Last updated: 8 September 2026
Aura ("we", "us") is a mental training and wellbeing app that helps you build focus, calm, and energy through short daily sessions, journaling, and an optional wellbeing check-in. This policy explains what data we collect, why, and the rights you have over it. Aura is designed to be privacy-first: your data is yours, you can delete it at any time, and you are never required to create an account to use the public wellbeing check-in or professional support directory.
Aura is the data controller for the personal data processed by this app. If you are in the European Economic Area, United Kingdom, or Switzerland, your data is protected under the General Data Protection Regulation (GDPR).
Account data. Your name and email address, collected when you create an account or are invited. Your role (user or admin) is stored to control access.
Journal entries. The text you write, the mood you select, and automatically derived highlights and traits. Visible only to you.
Session history. The type, duration, and category of wellbeing exercises you complete, used to show your cumulative progress.
Check-ins. If you choose to save a check-in, we store your mood, intensity, and what's on your mind. No score is computed and no health data is recorded.
Aura Coach conversations. Messages you send to the in-app coach are processed by an external artificial intelligence service in order to generate replies.
Local device data. Your theme preference, progress scores, and (if enabled) your 4-digit app lock are stored on your device.
Providing the service (contract) — to run your account, save your journal and sessions, and show your progress.
Consent — saving a check-in is optional and only happens when you press save. You can delete any saved check-in at any time.
Legitimate interests — securing the app, preventing misuse, and improving reliability.
The in-app Aura Coach is powered by our platform provider, Base44, using its "Automatic" model setting. For each message you send, Base44 selects a fast, general-purpose large-language model from its available providers — Google (Gemini),OpenAI (GPT), and Anthropic (Claude) — to generate a reply. The provider chosen can vary from one message to the next.
What is sent: only the text of the messages you type into the Coach chat is sent to the AI provider to generate a reply. Your journal entries and saved check-ins are not sent to the AI provider. The Coach can read your completed-session history (exercise type and duration) to make its suggestions more relevant.
Why: solely to produce a supportive wellbeing reply. AI responses are general wellbeing support only — the Coach does not diagnose, assess, or treat any mental-health or medical condition, and responses may be inaccurate. Please do not enter emergency-sensitive information into the chat; if you may be in crisis, use the in-app crisis resources instead.
Retention: your Coach conversations are retained by Base44 and its model providers for the period set by those providers' policies. We do not make separate claims about provider storage beyond what their policies state. You may request deletion of your conversation history by contacting us, and we will forward the request on your behalf.
Base44 and its model providers act as data processors under a data processing agreement, with appropriate transfer safeguards (such as Standard Contractual Clauses) where data is processed outside the EEA.
Your journal entries, sessions, and check-ins are protected by row-level security: only you can read and change them. App administrators may access records solely for technical support and security, never to review your personal content.
Account, journal, sessions and check-ins: retained for as long as your account is active. You can delete individual journal entries or saved check-ins at any time; "Delete all my data" in Settings removes your journal, sessions and check-ins immediately; deleting your account removes all associated personal data from our database within 30 days.
Aura Coach conversations: retained by the AI provider (Base44 and its model providers) for the period set by that provider's policy. You may request deletion by contacting us and we will forward the request on your behalf.
Deletion requests: an anonymised record of your request is kept for up to 12 months for audit and legal-compliance purposes.
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability (export your data as a structured file from Settings); and withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, use the in-app controls or contact us using the details below.
Aura is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
We use encryption in transit, access controls, and per-user data isolation. No method of transmission or storage is completely secure, but we work to protect your data using industry standards.
We may update this policy as Aura evolves. Material changes will be reflected by updating the "last updated" date above.
For privacy questions, data access or export requests, deletion requests, and GDPR enquiries, contact our data protection inbox:
If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.
This privacy policy is provided for transparency. It should be reviewed by a qualified legal professional before app store submission.