This policy explains what Aurea collects, why, and what control you have over it. Aurea is a tinnitus self-management app, so most of what we hold is health-related and we treat it accordingly.
Aurea is provided by Rajkumar Chinthala, a sole trader based in the United Kingdom, who is the controller of the personal data described here.
You can reach us at nikarauk@gmail.com.
Your account — the email address you sign up with, an optional display name, and an identifier from Apple or Google if you sign in that way. We never see or store your password; authentication is handled by our provider.
What you record about your tinnitus — severity, mood, stress and sleep ratings from daily check-ins; your answers and score from the Impact Check; the pitch and loudness match produced by tone calibration; and any reflection you add after a guided session.
How you use the app — which sound sessions and guided program sessions you complete, their length, the sound mix used, and the presets you save.
What you post — community posts, comments and likes, and any content you report to us.
Your subscription status — whether an Aurea Plus entitlement is active, supplied by RevenueCat. We never receive your card details; payment is handled entirely by Apple or Google.
Product analytics — in-app events recording which features are used, so we can see what helps and what does not. First-party only.
No advertising identifiers. No location. No contacts. No microphone recordings. No cross-app or cross-site tracking.
We do not sell your personal information, and we do not share it for behavioural advertising. If you are in California, this means we do not "sell" or "share" as those terms are defined by the CCPA and CPRA.
If you grant permission, Aurea reads sleep and heart-rate-variability data from Apple Health or Health Connect to power your sleep insights.
These readings are processed on your device. They are not uploaded to our servers, not shared with anyone, and never used for advertising. You can withdraw this permission at any time in your device settings, and Aurea will keep working without it.
Messages you type to the coach are sent to Anthropic through our server so a reply can be generated. We do not store your conversations. They remain on your device for the duration of the conversation and are gone when you leave the screen.
Because the text is processed by a third-party AI provider, please avoid sending anything you would not want handled that way — including details identifying other people.
Coach replies are generated by an AI model. They can be wrong, and they are not medical advice.
Scanning for and pairing with a hearing device happens entirely on your phone. We do not receive, store or transmit anything about your devices.
Each of these acts on our instructions under a contract, except Apple and Google, who act as independent controllers for sign-in and billing.
Your data may be processed in countries other than your own. Where it is transferred outside the UK or European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep your account and its contents until you delete them or close your account.
Deleting your account removes your profile, check-ins, assessments, tinnitus profile, completed sessions, saved presets, notifications, and your community posts and comments. This cannot be undone.
Product analytics events are the one exception: those rows are kept with the link to your account removed, so they can no longer be tied to you. Copies may persist briefly in our hosting provider's routine backups, which are overwritten on a rolling schedule.
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it elsewhere. Where we rely on consent, you can withdraw it at any time.
Two of these are built into the app, under Settings › Privacy & Data:
For anything else, email nikarauk@gmail.com. If you are unhappy with our response you can complain to a supervisory authority: in the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority for the country where you live.
Posts and comments are visible to other people using Aurea, alongside your display name. Please do not include anything there you would not want other users to read, including details about other people.
Aurea is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.
Traffic between the app and our servers is encrypted with TLS, and data is encrypted at rest by our hosting provider. Database access rules ensure your records are only reachable by your own account. We never handle card details.
No system is perfectly secure, but we take these obligations seriously and will notify you and the relevant regulator if a breach affects your data.
If we change this policy we will update the version and effective date shown at the top, and surface anything material in the app before it takes effect.
Questions, requests or complaints about your data: nikarauk@gmail.com