Privacy Policy

Last updated: 4 July 2026

Aura (“we”, “us”) is a generosity-driven social app: you post, react, message friends, and gift Vibes to grow your Aura. This policy explains what we collect, why, and the choices you have. Questions? Email hello@myaura.energy.

Information we collect

  • Account. Your name, email address, and a password (stored only as a secure bcrypt hash — we never see or store it in plain text). We assign you an @handle, which you can change.
  • Profile (optional). Anything you choose to add — bio, birthday, and profile/cover photos. A birthday, if provided, is used only to show your zodiac sign and unlock birthday features.
  • Content you create. Posts, comments, reactions, shares, direct messages, and any images or videos you upload.
  • Activity & in-app economy. The records needed to run the app’s features — your Aura/Vibes ledger, gifts, streaks, daily check-ins, league standings, and achievements.
  • Technical data. A single sign-in cookie (below), and standard server logs (such as IP address and browser type) kept briefly for security and debugging. If — and only if — you turn on push notifications, we store the notification subscription your browser provides for that device.

How we use it

  • To provide the app: your feed, profile, friends, messaging, and the Aura/Vibes economy.
  • To send notifications you have opted into (email and/or push), which you control at Settings.
  • To keep the service secure and prevent abuse (rate limits, anti-fraud safeguards on the economy).

We do not show ads, and we do not sell or rent your personal information to anyone.

Cookies

We use one essential cookie to keep you logged in. We do not use advertising or third-party tracking cookies, and we run no third-party analytics.

Service providers

We share data only with providers that help us run the app, and only as needed:

  • Hosting — our servers and database (where your account and content live).
  • Email delivery — to send the notification emails you opt into.
  • Video hosting/CDN — if you upload a video, it is stored and streamed through a video CDN.
  • Browser push services — if you enable push, your device’s push service (e.g. Google/Apple/Mozilla) delivers the message.

Some optional content, such as guided meditation videos, is loaded from third-party platforms (e.g. YouTube); viewing it is subject to that platform’s own privacy policy.

Who can see your content

Posts are shown according to the visibility you choose (for example, public or friends-only) in Settings. Your name, @handle, and profile photo are visible to other members. Direct messages are visible only to you and the person you’re messaging.

Data retention & deletion

We keep your information for as long as your account is active. You can edit or remove most of your content at any time. To delete your account and associated personal data, email hello@myaura.energy and we’ll take care of it.

Your choices

  • Update your profile and @handle from Edit profile.
  • Control every email and push notification type at Settings.
  • Request a copy of your data, or its deletion, by emailing us.

Security

Passwords are hashed with bcrypt, traffic is served over HTTPS, and access to your account requires your credentials. No online service can guarantee perfect security, but we work to protect your information.

Children

Aura is intended for people aged 13 and older. We do not knowingly collect information from children under 13.

Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above. Significant changes will be highlighted in the app.

Contact

For any privacy question or request, contact hello@myaura.energy.