Privacy Policy · Auralo

The short version

The Auralo app does not collect any data. It has no accounts, analytics or advertising, and no servers for your health data.
The waitlist on this website (closed now that Auralo is on the App Store) stores your email (and a few details listed below) until 30 days after the launch email. That is the only personal data we hold.
Your health data is read from Apple Health and processed only on your iPhone and Apple Watch.
Nothing leaves your device unless you choose to share it, and you see exactly what is shared first. The one exception is iCloud sync with Auralo Drip on Mac, which keeps your Drip data in your own iCloud, encrypted, where we can't see it.
You can export or delete everything Auralo stores at any time.

Who we are

Auralo ("the app", "we") is an iPhone and Apple Watch app. Auralo Drip, a water and break reminder for Mac, Windows and Linux, is part of Auralo and is covered by its own section below. Questions about this policy: [email protected].

The waitlist

If you join the waitlist on auralo.fit, we store:

What	Why
Your email address	To send you an invite to the public beta before launch, and one email now that Auralo is on the App Store.
Whether you ticked "I have an Apple Watch" (optional)	To know how many people will use the Watch app.
Your invite code, and the invite code you arrived with (if any)	To give you a share link and count the friends who join with it.
The date and time you joined	To work out your place in line.
A one-way hash of your IP address, made with a secret key	To limit sign-ups from one network and stop abuse. We can't turn it back into your IP address.

Legal basis: your consent, given when you submit the form. You can withdraw it at any time.

Bot check: the form uses Cloudflare Turnstile to tell people from bots. Turnstile processes some browser and device signals to do this and does not use them for advertising. See Cloudflare's Turnstile privacy notice.

Where it's stored: in a Cloudflare D1 database. Cloudflare hosts this website and acts as our processor.

How long: until 30 days after we send the launch email, then we delete the whole list. We never sell, rent or share the list, and we won't use it for anything else.

Your choices: to see, correct or delete your entry, email [email protected] from the address you signed up with. Every email we send has an unsubscribe link.

In your browser: your place in line and invite code are also saved in your browser's local storage so you can see them when you come back. Clearing this site's data removes them.

Health data (Apple HealthKit)

With your permission, Auralo reads health data from Apple Health, such as sleep, heart rate, heart-rate variability, resting heart rate, steps, workouts and, if you allow it, other categories you choose (for example nutrition, body weight, blood pressure or cycle tracking). You decide which categories to allow, and you can change this at any time in the Health app under Sharing › Apps.

This includes data that other wearables and apps (for example Oura, Garmin or Google Health) have written to Apple Health. Auralo doesn't connect to those companies' accounts or servers; it only reads what is in Apple Health on your iPhone.

If you log something in Auralo (such as water, caffeine, a breathing session, a workout or your weight), the app can write it back to Apple Health so your other apps see it too. Writing is optional and controlled by the same Health permissions.

All scores, baselines and recommendations are calculated on your devices. HealthKit data is never sent to us or to any third party, is never used for advertising or marketing, and is never sold.

What Auralo stores on your device

Auralo keeps your settings, journal tags, plan progress, streaks, challenge results and computed scores on your iPhone. A shared App Group container on the same device lets the app's widgets, Live Activities and Apple Watch app show your latest scores. The iPhone and Apple Watch exchange summaries directly with each other through Apple's Watch Connectivity. None of this is uploaded to us.

Your device's own backups (iCloud Backup or a computer backup) may include this app data, under your control and Apple's terms.

Challenges work without a server. Data leaves your iPhone only when you start the sharing yourself, using one of these:

Messages: an iMessage app bubble with a leaderboard, sent to the conversation you pick.
Links and QR codes: the challenge numbers are encoded in the link you send.
Nearby sync: a direct device-to-device connection over Bluetooth or local Wi-Fi with a phone next to you.
SharePlay: "Breathe together" or "Train together" sessions with people on a FaceTime call.

Before anything is shared, Auralo shows the exact numbers that will be included (for example your daily step totals and a nickname). The recipients receive only those numbers. Received challenges are checked and shown to you before they are saved.

Auralo Drip (Mac, Windows and Linux)

Drip has no account, analytics or advertising, and we run no server for its data. Your water log, breaks and settings are stored on your computer.

Sitting time. To know you've been sitting, Drip reads how long it's been since you last used the keyboard or mouse. It never sees what you type or click.
iCloud sync (Mac only, on by default, off in Settings). Drinks, breaks and sitting stretches go to your private iCloud database through Apple's CloudKit, so Auralo on your iPhone can save your Mac drinks to Apple Health and hold reminders while you're at your Mac. Each record's contents are end-to-end encrypted; only a random device ID and the time your Mac was last in use are stored in plain form. The iPhone app uploads only the time it was last in use and, if you turn on "Share water progress with Drip" (off by default), how much of today's water goal you've logged in Auralo itself, encrypted the same way. It never uploads anything it reads from Apple Health. We can't see any of this; Apple's iCloud terms apply.
Calendar (Mac, optional, off by default). If you turn on "Quiet during busy calendar events", Drip reads your calendar on your Mac to see when you're busy. Nothing from your calendar leaves the Mac.
Office buddies (optional, off by default). When on, Drip announces the name you choose and Drip's mood to other Drip users on the same local network (Bonjour), and today's progress only if you allow it. Pokes go straight from one computer to the other. No server is involved, pokes are limited, and you can block anyone.
Updates. The Mac download checks drip.auralo.fit once a day for updates, and the direct Windows and Linux downloads check GitHub. Those servers (Cloudflare and GitHub) see your IP address and the app version, as with any download. The App Store, TestFlight and Microsoft Store versions are updated by Apple and Microsoft instead.
Export and deletion. Export your log as CSV from the app. Drip's data stays on your computer until you delete the app and its data folder. On Mac, turn off iCloud sync first, or remove Auralo's data in your iCloud settings, to delete the synced copy too.

The website drip.auralo.fit uses no cookies, analytics or trackers, and its goal calculator works entirely in your browser. Fonts are loaded from Google Fonts, which sees your IP address.

Purchases

Auralo+ subscriptions are sold and processed by Apple through the App Store (StoreKit). We never receive your payment details. The app only checks with Apple whether your subscription is active.

What we don't do

No accounts or sign-in.
No analytics, crash-reporting or advertising SDKs, and no tracking across apps or websites.
No selling or renting of data.

Weather (optional, off by default). If you turn on weather-aware advice, your approximate location is sent to Apple Weather to get today's forecast. It goes to Apple, not to us, and the forecast is kept only briefly on your device. Our App Store privacy label lists this as Coarse Location, used only for app functionality, not linked to you and not used for tracking. Nothing else is collected.

Export and deletion

In the app, go to You › Export to save your history as CSV or JSON (free), or a PDF report (Auralo+). To delete everything Auralo stores, use the delete option in settings, or delete the app. Deleting Auralo's data does not delete anything from Apple Health; manage that in the Health app.

Notifications

Reminders such as bedtime, hydration or stress nudges are scheduled locally on your device. You can turn them off in the app or in iOS Settings.

Children

Auralo is not directed to children under 13 and does not knowingly process their data. The waitlist is meant for adults. If you believe a child has joined it, email us and we will delete the entry.

This website

auralo.fit uses no cookies, no analytics and no trackers, and loads nothing from other companies: fonts are served from auralo.fit itself. The waitlist (now closed) is described above. Your theme choice (light or dark) is saved only in your browser. Cloudflare, our host, may keep standard server logs, such as IP addresses, for security, and shows us overall totals from them, such as visits per day and by country. Nothing runs in your browser to collect them.

Health information

Auralo provides wellness information, not medical advice, and does not diagnose, treat or prevent any condition.

Changes

If this policy changes, we will update this page and the date above. Significant changes will also be mentioned in the app's release notes.

Contact

[email protected]