Privacy Policy

1. Who we are

Aura Health Assistant ("Aura", "we", "us") is operated by Webcrysta, Salem, Tamil Nadu, India. We are responsible for the personal data described in this policy, as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023.

2. Information we collect

Information you give us

• Account: your mobile number (used to sign in with a one-time code), name and preferred language.
• Health profile: age, gender, allergies and chronic conditions, if you add them.
• Family members: the name, relationship, age, gender, allergies and conditions of people you add, and an optional photo.
• Profile photos: photos you choose for yourself or family members.
• Symptom checks: the symptoms, severity, duration and notes you enter or speak, and the guidance Aura returns. These are saved as reports under the person the check was for.
• Vitals you log: values such as water intake, blood pressure, heart rate and sleep that you enter yourself.
• Voice: when you use the voice assistant, your recording is sent to our server and on to our AI provider to be turned into text. We do not keep the recording; the text transcript is used for the check and may be saved with its report.

Information from your device, only with your permission

• Health Connect: if you connect it, Aura reads heart rate, resting heart rate, blood pressure, sleep and hydration. Aura only reads this data; it never writes to Health Connect. Daily values are stored with your account to show trends and your health score.
• Location: used only on the Emergency screen to find hospitals near you. It is sent to Google Maps to search for nearby hospitals and is not stored by us.
• Microphone: used only while you are recording a question in the voice assistant.
• Camera and photos: used only when you choose a profile photo.
• Notifications: used for the daily and water reminders you turn on. These are scheduled on your phone.

Information collected automatically

• Usage counts: how many AI checks you have used each day, to apply free-plan limits.
• Subscription status: whether you have Aura Plus and when it renews or ends.
• Technical logs: our server keeps short-lived logs (such as request times, errors and your account ID) to keep the service running and secure.

This website itself does not use cookies, analytics or tracking.

3. How we use your information

• To sign you in and keep your account secure.
• To produce AI health guidance that takes into account the age, allergies and conditions of the person a check is for.
• To save your reports and show health trends, insights and your daily health score.
• To find nearby hospitals when you ask in an emergency.
• To apply plan limits and manage your Aura Plus subscription.
• To fix problems, prevent abuse and improve the app.

We do not sell your data, use it for advertising, or use it to make decisions about you that have legal or similar effects.

4. Who we share it with

We share data only with the service providers that run Aura, and only what each one needs:

We do not send your name or phone number to OpenAI, though anything you type or say in a check (for example a name you mention) is sent as part of it. These providers may process data outside India, including in the United States, under their own security and privacy commitments.

We may also disclose information if required by law, or to protect someone's life or safety.

5. Storage, security and retention

• Data is sent over encrypted connections (HTTPS) and stored in Google Cloud (Firebase).
• Access to your data requires your signed-in account; family members' data is only visible to the account that added them.
• We keep your data for as long as your account exists. When you delete your account, we delete your profile, family members and their photos, reports, vitals, usage counts, personal AI insights, your Firebase sign-in and your subscription customer record.
• Purchase records stay with Google Play, as required for payments and tax.
• Server logs are kept for a limited period and then deleted.

No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the authorities of a breach where the law requires it.

6. Your choices and rights

• Access and correction: view and edit your profile and family members in the app at any time.
• Deletion: delete individual family members in the app, or your whole account from Settings → Delete account. Deletion is permanent and cannot be undone. If you cannot use the app, email us and we will delete it for you.
• Withdraw permissions: turn off Health Connect, location, microphone, camera or notification access in your phone's settings at any time. Aura keeps working without them.
• Withdraw consent: you can stop using Aura and delete your account at any time.
• Grievances and nominations: you may raise a complaint with us at support@aurahealth.in, nominate someone to exercise your rights if you die or become unable to, and complain to the Data Protection Board of India.

7. Children and family members

You must be 18 or older to create an Aura account. Parents and guardians may add children as family members and are responsible for the information they enter about them. By adding another adult, you confirm that they have agreed to you sharing their information with Aura. We do not knowingly allow children to create their own accounts.

8. Changes to this policy

If we make important changes, we will update the effective date above and let you know in the app before they apply.