details. If you join the waitlist, we collect the email address you submit and, optionally, which features you tell us you are most excited about, so we can tell you when Aura is available. This is stored in our own database (Firebase).
• Product analytics. We use PostHog to understand how the site is used (pages viewed, buttons clicked, the voice-demo funnel). Before you accept cookies this runs in a cookieless mode; see Cookies & analytics below.
• Voice demo.If you try the in-browser voice demo, your microphone audio is streamed in real time to our model provider (OpenAI) to generate Buddy’s spoken reply. We do not record or store this audio. We do keep a text transcriptof the conversation, along with coarse location (country, region, city) and basic device and browser info, linked only to an anonymous analytics ID and a one-way hashed version of your IP address (never your name, email, or full IP), so we can understand how people talk to Buddy and improve him. To prevent abuse we also use Cloudflare Turnstile to verify you’re human.

In the Aura app

• Account information needed to create and secure your account (handled via Firebase).
• Your conversations and memory - the messages you exchange with Buddy and the things you ask him to remember, stored to provide continuity across sessions.
• Voice interactions processed to enable real-time spoken conversations (via LiveKit).
• Reminders, check-ins, and notification preferences you set up.
• Google data you choose to connect - see the next section.

Google user data & Limited Use

Connecting Google Calendar or Gmail is optional. Aura uses Google's OAuth authorization process, so you choose whether to grant access and Google shows you the permissions being requested. Aura does not receive your Google password. We request the minimum Google permissions needed for the feature you choose, in context where possible.

Google data Aura can access

• Connection information: the Google account you connect, authorization tokens, granted permissions, and technical identifiers needed to maintain and secure the connection.
• Google Calendar data: calendar and event information needed for the requested feature, such as calendar names, event titles and descriptions, dates and times, locations, availability, attendees, and related event metadata.
• Gmail data:the connected email address and the recipient, subject, message body, and delivery identifiers needed when you ask Buddy to send an email. Aura’s current Gmail integration does not read or store messages from your inbox.

How Aura uses Google data

Aura accesses Google data only to provide the Google-connected features you request or an ongoing instruction you enable. Examples include showing upcoming events, answering a question about your schedule, creating a calendar event, and drafting or sending a message on your behalf. Aura does not use Google data for generalized profiling, advertising, or unrelated product features.

AI processing and service providers

When a Google-connected request requires AI processing, Aura may send the Calendar details or email-draft content needed for that request to our AI model providers, such as Anthropic Claude, Google Gemini, or OpenAI. They process that information for Aura as service providers so Buddy can return the requested result. We do not permit them to use your Google data to create, train, or improve any AI or machine-learning model. Other infrastructure providers may securely host or process data only as needed to operate, secure, and support the feature.

Storage and retention of Google data

We retain Google authorization tokens and connection metadata while your account remains connected so Aura can perform the features you enable. While Google Calendar is enabled, Aura caches event data in its database so it can keep your schedule synchronized and answer calendar requests. Aura deletes that Calendar cache when you disable or disconnect the Calendar integration. The current Gmail integration does not retrieve or cache inbox messages.

If you intentionally ask Buddy to save Calendar information or an email draft in a conversation, memory, reminder, or other Aura feature, that saved or derived content becomes part of your Aura data and is retained under the rules for that feature until you delete it or your account. We delete or anonymize Google data and derived data when it is no longer needed for the disclosed feature, subject to limited security, legal, and backup requirements.

Aura’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google data only to provide or improve the prominent, user-facing Google-connected features you request.
• We do not use your Google data to train, fine-tune, or develop any AI or machine-learning models.
• We do not sell your Google data or use it for advertising.
• We transfer Google data only to service providers as needed to provide the requested feature and with your consent, for security, to comply with law, or as part of a merger or sale after obtaining any consent required by Google policy and applicable law.
• Humans don’t read your Google data except with your explicit consent, for security/abuse purposes, or where required by law.

You can review or revoke Aura’s access to your Google account at any time from myaccount.google.com/permissions. Revocation prevents new access after Google notifies Aura or the authorization stops working. It does not automatically erase Aura conversations, memories, reminders, drafts, or other content you previously asked Aura to create from Google data. To delete those items and the associated connection data, use Aura’s available deletion controls or contact us using the address below.

How we use your information

• To provide, maintain, and improve Aura and Buddy.
• To enable features you ask for - conversations, memory, voice, reminders, and calendar/email help.
• To send you product and waitlist updates (you can opt out anytime).
• To keep Aura secure and prevent abuse.
• To understand usage in aggregate so we can improve the product.

AI processing

Buddy is powered by large language models, including Anthropic Claude and Google Gemini (and OpenAI for the website voice demo). To generate a response, relevant parts of your request may be sent to these providers and processed for Aura under applicable agreements. As explained in the Google user data section, this can include relevant Calendar details or email-draft content when needed to complete your request. Your content is not used to train our models, and your Google data is never used to create, train, or improve any AI or machine-learning model.

Buddy is an AI companion, not a person, and not a substitute for professional medical, legal, financial, or mental-health advice. If you are in crisis or thinking about harming yourself, please contact your local emergency services or a crisis line such as 988 (Suicide & Crisis Lifeline, US) right away.

Sharing & third parties

We do not sell your personal information. We share data only with service providers that help us run Aura, each handling data under their own terms:

• Google APIs - the Calendar and Gmail connections you authorize.
• Anthropic, Google Gemini, OpenAI - AI model providers. Calendar details or email-draft content are shared with an AI provider only when needed for the Google-connected feature you request; Google data is not used to create, train, or improve AI models.
• Firebase - accounts, app data, website waitlist signups, and stored website voice-demo transcripts.
• LiveKit - real-time voice in the app.
• PostHog - product analytics.
• Cloudflare - bot/abuse protection for the voice demo.
• Vercel - website hosting.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and Aura.

Cookies & analytics

On the website we use PostHog for analytics. Until you accept cookies, PostHog runs in a cookieless mode that measures anonymous, in-session activity without storing a tracking cookie on your device. If you accept, we store a cookie so we can recognize return visits and measure conversions more accurately. If you decline, analytics capture is turned off. You can change your mind by clearing your browser storage for this site, which brings the choice back.

Data retention

We keep your information for as long as your account is active or as needed to provide Aura. The Google user data section above explains the more specific rules for Google authorization tokens, temporary processing, saved or derived content, and the Google Calendar cache. You can ask us to delete your data at any time (see Your rights), and we delete or anonymize data we no longer need.

Anonymous website voice-demo transcripts are retained to help us improve Buddy. Because they hold no name, email, or account link, they aren’t tied to your identity.

Your rights & choices

• Access & deletion. Email us to access, correct, or delete your data.
• Revoke Google access anytime at myaccount.google.com/permissions. Revocation stops future access; separately delete any Google-derived content you previously asked Aura to save.
• Opt out of emails using the unsubscribe link in any message.
• Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, portability, correction, deletion, and to object to certain processing. Contact us to exercise them.

Children’s privacy

Aura is not directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect their data. Companion AI may not be suitable for some minors; if you believe a child has provided us information, contact us and we’ll delete it.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, but we work to safeguard your data and limit access to it.

International users

Aura is operated from the United States, and your information may be processed in the US and other countries where our providers operate. By using Aura you consent to this processing.

Changes to this policy

We may update this policy as Aura evolves. We’ll revise the “Last updated” date above and, for material changes, give notice through the app or website.

Contact

Questions, requests, or deletion: hello@auravoiceapp.com.