Last Updated: October 16, 2026
At Aura Health ("we", "our", or "us"), your privacy and the security of your health data are our highest priorities. This Privacy Policy outlines how we collect, use, and protect your information when you use the Aura Health mobile application and website.
To provide our services, we collect the following types of information:
Your data is used exclusively to provide and improve the Aura Health experience. We use your health data to generate personal analytics, calculate BMI trends, and create exportable health reports (PDFs) at your request.
Your health data is securely stored using industry-standard encryption protocols (via Firebase/Google Cloud). We do not store your data on public servers, and access is strictly limited to your authenticated account.
We do not sell your personal or health data. We do not share your health data with advertisers or third-party marketers. Data is only shared with third-party service providers (like database hosting) necessary to operate the app, who are bound by strict confidentiality agreements.
You have full control over your data. Within the Aura Health app, you can edit, delete, or export your health logs at any time. You may also request the complete deletion of your account and all associated data via the app settings.
If you have any questions about this Privacy Policy or how your data is handled, please contact us at team.aurahealth@gmail.com.
The signed-in web companion uses the same Firebase account and user-owned health records as the Aura app. Water, weight, medication, intake and refill records that you explicitly save on the website are stored in that account. Signing in does not replace your existing health records or change your account tier.
Web sign-in uses tab-session authentication storage. The dashboard keeps loaded health records in memory for the current session; it does not enable persistent Firestore health-record storage in your browser. Sign out when you finish, especially on a shared device. Browser history and ordinary resource caching may remain after sign-out.
Email authentication is handled by Firebase. If you choose Google or Apple, the selected provider handles that sign-in. The website loads Firebase SDK resources from Google and fonts from Google Fonts; your browser connects to those services to load those resources. No advertising or analytics SDK is initialized by this web companion.
Web entries do not configure notification alarms on your phone. Child-profile changes, deletion, exports and some advanced tools remain available in the mobile app. Contact us using the address above for help with your records or account.