Privacy policy

Who this policy covers

This policy applies to the Auragami app for iPhone, the Auragami website, and the waitlist. Auragami is operated by Auragami LLC. In this policy, “we” and “us” mean that company, and “you” means the person who uses Auragami.

What we collect

Health data

Auragami records three categories of health data: sleep, activity, and nutrition. The data arrives in two ways. You enter it by hand in the app, or Auragami imports it from Apple Health after you give permission. A record can include a start time, an end time, a duration, a distance, an energy amount, macronutrient amounts, and a name that you or the source app supplied.

Apple Health is also where your wearables and your other health apps write what they record. So the data that reaches Auragami can include readings that a watch, a ring, or another app made, if you have allowed that app or device to write them to Apple Health. Auragami does not connect to those devices itself.

Calendar

If you connect a calendar, Auragami reads when you are busy: the start time, the end time, and the busy or free status of your events. It does not read the title of an event, its description, its location, or the people invited to it. We use this only to fit a suggestion to the time you actually have. Connecting a calendar is optional, Auragami stays fully usable without one, and you can disconnect it at any time.

Photos of meals

If you photograph a meal, Auragami reads the photo to work out what you ate and fills in the entry for you. You can always correct what it produced.

We keep the photo with that entry, for one reason: so that you can look at it again. It is part of your record of the day, the same as the numbers beside it. We do not use it for anything else. We do not use your photos to train models. We do not sell them and we do not share them with advertisers. Delete the entry and the photo goes with it; delete your account and every photo goes.

Goals and preferences

We collect the health goals and the preferences that you set, for example a target sleep duration. We use them to personalize the insights that Auragami shows you.

Account data

To create an account we collect your email address and the identifier supplied by the sign-in provider that you choose. You can also add a display name, a date of birth, and a profile photo. Those three are optional.

Waitlist email address

If you join the waitlist on this website, we store the email address that you give us. We send one confirmation message to that address. You join the list only after you open the link in that message. If you do not open it, the address expires and we do not write to you again.

Technical data

Our servers write ordinary operational logs. A log line can contain an IP address, a timestamp, a request path, and an error message. We use the logs to keep the service running and to find faults. We do not build advertising profiles from them.

What you connect, and what stays read only

Auragami asks Apple Health for read access only, one category at a time. It does not write data back to Apple Health, and it does not change or delete anything in it. You choose which categories to grant, you can decline all of them, and you can change your mind later in the Health app on your iPhone. Auragami stays usable if you decline. Apple Health data that you have not granted never reaches us.

The same holds for a calendar you connect: Auragami reads it and never writes to it. It creates no events, edits none, and deletes none.

Records you keep inside Auragami are a different matter, because they are yours to change. You can edit any record and you can delete any record, at any time.

Why we use your data

• To show your sleep, activity, and nutrition together on one screen.
• To measure your day against the health goals that you set, which is what the three daily numbers report.
• To generate the insights and the suggestions that Auragami gives you.
• To compare your history with itself over time. Auragami reads the three areas together and looks for what changes what, so its suggestions get more specific the longer you use it.
• To fit a suggestion around your schedule, if you have connected a calendar.
• To keep your account working across your devices.
• To answer you when you write to us.
• To bill your subscription, and to meet our legal and tax duties.
• To keep the service secure and to fix faults.

Where the law asks for a legal basis, we rely on your consent for the health data and the calendar that you connect, on the performance of our contract with you for the account and the subscription, and on our legitimate interest in a secure and working service for the operational logs.

What we never do

If we ever want to do something with your health data that this policy does not describe, we will ask you first and you will be free to say no.

Who else handles your data

We use a small number of service providers to run Auragami. They fall into three groups: hosting and database infrastructure, which stores your account and your health records; an authentication provider, which verifies who you are when you sign in; and an email service, which delivers messages such as the waitlist confirmation. Apple supplies Apple Health, sign-in with Apple, and App Store billing.

A calendar you connect is a different relationship. That provider is a source you grant us access to, not a company we send your health data to. We read from it, we send nothing to it, and your calendar provider has its own privacy policy that governs your account with them.

Each provider processes your data only to run Auragami, under contract. None of them may use it for their own purposes. Write to us if you want the current list by name.

We also disclose data if the law requires it, for example under a valid court order, and if a merger or an acquisition transfers the service to another company. In that second case we will tell you before your data moves.

How long we keep it

We keep your health data and your account data while your account exists, and that includes any meal photo attached to an entry. When you delete your account, we delete all of it. Deleted data is deleted, not hidden. Backups roll off within 30 days. We keep the records that tax and accounting law requires us to keep, and nothing more.

Calendar times are held only while a calendar is connected. Disconnect it and we delete what we read from it.

A waitlist address stays until the app is live or until you ask us to remove it, whichever comes first. An address that never confirms is removed automatically.

Your rights

• Export. You can export all of your data as one file from the app.
• Delete. You can delete your account and every record in it from the app.
• Correct. You can edit or remove any single record.
• Withdraw consent. You can revoke Apple Health access at any time in the Health app on your iPhone, and you can disconnect a calendar at any time in Auragami.
• Leave the waitlist. Write to us and we remove your address.

Depending on where you live, you may also have the right to a copy of your data in a portable format, the right to object to a use, and the right to complain to a data protection authority. Write to founders@auragami.app and we will answer within 30 days. We do not charge for this, and we do not treat you differently for asking.

Security

Traffic between the app and our servers is encrypted with TLS. Data at rest is encrypted by our hosting providers. Only the Auragami API can reach the database. The app on your iPhone never connects to the database directly. Access to production systems is limited to the people who need it. No system is perfect, so if a breach affects your data we will tell you and the relevant authority as the law requires.

Children

Auragami is not intended for children under 16. We do not knowingly collect data from them. If you believe that a child has given us data, write to us and we will delete it.

International transfers

Our providers operate in the United States and in the European Union. Your data may be processed in a country other than your own. Where the law requires a transfer safeguard, we rely on the European Commission standard contractual clauses.

Changes to this policy

We update this page when the product changes. The date at the top says when it last changed. If a change reduces your privacy in a material way, we will tell you in the app or by email before it takes effect.

Contact

Write to founders@auragami.app with any question about this policy or about your data.