Legal

Welcome to Aura Link

This is a summary of our Terms of Service, which govern your access to and use of Aura Link, including our website, mobile applications, and related services (the "Service"). By using the Service, you agree to the full Terms.

Aura Link provides AI-powered personal companions ("Auras") that help you stay mindful of your environment, schedule, health, and well-being through gentle, proactive notifications.

• You must be at least 13 years old to use this Service
• You are responsible for maintaining the security of your account credentials
• You must provide accurate and complete information during registration
• One person or legal entity may maintain only one free account
• You are responsible for all activity that occurs under your account
• You must notify us immediately of any unauthorized use of your account

You agree not to:

• Use the Service for any illegal purposes or in violation of any laws
• Attempt to gain unauthorized access to our systems or other users' accounts
• Interfere with or disrupt the Service or servers/networks connected to the Service
• Use automated systems (bots, scrapers) to access the Service without permission
• Transmit viruses, malware, or other harmful code
• Impersonate any person or entity or misrepresent your affiliation

• Some features require a paid subscription ("Premium Features")
• Subscription fees are billed in advance on a monthly basis
• All fees are non-refundable except as required by law or as stated in the full Terms
• We may change subscription fees with 30 days' notice
• You can cancel your subscription at any time; access continues until the billing period ends
• Failed payments may result in suspension of Premium Features

The Service and its original content, features, and functionality are owned by Aura Link and are protected by international copyright, trademark, and other intellectual property laws.

You retain ownership of any content you submit through the Service. By submitting content, you grant us a license to use, store, and process that content as necessary to provide the Service.

Your Privacy Matters

At Aura Link, we believe privacy is a fundamental right. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.

We are committed to transparency and giving you control over your data. You can review, export, or delete your data at any time through your account settings.

Account Information

• Email address and name (required for account creation)
• Profile preferences and settings
• Payment information (processed securely by Stripe)

Connected Services Data

Only when you explicitly connect these services:

• Calendar: Event titles, times, durations, locations, descriptions, and number of attendees
• Fitness: Step counts, activity data, heart rate (from connected apps)
• Sleep: Sleep duration and quality metrics
• Location: Precise location, stored in your location history (only when you enable location sharing)
• Music: Currently playing track information (from Spotify)

Environmental Data

• Weather data for your configured locations (from OpenWeather)
• Air quality information (from public APIs)
• News headlines (from configured news sources)

• Provide the Service: Power your Auras with contextual awareness
• Personalization: Tailor notifications and insights to your preferences
• AI Processing: Generate relevant, helpful messages through Claude AI
• Improve the Service: Analyze usage patterns to enhance features
• Communications: Send service updates, plus tips and plan information that you can unsubscribe from at any time
• Security: Detect and prevent fraud or abuse

We do not sell your personal data. We share data only in these circumstances:

• Service Providers: Trusted partners who help operate our Service (hosting, payments)
• AI Processing: Anthropic (Claude) for generating Aura responses; OpenAI, ElevenLabs or Fish Audio for text-to-speech when you enable a voice
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you explicitly authorize sharing

You have the right to:

• Access: View all data we have about you
• Export: Download your data in a portable format
• Correct: Update or fix inaccurate information
• Delete: Request deletion of your account and data
• Disconnect: Revoke access to connected services at any time
• Opt-out: Unsubscribe from marketing communications

Our Security Commitment

We use standard security measures, including encryption in transit and at rest, row-level access controls on customer data, and rate limiting. No system is perfectly secure, and we can't guarantee that your data will never be accessed without authorization.

If you discover a security vulnerability, please report it to our security team immediately. We appreciate responsible disclosure and will work with you to address any issues.

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Tokens for connected services are additionally encrypted with AES-256-GCM. Conversations are not end-to-end encrypted.

Aura runs on Google Cloud (Cloud Run) and Supabase. Those providers' infrastructure is independently audited; Aura itself does not hold a SOC 2 or ISO 27001 certification.

• Database encryption at rest and automated backups by our database provider
• Secrets managed through Google Secret Manager, not stored in application code

• Secure password hashing using industry-standard algorithms
• OAuth 2.0 for third-party service connections
• Rate limiting to prevent brute-force attacks

We log security-relevant events and errors and review them when investigating issues. Automated alerting is being set up. Aura has not yet had an independent security audit.

If we confirm a security incident affecting your data, we will notify affected users and, where the law requires, the relevant authorities, generally within 72 hours, with guidance on protective measures.