Aurora Privacy Policy
Last updated: 21-09-2026
1. Who we are
Aurora is a nutrition and wellness application operated by TalkRight FZ-LLC, a free-zone limited liability company registered in the United Arab Emirates ("TalkRight FZ-LLC", "we", "us" or "our"). This Privacy Policy explains what personal data we collect through Aurora, how we use it, who processes it on our behalf, how long we keep it, and the rights and choices you have.
For any privacy question or request, contact us at support@aurora-care.net.
2. Information we collect
- Account data. Your name, email address, sign-in method (email and password, Google sign-in, or Sign in with Apple), timezone, and the device token used to deliver push notifications.
- Profile data. Date of birth, sex, height, weight, body composition details and your health, nutrition, sleep and activity goals and preferences.
- Health and wearable data. If you connect a wearable or health platform (such as WHOOP, Apple Health, Health Connect, Garmin, Oura or Fitbit), we receive data including sleep, heart rate, heart rate variability (HRV), steps, workouts and recovery. Apple Health and Health Connect data is accessed only with the permissions you approve; supported wearable connections and health-platform syncing are provided through Terra. You can disconnect a source or withdraw its permissions at any time.
- Nutrition logs. The meals, drinks, hydration, supplements and related details you log in the app.
- Voice input. When you log food by voice, microphone audio is uploaded for transcription so Aurora can understand what you said. The uploaded audio file is temporary and is deleted after transcription. The resulting transcript may be stored with your food logs and chat history.
- Photos. When you log food or run a body scan by photo, we send the camera image for recognition and keep only the resulting text estimates — the photo itself is not stored by us. We do store any profile picture you add, and any image or document you attach in chat or to a support request.
- Chat messages. The messages you exchange with Aurora's AI coaching features.
- Subscription data. If you start a Google Play subscription or 14-day trial, we process the selected product and plan, trial and purchase dates, renewal status, cancellation, refund or expiry events, and your current Premium entitlement. Google Play processes your payment. Aurora does not request or process payment-card details. TalkRight FZ-LLC and RevenueCat receive subscription status and product metadata, but not your full payment-card details.
- Device and usage data. Basic device information, app activity and diagnostic logs used to keep the app working, debug problems and protect the service.
3. How we use your information
- To provide Aurora's core features: nutrition tracking, food recognition from voice, photo and text, AI coaching answers, and personalised daily targets and insights.
- To sync and display data from the wearables and health platforms you connect.
- To create and manage your account, trial, subscription and Premium access.
- To send you push notifications you have enabled (you can turn these off in the app or in your device settings).
- To respond to support requests and improve the app.
- To keep the service secure, prevent abuse and comply with legal obligations.
We do not sell your personal data, and we do not use your health data for third-party advertising.
4. AI processing
Aurora's coaching, transcription and food recognition are powered by OpenAI. To provide those features, chat messages, temporary voice audio, voice transcripts, meal photos and relevant health and nutrition context are sent to OpenAI for the requested processing. OpenAI handles coaching chat, voice transcription, meal-photo recognition and conversational food logging. It acts as our processor under contract, processes your data only to return the requested result, and does not use it to train its models. AI outputs are estimates and may be inaccurate; they are not medical advice.
Meal photos and body-composition photos are sent for analysis and are not stored by us as image files: they are transmitted for the single recognition request and only the resulting text estimates are saved to your logs.
5. Service providers and other recipients
We use the following active service and platform providers to run Aurora. They receive only the data needed to provide the stated function:
- OpenAI — AI processing of chat, voice transcriptions, meal photos and health/nutrition context for coaching and food recognition.
- Terra — connected wearable and health-platform data aggregation.
- RevenueCat — subscription lifecycle and Premium-entitlement processing, using your Aurora account identifier and Google Play subscription metadata.
- Apple — Sign in with Apple, Apple Health access you approve and Apple push-notification delivery.
- Heroku (Salesforce) — cloud hosting of Aurora's application servers.
- Microsoft Azure — cloud hosting of Aurora's production database.
- Cloudinary — storage of profile pictures and of images or documents you attach in chat or to a support request. Meal-scan and body-scan photos are not stored here (see section 4).
- Google / Firebase — Google sign-in, Google Play subscription billing and push notification delivery.
- Postmark — transactional emails such as verification codes and support replies.
- Sentry — crash and error reporting so we can find and fix app problems. Reports contain technical device and diagnostic details; we configure Sentry not to include personal identifiers, screenshots or health data.
These providers may process data in countries outside your own, including the United States and the European Union. We require appropriate confidentiality, security and data-protection commitments from providers that process data for us. Apple, Google and other account or platform providers may also process data under their own privacy policies when you choose to use their services. We do not sell your data.
6. Legal bases for processing
Where data-protection law requires a legal basis, we rely on:
- Performance of our agreement with you to create your account and provide the Aurora features you request.
- Your consent, including explicit consent where required, for connected health and wearable data and for optional access to your microphone, camera, photos, health platform and notifications. You can withdraw permission or disconnect a source at any time.
- Our legitimate interests in securing, operating, troubleshooting and improving Aurora, provided those interests do not override your rights.
- Legal obligations where we must process or retain information to comply with applicable law.
7. Your rights and choices
You can ask us to access, correct, export, restrict or delete your personal data, object to processing, or withdraw your consent to health-data processing at any time.
- In the app: go to Settings, then Privacy & Data, to request an export of your data, request deletion of your account, or withdraw your health-data consent.
- On the web: if you no longer have the app installed, request account deletion here.
- By email: contact support@aurora-care.net with your request.
Every request is logged and tracked, and we aim to respond within 30 days. Data exports are provided in a machine-readable format and exclude security secrets such as passwords, one-time codes and session tokens. If you withdraw your health-data consent, the withdrawal is recorded on your account immediately and we stop processing your connected health data as we action your request; you can also disconnect any wearable or health platform in the app at any time. If you request deletion, we delete or anonymise your data, including your RevenueCat customer profile, unless the law requires us to keep limited security, dispute or compliance records. Deleting your Aurora or RevenueCat profile does not cancel a Google Play subscription; cancel it separately in Google Play before deletion if you want to prevent renewal.
8. Data retention
We keep account data and saved health, nutrition, chat and transcript history while your account is active so Aurora can provide history, trends and personalised guidance. Temporary voice-audio files are deleted after transcription. Uploaded images are kept with the related content until you remove that content or delete your account. Operational and security records are retained only for as long as reasonably needed for troubleshooting, abuse prevention and legal compliance. If you delete your account or ask us to erase your data, we delete or anonymise it unless the law requires limited records to be retained.
9. Security
Your data is encrypted in transit using TLS (HTTPS). Sensitive fields, including health profile details and voice transcripts, are additionally encrypted at rest in our database, and access to production systems is restricted. No system can be guaranteed to be completely secure, but we work to protect your data and will notify you of any data breach as required by applicable law.
10. Children
Aurora is intended for people aged 16 and over. We ask for your date of birth and do not accept profiles for users under 16. Users aged 16 or 17 are limited to manual food, activity, hydration and caffeine logging, basic history, account, privacy, security and support features. We do not provide them with AI coaching, voice or photo parsing, personalised targets or insights, wearable or health-platform connections, or new subscription purchases. If we learn that we hold personal data of a person under 16, we will delete it.
11. Changes to this policy
If we change this Privacy Policy, we will update the "Last updated" date above and, for significant changes, notify you in the app before they take effect.
12. Contact us
TalkRight FZ-LLC
Email: support@aurora-care.net