Privacy Policy

Last updated: September 20, 2026

This policy explains what Aoora Health collects when you use the program at health.aoora.app or in the Aoora Health iPhone app, why we collect it, and what you can do about it. In this policy, “we” and “us” mean the team behind Aoora Health.

What we collect

Account data — your email address and, if you set one, a password stored as a hash. We never see your password.
Answers you give before joining — gender, age range, height, current and goal weight, activity level, eating preferences and foods you exclude.
What you log in the program — water, weight, meals, workouts, supplements and medication you record yourself, your fasting window, course progress and the lessons you watch.
Content you create — photos of meals you take or upload, messages to the AI coach, and messages you send to support.
Payment-related data — the fact and amount of a payment, its status, and the last digits and brand of the card. Card numbers are entered on the payment provider’s side; we never receive or store them.
Technical data — IP address, device and browser type, language, time zone, and the pages or screens you open.

Some of this is health data. We ask for it only because the program cannot build a plan without it, and you decide what to enter.

Why we use it

To run the program: show your course days, build your meal plan and keep your logs.
To process payments and manage access, through third-party payment providers.
To answer you when you write to support.
To send service email: sign-in links, access and billing notices.
To keep the service safe: prevent fraud, abuse and payment disputes.
To see which lessons and screens people use, so we can improve the program. We do not build advertising profiles.

Legal grounds (EEA and UK)

Performance of a contract — running the program you signed up for.
Your consent — health data you enter, meal photos, and sending your messages to an AI provider. You can withdraw consent at any time by stopping that feature or deleting your account.
Our legitimate interests — security, fraud prevention and improving the service.
Legal obligation — tax and accounting records for payments.

The AI coach

When you write to the AI coach, your message and the earlier messages in that conversation are sent to OpenAI, which generates the reply. Before your first message we ask for your consent and name the provider. Please do not send passwords, card details or other sensitive information in chat. The coach is not a doctor and its answers are not medical advice. You can report any reply you find wrong or harmful, and we review reports.

Who else sees your data

We share only what a provider needs to do its job, and only with:

third-party payment providers, to take payment and manage your subscription;
our hosting and infrastructure providers, which store the data for us;
an email delivery provider, for sign-in links and service notices;
a customer support platform, when you write to us;
a video hosting provider, which serves the course videos;
OpenAI, for the AI coach, as described above.

We do not sell your data and do not share it for advertising. We may disclose data if the law requires it, or to protect our rights, and we would pass data to a buyer if the business were sold, under the same terms.

Where your data is stored

Our providers may store data in the United States and the European Union. When data leaves the EEA or the UK, we rely on the standard contractual clauses approved for such transfers.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your profile, logs, plans, chat and support history, normally within 30 days, except records we must keep by law — payment and tax records are kept for as long as accounting rules require. Backups are overwritten on their normal cycle.

Your rights

You can ask us for a copy of your data, correct it, delete it, ask us to limit or stop a particular use, or receive it in a portable form. Write to support@aoora.app from your account email and we answer within 30 days. If you are in the EEA or the UK, you can also complain to your data protection authority.

If you are in California, you may ask what personal information we collected, ask us to delete or correct it, and you are entitled not to be treated differently for asking. We do not sell or share personal information as those words are used in California law.

Deleting your account

In the iPhone app: Profile → Delete account. On the web, or if you prefer, write to support@aoora.app. Deletion removes your account and the data listed above and cannot be undone. Deleting an account does not by itself refund a payment — see the Refund Policy.

Security

Traffic is encrypted in transit, passwords are stored as hashes, and access to production data is limited to the people who need it. No service can promise perfect security, so please use a password you do not reuse elsewhere.

Children

Aoora Health is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

Cookies

We use cookies and similar storage to keep you signed in, remember your language, theme and units, and to measure how the program is used. We do not use advertising cookies. Blocking cookies may keep you from signing in.

Changes

If we change this policy we update the date above and, for significant changes, tell you by email or in the app before they take effect.

Contact

support@aoora.app — we answer within 24 hours. See also the Terms of Service, the Subscription Policy and the Refund Policy.