Privacy
Last updated 7 August 2026
AURORA is a small, quiet app, and this is a small, quiet privacy policy. It describes what we actually store, why, and how to get rid of it. If anything here is unclear, write to aurora@returntoaurora.com and a person will answer.
What we never do: we do not sell your information, we do not share it with advertisers, and we do not use what you write to train AI models.
What we collect
| What | Why |
|---|---|
| Your email address | It is your account. We sign you in with a link rather than a password, and it is where the weekly letter goes if you want one. |
| A name, if you give one | So Hazel can use it. It is optional and you can remove it. |
| What you write in the notebook | Your tasks and the small steps alongside them. This is the app working. |
| Notes Hazel keeps about you | Short observations so she remembers you between visits. You can read every one of them and delete any of them. |
| Check-in answers | Occasional questions you can always skip. |
| Counts and timestamps | Things finished, when you last visited. This is how the room changes over time. |
| Your calendar's busy times, only if you connect it | Read-only, and only whether a block of time is free or busy. We cannot see event titles, guests, or locations, and we never write to your calendar. |
We do not ask for your location, we do not read your contacts, and there is no advertising or analytics tracking in the app.
Payment information
We never see or store your card. Subscriptions bought on the website are handled by Stripe; subscriptions bought in the mobile apps are handled by Google Play or the App Store. We receive only whether you are subscribed and when the current period ends.
Where it goes
A handful of companies process data on our behalf so the app can work. They are bound to use it only to provide their service to us.
- Supabase — the database and the sign-in system.
- Vercel — hosting.
- Anthropic — when Hazel replies to something you write, or says something unprompted, that text and the notes she keeps about you are sent to Anthropic's API to generate her answer. Under their API terms this is not used to train models.
- Amazon Web Services (SES) — sending your sign-in links and letters.
- Stripe, and RevenueCat with Google Play or Apple — payments.
- Google — only if you choose to connect a calendar.
How long we keep it
For as long as you have an account. Delete something and it is gone from our database; delete your account and all of it goes. Backups roll off within 30 days.
Taking it back
Most of this is reachable from inside the room, without asking anyone:
- Tap Hazel, then the memory panel, to read every note she keeps and remove any of them.
- Forget everything in that same panel clears your name, your notes, and your history.
- Every letter has an unsubscribe link, and letters can be turned off without losing anything else.
To delete your account outright, go to delete your account — signed in, it happens immediately. To ask for a copy of what we hold, or if you cannot sign in, email aurora@returntoaurora.com. We will do it within 30 days, and usually the same week. Depending on where you live you may have further rights to access, correct, or object to how your information is used — ask and we will honour them rather than making you prove you qualify.
Children
AURORA is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has an account, write to us and we will remove it.
Security
Traffic is encrypted in transit, data is encrypted at rest, and access to your rows is restricted at the database level to your own account. No system is perfect; if something ever goes wrong that affects you, we will tell you rather than hope you do not notice.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect rather than quietly editing this page.
Who we are
AURORA is made by Seven Alpha Labs. Contact: aurora@returntoaurora.com.