Last updated: February 2026
Short version: we collect the minimum possible. We don't sell your data. We don't serve ads. Your journal and dreams are private to your account. You can delete everything at any time.
What we collect
- Account data: your email address, a securely hashed password (bcrypt — we can't see it).
- Profile data: what you choose to share — birth date, birth name, optional birth time and city. Used to compute your chart and numbers.
- Content you create: journal entries, dreams, tablet readings, chat conversations with Aura. Visible only to you.
- Minimal logs: we keep technical logs (IP address, timestamp, endpoint) for 30 days for security/debugging. We don't build profiles from them.
What we don't do
- · We do not sell your data. To anyone. Ever.
- · We do not serve ads inside Aura.
- · We do not use your journal, dreams, or chats to train AI models.
- · We do not share your data with astrology publishers, life coaches, or marketing networks.
Third-party services
To operate Aura, we use a small number of carefully chosen services:
- · Anthropic (Claude Sonnet 4.5) — AI text. Message contents are processed to generate responses and are not used for model training per Anthropic's enterprise policy.
- · Google Gemini — only for generating tablet card imagery for the Tablets of Destiny. Each card is painted once, cached forever, and shared across all users.
- · OpenAI — only for text-to-speech narration of Premium meditations. Audio is cached in our database, not returned to OpenAI.
- · Stripe — for payment processing. We never store your card details.
- · Google OAuth — optional sign-in. Only your email and profile photo are shared, nothing else.
Your rights
You can request a copy of your data or delete your account entirely by emailing privacy@auralabs.one. We respond within 30 days as required under GDPR / CCPA.
Cookies
We use one cookie: a secure httpOnly session cookie if you sign in with Google. We do not use tracking cookies. We do not run Google Analytics, Facebook Pixel, or any third-party trackers on the authenticated part of Aura.
Children
Aura is not designed for children under 13. If you believe a child under 13 has created an account, please email us and we will delete it.
Changes
If we change this policy, we'll update the date above and email everyone with an active account. You'll always have the option to delete your data before any material change takes effect.