Aurnia Privacy Policy

Effective: 2026-04-28

Aurnia ("we", "our") is published by OOTSSU. This policy describes what data Aurnia collects, why, and how to remove it.

What we collect

Cloud transmission

Only an anonymized feature vector is sent to our aurnia-coach Edge Function for AI generation: HRV in milliseconds, RHR in BPM, sleep stage durations in seconds, factor tags as enum names, and your locale. No GPS, no audio, no journal text, no PII.

Partner sharing

If you opt in to Partner sharing, only your recovery score, sleep duration, and bedtime are shared with one partner you authorize. Journal text, mood emoji, factor tags, and audio data are never shared. Either party can revoke instantly.

Account deletion

Settings → Delete Account calls our aurnia.delete_account() RPC, which immediately and irreversibly removes every aurnia.* row tied to your account from Supabase — there is no 24-hour grace period and no client-side restore. Sign-out is instant. For Sign in with Apple accounts, we additionally call Apple's /auth/revoke endpoint to satisfy Apple Guideline 5.1.1(v). Local SwiftData on your device is also wiped on the same action.

Tracking

Aurnia does not track you across other apps or websites. The App Tracking Transparency prompt you see is required by Apple because our subscription provider (RevenueCat) and backend (Supabase) link to the IDFA at the SDK level; we do not use it for tracking.

Children

Aurnia is not directed to children under 13. We do not knowingly collect data from children under 13.

Contact

Questions: [email protected]