Privacy Policy

Last updated: July 24, 2026

Aura+ ("we," "our," or "us") is operated by Nhancio. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Aura+ application and website.

1. Information We Collect

Personal Information: When you sign up for the waitlist or create an account (including via Google Sign-In or Sign in with Apple), we may collect:

• Email address
• Display name or username
• Profile information you choose to provide

Photos and Camera Data: Aura+ uses your device's camera and photo library so you can request meal analysis or a Fit Check. When you choose to submit a photo:

• We send it to our server-side analysis service and, where needed, its AI service provider to produce the nutrition estimate or Fit Check feedback you requested
• The active Aura+ app does not retain the original meal or Fit Check image in your account record after analysis; the resulting nutrition estimate, feedback, and any log you save may remain in your account
• You can delete saved logs or delete your account from Profile settings; this deletes the account data held by Aura+, subject to any lawful retention requirement

Usage Data: We collect the information needed to operate your account and, only if you explicitly opt in through the app, optional analytics about how you interact with Aura+. This can include:

• Habit tracking data (habits created, completion status, streaks)
• Meal, nutrition, and fit-check logs you create
• Aura scores, progress, and related wellness logs you create
• App usage patterns and feature interactions when you opt in to anonymous usage analytics
• Device information (device type, operating system, browser type)

Subscription and Payment Data: If Premium is offered in your app build and you purchase it, Google Play Billing (Android) or the Apple App Store (iOS) processes the payment. RevenueCat may help us determine your subscription entitlement; it does not replace the app store as the payment processor. We receive limited subscription-status information so we can provide access and do not receive or store your full payment card details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Aura+ service
• Analyze meal and Fit Check photos only when you request the applicable feature
• Track your habits, streaks, Aura scores, and wellness logs
• Send you updates about your progress and achievements
• Communicate about product updates and new features
• Respond to your inquiries and provide support
• Process subscription purchases and verify premium access
• Analyze usage trends to improve user experience when you have opted in to analytics

3. Data Sharing

We do not sell your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: We share only the data needed to operate Aura+ with cloud infrastructure providers (Firebase/Google Cloud), AI providers for analysis you request, analytics providers when you opt in, and—where Premium is available—RevenueCat and the relevant app store to determine subscription access.
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety.
• With Your Consent: We may share information when you explicitly authorize us to do so.

4. Data Security

We implement reasonable technical and organizational measures to protect account data in transit and at rest, including authenticated per-account access controls. No method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain account information and the logs you save for as long as your account is active or as needed to provide the service. Original meal and Fit Check images are processed for the requested analysis and are not retained in the active app's account records after analysis. You can delete your account and associated account data at any time from Profile settings, or request deletion at hello@nhancio.com, including if you no longer have the app installed.

6. Your Rights

Wherever you are located, you have the right to:

• Access and receive a copy of your personal data
• Request correction of inaccurate information
• Request deletion of your data
• Opt out of marketing communications at any time
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

You can exercise most of these rights directly in the app: use Profile → Download my data to get a copy of your data, and Profile → Delete Account to erase it. For anything else, contact us using the details in Section 14.

7. Region-Specific Rights

Aura+ is operated by Nhancio, a company based in India, and is used by people both in India and internationally. The rights in Section 6 apply to everyone; this section adds detail for specific regions.

🇮🇳 India — Digital Personal Data Protection Act, 2023 ("DPDP Act")

• We process your personal data (as a "Data Fiduciary" under the DPDP Act) on the basis of your consent, given when you create an account, or for other permitted legitimate uses (such as responding to your requests or complying with law).
• You may withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal, and may result in some features (e.g. AI meal/outfit analysis) no longer being available to you.
• You have the right to access a summary of your personal data and the processing activities we carry out, to correction and erasure of your data, to grievance redressal (Section 14), and to nominate another individual to exercise your rights in the event of death or incapacity.
• You may raise a complaint with the Data Protection Board of India if you are not satisfied with how we have addressed your grievance.

🇪🇺🇬🇧 European Economic Area & United Kingdom — GDPR / UK GDPR

• Our legal bases for processing are: your consent (for account creation, photo analysis, and health-related nutrition data, which may qualify as a "special category" of data under Art. 9 GDPR — we only process this with your explicit consent), our legitimate interests (e.g. keeping the service secure and improving it), and performance of a contract (providing the service you signed up for).
• You additionally have the right to data portability (receive your data in a structured, machine-readable format — see Section 9) and the right to object to processing based on legitimate interests, including analytics.
• You may lodge a complaint with your national supervisory authority (e.g. the Irish Data Protection Commission, the UK Information Commissioner's Office, or your own country's equivalent).

🇺🇸 California & other US states — CCPA/CPRA and similar state privacy laws

• We do not sell or share your personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information (such as health/nutrition data or precise location) for purposes beyond providing the service.
• You have the right to know what personal information we collect, to delete it, to correct it, and to non-discrimination for exercising any of these rights.

8. International Data Transfers

Aura+'s infrastructure runs on Google Cloud / Firebase, whose servers may be located outside your country of residence, including in the United States. When we transfer personal data internationally, we rely on the cloud provider's standard contractual safeguards and, where legally required, additional measures such as Standard Contractual Clauses. By using Aura+, you understand that your data may be processed in a country with different data protection laws than your own.

9. Your Choices

• Analytics choice: Anonymous usage analytics is optional. We collect it only after your explicit in-app opt-in; you can withdraw that choice at any time in Profile → Privacy & Data → Anonymous usage analytics.
• Download your data: Use Profile → Download my data to receive a copy of your account information and saved logs in a machine-readable (JSON) format.
• Delete your account: Use Profile → Delete Account to permanently erase your account and associated data held by Aura+ at any time.

10. Cookies and Tracking

We may use cookies and similar tracking technologies (and their mobile-app equivalents, such as device identifiers) to improve your experience and to power the analytics described in Section 1. You can control browser cookies through your browser settings, and control in-app analytics via the opt-out described in Section 9. Essential cookies/identifiers required for the service to function (such as keeping you signed in) are not affected by the analytics opt-out.

11. Children's Privacy

Aura+ is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18, and account creation requires confirming you are 18 or older. If we become aware that we have collected data from someone under 18, we will take steps to delete that information and, where applicable, the account.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights, we will notify affected users and, where legally required, the relevant regulator (such as the Data Protection Board of India or an EU/UK supervisory authority) without undue delay.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

14. Grievance Officer & Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@nhancio.com.

In accordance with India's Digital Personal Data Protection Act, 2023 and Information Technology Rules, our designated Grievance Officer for data protection matters is:

Name: Didigam Nithin
Email: nithindidigam@nhancio.com

If you wish to raise a grievance regarding your personal data, please contact the Grievance Officer above. We aim to acknowledge grievances within a reasonable time and resolve them promptly.