Privacy policy

The short version

• Your notebooks, handwriting, PDFs and recordings stay on your device unless you choose a cloud action.
• The app has no ads, no tracking and no analytics SDK.
• Google Calendar is optional and read only. Events stay on your device and are never sent to our servers or AI.
• This website uses Google Analytics only if you allow it.
• The launch list uses your email for the launch and, if you separately opt in, beta invitations.

In the app

On your device. Notebooks, ink, images, PDFs, lecture recordings and settings are kept in the app’s private storage on your device. We do not receive your notes because you open or use the app.

Sign in with Apple (optional). Cloud features need an account. If you sign in with Apple we receive an anonymous Apple user identifier, not your password and not your email.

AI actions. When you choose an AI action and confirm it, the part you selected (text, or an image of the selected area) is sent to our server and to our AI provider, OpenAI, to produce the answer. We do not use your content to train our own models.

Lecture recordings. Recordings are stored on your device. If you ask for a cloud transcript or summary and confirm it, the audio is sent to our server and our AI provider to create it.

Purchases and credits. The Aura Monthly plan and credit packs are sold through Apple. We receive the transaction details Apple sends to verify purchases and refunds, and keep a credit ledger. We never see your card number.

Calendar and photos. Calendar events are read on your device to link notebooks to classes. If you connect Google Calendar, access is read only. Photos are only used when you import or add them.

Deleting your data. You can delete your cloud account inside the app. This removes your server account, credits and cloud jobs. Data on your device is removed when you delete the app.

Google Calendar (optional)

Google Calendar is optional. Aura asks for access only when you tap Connect Google Calendar in Settings.

The access is read only (the scope https://www.googleapis.com/auth/calendar.events.readonly). Aura reads events on your primary calendar, from about one week back to about 13 months ahead, to show your classes and exams in the app, the next-up card, the Home Screen widget and local reminders.

Events go from Google straight to your device. They are never sent to Aura’s servers or to OpenAI or any AI feature. Aura never creates, changes or deletes anything in your calendar.

Your sign-in tokens are stored in the iOS Keychain on your device. If you link a notebook to an event, that event’s title and time are saved with the link on your device only.

Google Calendar data is not shared, sold, used for advertising, or used to train AI models.

You can disconnect at any time with Disconnect Google in Aura Settings, which revokes the token and removes the events from the app. You can also remove access at https://myaccount.google.com/permissions.

Aura’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Problem reports and feedback

When you report a problem or give feedback in the app, we store your message, a short summary, the app version and build, device model, iOS version, language and the screen you were on. If you report an AI answer, you choose whether the answer text is included. We link this feedback to your account and email it to the Aura team so we can fix things.

We keep it until it is resolved, for at most 12 months, and delete it with your account. Notebook content is not stored with feedback. If a report cannot reach our server, the app offers to send it by email from your own mail app instead.

To delete it sooner, or with your account, delete your cloud account in the app or write to nivasayag@gmail.com.

Notebook sync and iCloud backup

Aura backs up and syncs your notebooks through your private iCloud (CloudKit) database, using your Apple Account. This goes from your device to Apple and does not pass through Aura’s servers.

What is stored there: notebooks and pages, handwriting, photos, PDF pages, covers, lecture recordings and your folders. Notebook titles, subjects and folder names are stored in encrypted fields.

While Aura is open it checks iCloud about once a minute, so changes from your other devices come together. If two devices change the same notebook offline, handwriting is merged and not dropped. Deleting a notebook on one device deletes it on the others.

You can see the backup status and last backup time in the app, under Apple cloud backup in the account screen, and choose Back up now or Restore from Apple cloud.

On this website

This website is hosted on Heroku (Salesforce) in the European Union. Like any web server it processes technical request data (IP address, browser, page, time) to deliver the site and keep it secure, in short term logs.

Google Analytics runs only after you choose “Allow analytics” in the cookie notice. Until then Google’s script is not loaded at all, and Google Consent Mode stays set to denied for analytics and advertising. Advertising features and Google signals are off. See the cookie policy.

The launch list

If you join the list we store your email address, the site language you used and the time you gave consent. We use it to email you when Aura launches on the App Store. We also store the consent sentence you accepted. We do not sell or share it, and we do not add you to any other list.

Optional details include the source and campaign tags from the link, the referring site hostname (never the full referring URL), your device, study type and institution. We use these to understand which outreach helps and to plan the launch and beta testing.

A separate optional checkbox lets you request TestFlight beta invitations before launch. It starts unticked. Only if you tick it do we store your beta consent sentence and time and use your email for beta invitations. You can withdraw either consent by replying to our email or emailing nivasayag@gmail.com.

The list is stored in a database on Heroku in the European Union. We delete it within 12 months after Aura launches, or sooner when you ask. To leave the list, email nivasayag@gmail.com or reply to our email.

The legal basis is your consent, which you can withdraw at any time.

Your rights

You can ask to see, correct or delete the personal data we hold about you, or withdraw consent, by writing to nivasayag@gmail.com. You may also complain to your data protection authority, such as the Privacy Protection Authority in Israel or the authority in your EU country.

Children

This website and the launch list are not directed at children under 13.

Changes

We will post any change on this page and update the date at the top.