Aurnia

Effective: 2026-04-28 · Last updated: 2026-08-24

Aurnia ("we", "our") is published by OOTSSU. This policy describes what data Aurnia collects, why, and how to remove it.

What we collect

• Apple HealthKit data (sleep stages, heart rate, HRV, resting heart rate, respiratory rate, oxygen saturation) — read-only, stored on your device.
• Account identity (Sign in with Apple sub, Google sub, or email hash) — stored on Supabase to enable cross-device sync and Partner sharing.
• Nightly summaries (duration, efficiency, HRV, RHR, stage durations) — mirrored to Supabase if you keep cross-device sync on.
• AI Morning Briefs and Weekly Reflections generated by Claude Haiku 4.5 — stored on Supabase keyed by night/week so we don't pay for duplicate generation.
• Journal entries (mood, factor tags, free-text note) — note text stays on your device only.
• Microphone audio for snore detection — analyzed entirely on-device with Apple's SoundAnalysis. Audio buffers are never written to disk and never transmitted. Only counted SnoreEvent rows persist on your device.

Cloud transmission

Only a pseudonymised feature vector is sent to our aurnia-coach Edge Function for AI generation: HRV in milliseconds, RHR in BPM, sleep stage durations in seconds, factor tags as enum names, and your locale. No GPS, no audio, no journal text, no PII. These values are biometric readings tied to your account in our own systems, so we call them pseudonymised rather than anonymous — they remain personal data. Anthropic deletes request inputs and outputs within 30 days under its standard commercial API terms; we do not hold a zero-data-retention agreement.

Partner sharing

If you opt in to Partner sharing, only your recovery score, sleep duration, and bedtime are shared with one partner you authorize. Journal text, mood emoji, factor tags, and audio data are never shared. Either party can revoke instantly.

Account deletion

Settings → Delete Account calls our aurnia.delete_account() RPC, which immediately and irreversibly removes every aurnia.* row tied to your account from Supabase — there is no 24-hour grace period and no client-side restore. Sign-out is instant. For Sign in with Apple accounts, we additionally call Apple's /auth/revoke endpoint to satisfy Apple Guideline 5.1.1(v). Local SwiftData on your device is also wiped on the same action.

Tracking

Aurnia does not track you across other apps or websites. The App Tracking Transparency prompt you see is required by Apple because our subscription provider (RevenueCat) and backend (Supabase) link to the IDFA at the SDK level; we do not use it for tracking.

Children

Aurnia is not directed to children under 13. We do not knowingly collect data from children under 13.

Contact

Questions: ootssu@ootssu.com