Privacy policy

Who this policy covers

This policy applies to the Auragami app for iPhone, the Auragami website, and the waitlist. Auragami is operated by Auragami LLC. In this policy, “we” and “us” mean that company, and “you” means the person who uses Auragami.

What we collect

Health data

Auragami records three categories of health data, sleep, activity, and nutrition, and the heart, body, and fitness measurements that go with them. The data arrives in two ways. You enter it by hand in the app, or Auragami imports it from Apple Health after you give permission. A record can include a start time, an end time, a duration, a distance, an energy amount, macronutrient amounts, an amount of water, the supplements you log and the amount and time of each dose, and a name that you or the source app supplied.

If you allow it, Auragami also imports measurements that Apple Health records through the day and keeps them over time: your heart rate (stored as an average for every five minutes), heart rate variability, resting and walking heart rate, breathing rate, blood oxygen, wrist temperature, VO2 max, your weight and body composition (body fat and lean body mass), and your blood pressure and blood glucose if you record them. Each reading keeps its time, its value, and the name of the app or device that recorded it.

Apple Health is also where your wearables and your other health apps write what they record. So the data that reaches Auragami can include readings that a watch, a ring, or another app made, if you have allowed that app or device to write them to Apple Health. Auragami does not connect to those devices itself.

Protocols

If you make a protocol, Auragami keeps what you write for it: its name, its dates, the days of the week it runs on, its items, its goals, its note, the reminder time you set for an item, and the to-do items you check off. Auragami works out whether you did an item from the data you log, and compares your data from before, during and after the protocol. That comparison is arithmetic on your own records. It is not medical advice. Your phone schedules the reminders, and the notifications do not come from our servers.

Calendar

Calendar integration is coming soon. When it arrives: if you connect a calendar, Auragami reads when you are busy: the start time, the end time, and the busy or free status of your events. It does not read the title of an event, its description, its location, or the people invited to it. We use this only to fit a suggestion to the time you actually have. Connecting a calendar is optional, Auragami stays fully usable without one, and you can disconnect it at any time.

Photos of meals

If you photograph a meal, Auragami reads the photo to work out what you ate and fills in the entry for you. You can always correct what it produced.

We keep the photo with that entry, for one reason: so that you can look at it again. It is part of your record of the day, the same as the numbers beside it. We do not use it for anything else. We do not use your photos to train models. We do not sell them and we do not share them with advertisers. Delete the entry and the photo goes with it; delete your account and every photo goes.

Voice recordings

Voice logging is coming soon. When it arrives: if you log by voice, Auragami records what you say in order to read the entry out of it. The microphone opens when you start a voice entry and closes when you finish it. Auragami does not listen at any other time and there is no wake word.

We keep the recording only for as long as it takes to turn it into an entry, and then we delete it. The entry stays; the audio does not. You can always correct what it produced. We do not use your recordings to train models. We do not sell them and we do not share them with advertisers.

AI tools that you connect (MCP)

MCP support is coming soon. When it arrives, Auragami can let an AI tool that you use — an assistant or a chat app — read your Auragami data on your behalf, over the Model Context Protocol. This is off until you turn it on. Nothing reads your data this way because you own an AI tool; it reads it because you connected that tool to Auragami and said what it may see.

A connected tool sees only the categories you grant it, and it reads only: it cannot write, change, or delete anything in Auragami. You can see what you have connected, and disconnect any of it, at any time. Disconnecting ends that tool's access immediately.

Once your data reaches a tool that you connected, that tool's own privacy policy governs what happens to it there. We do not control it, so connect only tools that you trust with health data.

Goals and preferences

We collect the health goals and the preferences that you set, for example a target sleep duration. We use them to personalize the insights that Auragami shows you.

Account data

To create an account we collect your email address and the identifier supplied by the sign-in provider that you choose. You can also add a display name, a date of birth, and a profile photo. Those three are optional.

If you enter a code when you set up your account, we store that code with your account. We do not share your account or your health data with the partner whose code it is.

Waitlist email address

If you join the waitlist on this website, we store the email address that you give us. We send one confirmation message to that address. You join the list only after you open the link in that message. If you do not open it, the address expires and we do not write to you again.

Technical data

Our servers write ordinary operational logs. A log line can contain an IP address, a timestamp, a request path, and an error message. We use the logs to keep the service running and to find faults. We do not build advertising profiles from them.

What you connect, and what Auragami may change

Auragami asks Apple Health for access one category at a time, and it imports only the categories that you grant. You can decline all of them, and you can change your mind later in the Health app on your iPhone. Auragami stays usable if you decline. Apple Health data that you have not granted never reaches us.

When you set up Auragami, and only if you allow it, the app also reads your date of birth, sex, height, and weight from Apple Health to fill in your profile, so that you do not have to type them. It reads them on your iPhone and shows them to you first. They are saved only once you confirm them and create an account. Your weight is also imported over time, with your other body measurements, as described under Health data above.

With your permission, Auragami writes one thing back to Apple Health: the water you log in the app, so that your other apps can see it. It writes nothing else. It never changes or deletes anything that another app or device wrote to Apple Health. The only records it can remove there are the water entries it wrote itself, when you edit or delete them in Auragami. You can turn the writing off at any time in the Health app, and logging water keeps working without it.

The same holds for a calendar you connect: Auragami reads it and never writes to it. It creates no events, edits none, and deletes none.

Records you keep inside Auragami are a different matter, because they are yours to change. You can edit any record and you can delete any record, at any time.

Why we use your data

• To show your sleep, activity, and nutrition together on one screen.
• To measure your day against the health goals that you set, which is what the three daily numbers report.
• To generate the insights that Auragami gives you, and its suggestions when they arrive (suggestions are coming soon).
• To compare your history with itself over time. Auragami reads the three areas together and looks for what changes what, so its suggestions get more specific the longer you use it.
• To fit a suggestion around your schedule, if you have connected a calendar.
• To keep your account working across your devices.
• To answer you when you write to us.
• To bill your subscription, and to meet our legal and tax duties.
• To keep the service secure and to fix faults.

Where the law asks for a legal basis, we rely on your consent for the health data and the calendar that you connect, on the performance of our contract with you for the account and the subscription, and on our legitimate interest in a secure and working service for the operational logs.

What we never do

If we ever want to do something with your health data that this policy does not describe, we will ask you first and you will be free to say no.

Who else handles your data

We use a small number of service providers to run Auragami. They fall into four groups: hosting and database infrastructure, which stores your account and your health records; an authentication provider, which verifies who you are when you sign in; an email service, which delivers messages such as the waitlist confirmation; and a bot-protection service. When you ask for a sign-in code by email, the bot-protection service checks that the request comes from a person using the app and not from an automated script. To do that it reads technical details of your device, browser engine, and connection, such as your IP address. It never receives your health data. Apple supplies Apple Health, sign-in with Apple, and App Store billing.

A calendar you connect is a different relationship. That provider is a source you grant us access to, not a company we send your health data to. We read from it, we send nothing to it, and your calendar provider has its own privacy policy that governs your account with them.

An AI tool you connect over MCP is a third relationship, and it is the one that runs outwards. It is not a provider we chose and not a source we read from: it is a tool you told us to give your data to. We hand it only what you granted, we hand it nothing after you disconnect, and what it does with your data is governed by its own privacy policy.

Each provider processes your data only to run Auragami, under contract. None of them may use it for their own purposes. Write to us if you want the current list by name.

We also disclose data if the law requires it, for example under a valid court order, and if a merger or an acquisition transfers the service to another company. In that second case we will tell you before your data moves.

How long we keep it

We keep your health data and your account data while your account exists, and that includes any meal photo attached to an entry. When you delete your account, we delete all of it. Deleted data is deleted, not hidden. Backups roll off within 30 days. We keep the records that tax and accounting law requires us to keep, and nothing more.

Calendar times are held only while a calendar is connected. Disconnect it and we delete what we read from it.

A waitlist address stays until the app is live or until you ask us to remove it, whichever comes first. An address that never confirms is removed automatically.

Your rights

• Export. Once data export arrives, you will be able to export all of your data as one file from the app.
• Delete. You can delete your account and every record in it from the app.
• Correct. You can edit or remove any single record.
• Withdraw consent. You can revoke Apple Health access at any time in the Health app on your iPhone, and if you connect a calendar you can disconnect it at any time in Auragami.
• Leave the waitlist. Write to us and we remove your address.

Depending on where you live, you may also have the right to a copy of your data in a portable format, the right to object to a use, and the right to complain to a data protection authority. Write to founders@auragami.app and we will answer within 30 days. We do not charge for this, and we do not treat you differently for asking.

Security

Traffic between the app and our servers is encrypted with TLS. Data at rest is encrypted by our hosting providers. Only the Auragami API can reach the database. The app on your iPhone never connects to the database directly. Access to production systems is limited to the people who need it. No system is perfect, so if a breach affects your data we will tell you and the relevant authority as the law requires.

Children

Auragami is not intended for children under 16. We do not knowingly collect data from them. If you believe that a child has given us data, write to us and we will delete it.

International transfers

Our providers operate in the United States and in the European Union. Your data may be processed in a country other than your own. Where the law requires a transfer safeguard, we rely on the European Commission standard contractual clauses.

Changes to this policy

We update this page when the product changes. The date at the top says when it last changed. If a change reduces your privacy in a material way, we will tell you in the app or by email before it takes effect.

Contact

Write to founders@auragami.app with any question about this policy or about your data.