Privacy Policy

Information We Collect

Depending on the features you use, we process the following information:

• Account and profile information: your user identifier, authentication information (including identifiers received through Sign in with Apple or Google Sign-In), email address, name, date of birth, gender, and onboarding responses, where provided.
• Content: your conversations with Aurin, private Bible verse notes, public verse comments, prayer requests, and replies.
• Activity and preferences: reading and path progress, selected settings, and onboarding completion.
• Subscription information: purchase records, subscription status, and transaction identifiers. Apple processes payments; we do not receive your full payment card details.
• Technical information: IP addresses, device and application information, notification tokens, and diagnostic records needed to operate and protect the service.
• Support information: your email address, messages, and information you provide when contacting us.
• Feedback: comments, suggestions, ideas, and other feedback you voluntarily submit about the Application, including any information you choose to include.

Some features are available without registration. Using the Application without registering does not mean that no data is processed.

We do not require you to provide sensitive personal information to use the Application. Please consider what you share and avoid sharing unnecessary sensitive information or personal information about others.

Information Stored on Your Device

Some information, including locally created personal prayers, preferences, and cached content, is stored on your device. Server-based conversations, notes, and progress are processed separately from these local files.

A photograph selected through the current profile photo feature is processed locally and is not uploaded to our servers.

How We Use Information

We use information to:

• Provide authentication, saved content, reading progress, and other Application features.
• Generate responses through the Aurin AI companion.
• Manage subscriptions and access to paid features.
• Deliver notifications according to your settings.
• Review public submissions and address reports of inappropriate content.
• Respond to support requests.
• Diagnose problems, maintain security, prevent abuse, and improve the Application.
• Consider and use voluntarily submitted Feedback to develop, improve, operate, and promote the Application, subject to applicable data protection laws.
• Comply with applicable legal obligations.

We do not sell your personal data.

Where applicable data protection law requires a legal basis, we rely on performance of our agreement with you, legitimate interests in operating and securing the service, legal obligations, or consent, depending on the processing involved. Where explicit consent is required for processing your personal information, it must be obtained separately.

AI Features and OpenAI

Aurin uses the OpenAI API to provide AI conversation features.

When you use these features, your messages and the relevant conversation history are transmitted to OpenAI together with instructions and relevant Bible content needed to generate a response.

We do not send your profile fields as part of AI conversation requests. However, personal information that you include in your messages will form part of the conversation data transmitted.

AI features may use OpenAI’s web search capability. Search queries generated from your conversation may be processed through OpenAI’s search infrastructure and its search providers.

We store conversation history on our servers to provide saved conversations. OpenAI may also process and retain data under its applicable API terms and data controls (for more information, please visit https://developers.openai.com/api/docs/guides/your-data). Our own retention periods do not describe every period applicable to OpenAI’s processing.

Information about this transfer is provided in the Application. Where permission is required, it must be obtained before transmission. Purchasing a subscription or accepting these Terms does not, by itself, replace any separately required permission.

You can stop future AI conversation submissions by discontinuing use of the AI chat. To request deletion of stored conversations, use account deletion or contact support@theaurin.app.

Service Providers and Other Recipients

We share relevant information with providers that support the Application:

• Amazon Web Services (AWS): hosts our backend and server data in the United States, in the us-west-2 region.
• Firebase Authentication, provided by Google: processes identifiers and authentication information to support sign-in.
• Firebase Cloud Messaging, provided by Google: processes notification tokens and notification payloads to deliver push notifications.
• Adapty: processes user identifiers, email, name, date of birth, gender, purchase information, and onboarding completion information to manage subscriptions and understand subscription performance.
• OpenAI: processes AI requests and related conversation data as described above.
• Apple: processes App Store purchases and subscriptions.

These providers may process information in the United States and other countries where they operate. We require third-party service providers that process personal information on our behalf to provide appropriate protections, consistent with this Privacy Policy and applicable data protection requirements.

We may also disclose information where necessary to comply with law, respond to lawful requests, protect rights and safety, or investigate fraud and abuse.

Public Content and Human Access

Content submitted to public areas, including community prayer requests, replies, and public verse comments, may be visible to other users once approved.

Public submissions are reviewed by human moderators. Private notes and AI conversations are not published to other users and are not part of the public-content moderation queue.

Authorized administrators may access server-stored information when needed to operate the service, provide support, or address security and abuse issues. Server-stored content is not end-to-end encrypted.

Please do not publish information that you want to keep private.

Analytics, Logs, and Advertising

We use subscription and onboarding information to understand how the Application performs.

Our logging is designed to record operational information rather than the text of prayers, notes, or AI conversations. We do not use session replay to record your interactions.

The current Application does not display third-party advertisements or use the advertising identifier for cross-app tracking. If we introduce advertising or tracking technologies, we will update this policy and obtain any permissions required before using them.

International Processing

Our backend is hosted in the United States. Your information may also be processed in Ukraine and in countries where our providers operate.

Those countries may have data protection laws that differ from those in your country. Where international transfer safeguards are required, the relevant processing must be covered by an applicable lawful transfer mechanism. Contact us for information about the safeguards applicable to your data.

Data Retention

Our retention periods are:

• Account information and saved server content: retained to maintain your account and saved-content features until you request deletion. We do not currently delete accounts automatically because of inactivity. Public content is subject to the separate explanation below.
• Technical logs: retained for up to 90 days.
• Support correspondence: retained for 60 days.
• Backup copies: retained for up to 90 days before expiration through backup rotation.
• Records that must be retained by law: retained for the applicable legally required period.

Cancellation or expiration of a subscription does not automatically delete your account or saved content.

Backup retention is separate from deletion in active systems. Information removed from active systems may remain in existing backups until those backups expire.

Account and Data Deletion

You can initiate account deletion directly in the Application: open your user section, select Profile, and use the account deletion option at the bottom of the page.

You may also contact support@theaurin.app to request deletion or help with the process, including if you use the Application without registration.

Account deletion removes account information and associated private and public server content, including saved conversations and private notes, Community posts, prayer requests, comments, and replies, subject to legally required retention and backup expiration.

We process privacy requests within the periods required by applicable law and may ask for information reasonably necessary to verify a request.

Uninstalling the Application does not delete information already stored on our servers. Deleting your account does not automatically cancel an Apple subscription; manage your subscription separately through your Apple account.

Your Choices and Rights

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of your personal data, restrict or object to processing, and withdraw consent where processing relies on consent.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Some features may no longer be available if information necessary to provide them cannot be processed.

You can manage notification permissions in your device settings.

To exercise your rights, contact support@theaurin.app. You may also have the right to complain to your local data protection authority.

Children

The Application is intended for users aged 16 and older and is not directed to children under 16.

If you believe that a child under 16 has provided personal information, contact support@theaurin.app so that we can investigate and take appropriate action, including deletion where required.

Security

We use safeguards including encrypted connections, encrypted server storage, protected storage of authentication credentials, and authenticated access to server data.

No storage or transmission method is completely secure. If a personal data breach requires notification, we will notify affected users and relevant authorities as required by law.

Changes to This Policy

We may update this Privacy Policy as the Application or our practices change. We will publish the updated version with its effective date and provide additional notice or request consent where required.

Contact