Privacy Policy

1. The Principle of Inward Sovereignty

At aura, we treat your thoughts, reflection logs, and internal dialogue maps not merely as user metrics, but as an extension of your subjective autonomy. We do not sell, rent, or monetize your cognitive inputs.

2. Data We Collect

• Identity & Credentials: Email address, cryptographic public keys (Passkeys/WebAuthn), and OAuth metadata (Google) required solely to secure access to your profile.
• Cognitive Artifacts: Journal entries, reflection matrices, decision logs, and subjective assessments generated within the workspace.
• Transactional Telemetry: Cryptographic invoice receipts processed via BTCPay Server. We never inspect or store private financial custody details.

3. Processing & Architecture

Your data is encrypted in transit using standard TLS protocol and at rest within secure multi-region databases. Diagnostic models or computational routines analyze your input purely to provide contextual reflections back to you.

4. Cookies & Ephemeral State

We utilize strictly necessary, secure, HTTP-only authentication tokens (access_token) to verify your session and preserve your active tutorial/workspace state. Third-party ad trackers are fundamentally excluded from our stack.

5. Right to Erasure

You maintain unalienable ownership over your reflections. You may request complete account termination and irreversible purge of all associated cognitive records at any time.