Privacy Policy - Aura Focus

Aura Focus is designed around a local-first mindset. The core experience — focus sessions, tasks, text journaling, streaks, and local backup — works entirely on your device without requiring an account.

Aura Pro adds optional account-based cloud sync. When you sign in and enable sync, some data is stored on our cloud servers so your progress stays connected across devices. Cloud sync is always opt-in — the free experience does not require an account and does not send core productivity data to our servers.

The Android version also includes optional rewarded ads through third-party advertising SDKs, which may process limited data as described below.

The free experience does not require an account. You can use focus sessions, tasks, journaling, streaks, and local backup without providing any identity information.

If you sign in for Aura Pro, we collect the identity information you provide during sign-in, such as an email address. Sign-in is handled through Firebase Authentication (Google). We do not sell this information or use it for advertising.

For free users without an account, core productivity data such as focus sessions, tasks, streaks, journal entries, and settings is not sent to Aura-operated servers.

For users without an account or with cloud sync disabled, all app data — including focus sessions, journal entries, tasks, profile customization, and settings — is stored only on your device. Aura Focus does not send this data to our servers.

For Aura Pro users who enable cloud sync, some data is also stored on our cloud servers so it can be accessed across devices. See the Account Sign-in and Cloud Sync section below for details.

Aura Pro includes optional cloud sync. When you sign in and enable sync, Aura stores a copy of your data on our cloud infrastructure (Firebase, provided by Google) so your progress is available across your devices.

The following data may be stored on our cloud servers for Pro users with sync enabled:

• Identity, settings, tasks, and streak data (available to all signed-in users)
• Focus history, profile data, badges, and weekly challenge progress
• Profile photos you set, such as an avatar or banner image
• Journal entries, journal photos, and voice notes (encrypted, Pro only)
• A notification token and device record used to deliver reminders and show sign-in presence

Journal entries, journal photos, and voice notes are encrypted on your device before being uploaded. You control the encryption key. Without your key, your journal content cannot be read from the cloud — not even by us. Profile photos (such as an avatar) are uploaded so they can appear across your devices and are not journal-encrypted.

Cloud sync is always optional. You can use Aura without an account, and you can disable sync at any time in Settings. Disabling sync stops new data from being sent to the cloud, but does not automatically delete previously synced data from our servers. You can request data deletion by contacting us at the address below.

We use Firebase Authentication for sign-in and Firebase Firestore and Firebase Storage for synced data. These services are operated by Google and subject to Google's privacy terms.

Aura Focus does not sell user data and does not share core productivity data with third parties.

On Android, the app uses Unity LevelPlay and related advertising partners to provide optional rewarded ads. When those ad services are active, third-party SDKs may collect, process, or receive limited data such as device or other identifiers, approximate location, ad interaction activity, and diagnostics or performance information.

The Android app may also query which installed apps can handle specific actions, such as opening or sharing exported files, so that users can choose a compatible app for that task.

This processing may be used for advertising or marketing, analytics, fraud prevention, security, compliance, ad delivery, and service reliability.

Aura Pro is an optional paid subscription. Purchases and subscriptions are processed through Google Play billing and RevenueCat, our payments processor. We receive your subscription status and related purchase records so we can unlock and maintain Aura Pro features for your account.

We do not receive or store your full payment card details; payment is handled by Google Play. You can manage or cancel a subscription at any time in Google Play. Transaction records may be retained by Google Play and RevenueCat, and as required by law.

Local backup creates an encrypted file from data stored on your device. You control where this file goes. Aura Focus does not receive a copy. If you share the file using another app or service, that transfer is handled by the destination you select. Local backup is available to all users, free and Pro.

Cloud sync is a separate Pro feature that stores a copy of your data on our servers. Restoring from cloud sync retrieves data from those servers, not from a local file. See the Account Sign-in and Cloud Sync section for details.

You can delete core local data directly from your device by removing content in the app, clearing app storage, deleting exported backup files, or uninstalling the app.

If you signed in, you can permanently delete your account and all of its cloud data from inside the app at any time: go to Settings → Sync → Delete account. This removes your Firebase Authentication account, your Cloud Firestore data, and your Cloud Storage files (including any uploaded photos and voice notes), and signs you out. Data stored only on your device is not removed by account deletion.

You can also request account and data deletion without the app from our account deletion page. If you prefer email, contact us with "Data Deletion Request" in your message along with the email address used for your account, and we will process your request within 30 days.

If you want to request deletion guidance or make a privacy request related to advertising SDK data used by the Android app, contact codewithillusion@gmail.com.

Requests should include the app name, platform, and the type of data you want deleted. Core local app data can be removed immediately by the user on-device, while any advertising-related request may depend on the policies and systems of the relevant third-party providers.