AURA Here Privacy Policy

AURA Here is a safety net for people who live alone and for families. If your phone shows no sign of life for longer than the time you chose, AURA Here first asks you if you are OK, then alerts the people you trust (your Guardians) by push notification and email. You can also send an SOS. AURA Here is not an emergency service.

Account: email address, display name, photo and sign-in method. Settings: language, notifications, how long without a signal before a check, the grace time, your night window, pauses and whether to share your position. Your circle: the Guardians you invited and the people you watch over, with their names. Purchases: your AURA Here Plus plan and its expiry. If you turn on notifications, a device token for push messages.

AURA Here only needs to know that there was a recent sign of life. It records opening the app, tapping I'm here, and your battery level. The Android app also notices, on the phone, that you walked (step sensor: the number of steps is not sent) and that you plugged in or unplugged the charger; in the optional precise mode it also notices screen unlocks through Usage access, read on the phone only and never with app names. Only the time, type and battery level of your last signal are stored, overwritten by the next one.

Only if you turn on location sharing, and only when you tap I'm here or SOS: AURA Here never tracks your position in the background. Only the latest position is kept, overwritten each time, and a Guardian can see it only while an alert about you is open. In addition, during an SOS or a safety timer for which you chose to share it, the position updates about every 20 seconds while the app is open, always overwriting the last one. The sealed note of a timer (who you meet, where, a photo) is visible to your Guardians only during an open alert and is deleted when you stop the timer or a Guardian closes the alert. Your PIN and danger code are stored only as a cryptographic hash (scrypt), never in clear text.

The emergency packet is optional and you write it: a phone number, where the keys are, pets, medicines, your doctor, notes. Medicines and doctor are health information: by saving them you give your explicit consent (art. 9(2)(a) GDPR) to show them to your Guardians, and only while an alert about you is open. You can edit or empty the packet at any time. The rest of AURA Here is processed to provide the service you asked for (art. 6(1)(b) GDPR) and, during an alert, to protect your vital interests (art. 6(1)(d)).

Your Guardians see whether your protection is on, paused or in alert, the time and type of your last signal and your battery level; your packet and position only during an open alert, as above. You see the same about the people you watch over. Nobody joins your circle without accepting your invite link, which works once and expires after 48 hours, and you can remove a Guardian at any time. We never sell data and there is no advertising in AURA Here.

Google Cloud and Firebase (hosting, database, sign-in, push notifications), with AURA Here databases on servers in the European Union; where Google processes data outside the EU it does so under the Standard Contractual Clauses of the European Commission. Resend sends the alert emails to your Guardians. In the Android app purchases go through Google Play and are verified by RevenueCat, which receives your user ID and the purchase details; on the web through Stripe or PayPal. We never see your card details. If alert SMS are offered, Twilio sends them and verifies the Guardian's number with a code; a number is saved only with that Guardian's consent.

The AURA Here Android app loads no analytics. It shows a single Google AdMob banner at the bottom of the home screen: never during a check, an alert, an SOS, a safety timer or the fake call, and never with AURA Here Plus. AdMob may use the device advertising ID, the IP address and technical data about the ad; in the European Economic Area, the United Kingdom and Switzerland we ask for your consent first with Google's form, and you can change it in Settings → Ad privacy choices. AdMob never receives your signals, your position, your Guardians or your packet. On the web there are no ads, and analytics run only if you accept them in the cookie banner.

Your settings, circle and packet stay until you delete them. Alerts are kept 90 days, or a year when you or one of your Guardians has AURA Here Plus. Settings → Turn off AURA Here and delete its data removes all AURA Here data straight away (settings, links, invites, alerts, packet, signals, position); Settings → Delete account removes your whole AURA account. Payment records are kept for up to 10 years as tax law requires. Details: useaura.it/account-delete.

Under articles 15-22 GDPR you can access, correct, export or delete your data, withdraw consent, object to or restrict processing, and complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali). AURA Here accounts are for adults. Write to info@useaura.it. Data controller: Giacomo Bugini, Via Odasio 15, 24057 Martinengo (BG), Italy, info@useaura.it.