Aure LLC
Privacy Policy
Contents
1. Who we are and how to reach us
Aure LLC (“Auré”, “we”, “us”, “Aure LLC”, or “our”) provides a website and a mobile application and related services (collectively, the “Service”) that offer a private space for people processing the experience of relationship betrayal. You can talk privately with Auré’s AI for as long as you wish, and — when you choose — connect with real people who have lived similar experiences.
- Legal entity: Aure LLC, a Florida limited liability company, doing business as “Auré” and “My Auré Life”; the name is subject to change at our discretion
- Registered address: 9349 Collins Avenue, Surfside, Florida 33154, United States
- Contact for privacy matters: info@myaurelife.com
- EU/UK Representative: To be appointed before the Service launches in Ireland or the United Kingdom (required under GDPR Art. 27 / UK GDPR). See Section 19.
- Canada / Australia privacy contact: To be confirmed before the Service launches in those markets.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and what choices you have. It applies to all users of the Service worldwide — including visitors to our website and people who join our waitlist — except where superseded by region-specific addenda or other law or regulations (see Section 18).
We are committed to processing your information lawfully, transparently, and with the heightened care this category of product demands. Where this Policy describes a choice or a right, we mean it; if you cannot exercise it through the in-app or on-site controls, contact us using the address above.
2. Consent
By accessing and using the Service or use in any way of Auré’s products, software, or mobile application, you expressly consent to the collection, use, processing, disclosure and retention of your information (including personal information and sensitive personal information) that you and other parties provide to us in accordance with this Privacy Policy, any applicable agreements with Auré, and other Auré’s policies, and as permitted or required by applicable law. You may withdraw your consent at any time by contacting us at info@myaurelife.com. If you disagree with any agreement between you and Auré, this Privacy Policy or other Auré’s policies, you need to immediately discontinue access or use of the Service.
Please note that the Service may be hosted in countries other than yours. By accessing the Service, you expressly consent to the transfer of your information outside of your home country, which may provide for different data protection laws than in your country.
3. The nature of the Service — read this first
Auré is not a medical service, not a mental health service, and not a crisis intervention service. Auré does not provide medical, psychological, psychiatric, therapeutic, or diagnostic advice. Auré does not engage in the practice of medicine and Auré’s personnel and AI are not doctors, nurses, or licensed or qualified professional support such as a therapist. You will need to contact a doctor, medical provider, or a licensed or qualified professional support such as a therapist for medical services or professional support of any kind. Auré is an emotional-support service that connects people with peers who have lived similar experiences.
Auré has two kinds of support, and you choose how you use them:
- Talking with Auré’s AI. You can talk privately with Auré’s AI assistant. You may use the Service this way for as long as you wish. Talking only with the AI is a full and permanent option — not a temporary step you must move past. Auré is AI and always tells you so; everyone else on the platform is a real person.
- Connecting with peers. When and only when you choose to, you can read short bios of real users in a similar situation and connect with one of them, or join a group of people in a similar situation. These features are optional. Auré does not represent that these users are doctors, nurses, or licensed or qualified professional support such as a therapist or that they have any medical training or training in therapy. Any communications on Auré’s website or app are not medical services, therapy, or professional support.
The information you share with Auré is sensitive by nature. It may include details about your emotions, your relationships, your sexual orientation, your partner, and — in some moments — your safety. We have designed this Policy and our internal practices around the assumption that what you share matters and deserves the highest standard of care. That standard, however, is a privacy standard, not a medical-confidentiality standard, and you should not rely on Auré as a substitute for a doctor, medical provider, or licensed or qualified professional support such as a therapist.
The website and the waitlist. Before the application launches, our website lets you learn about Auré and, separately, do two things that are not the same:
- Experience Auré. You can try a light demonstration version of Auré built into the website to get a feel for it, without creating an account. We log and store the conversations you have with this website demonstration, and we anonymize them before internal review: we remove personal information and technical identifiers (including, but not limited to, IP addresses, device and browser identifiers, and any directly identifying details detected in the conversation) so that the retained data cannot reasonably be linked back to you. Once anonymized, this data may be retained and used internally to operate, evaluate, debug, and improve our services, including the quality, safety, and performance of our AI systems. Because it has been anonymized and no longer identifies you, it is not treated as your personal information. Please do not enter personal, sensitive, or identifying information into the demonstration. See our Terms of Service, Section 3.6, for the full demonstration terms.
- Join the waitlist. Separately, you can ask to be notified when the application launches. Joining the waitlist is the point at which we collect and keep information you give us (see Section 4.1). You can experience Auré without joining and join without experiencing.
If you are experiencing a crisis or are at risk of harming yourself or others, please contact emergency services in your country or a qualified professional, doctor, or medical provider. The Service includes safety features (described in Section 10) but those features are not, and cannot be, a replacement for human professional or medical care.
4. The personal information we collect
We collect personal information in three ways: information you give us, information generated by your use of the Service, and information we receive from third parties.
4.1 Information you give us
Joining the waitlist (website). When you join the waitlist, we collect:
- Email address or phone number (so we can notify you at launch)
- Optionally, a name or the way you would like us to address you (you do not have to provide this)
Creating an account (application). When you create an account in the application, we ask you to provide:
- Gender identity (e.g., Woman, Man, Other)
- Age range
- Sexual orientation (e.g., Heterosexual, Bisexual, Lesbian/Gay, Other)
- Preferred language
- City (optional)
- Email address or phone number (depending on sign-in method chosen)
We collect these because they help place you into the context most relevant to your situation — so the Service can suggest relevant content, suitable peers, and appropriate groups. We collect the minimum necessary; we do not ask for your real name, photograph, address, occupation, income, or your partner’s identifying information at any point during onboarding.
You may sign in using Apple, Google, or a phone number. If you choose Apple or Google sign-in, we receive a unique identifier and the email address you choose to share (Apple lets you hide your real email via its Hide My Email service; we support that). We do not receive your contacts, social graph, calendar, or other data from these providers.
You may create your own user name, as long as that user name does not contain inappropriate, illegal, or offensive content.
Log file information: Log file information is automatically reported by your browser each time you access a web page or other content within the Service. We may also receive log information relating to your device and your use of our mobile applications. When you use the Service, our servers automatically record certain log file information (“Server Logs”). These Server Logs may include anonymous information such as your web request, Internet Protocol (IP) address, operating system, browser type, referring/exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information. The information contained in Server Logs is used to monitor, assess, manage, diagnose problems with, improve and otherwise administer the Service.
4.2 Information generated by your use of the Service
As you use the application, we generate and store the following:
- Conversations with Auré’s AI: the full text of your conversations in the application, including messages sent and received, timestamps, and any audio input you provide if you choose voice features.
- Group posts and replies: anything you post in group circles, shown to other members under a pseudonymous handle but visible to us (see Section 7.3 — this is important).
- 1:1 peer chat content: messages exchanged with a peer you have connected with, where applicable.
- Inferred context: internal inferences our AI generates about your situation and where you are in processing it — drawn from factors such as how recently you discovered the betrayal, how long it went on, whether it has ended or is ongoing, and how you are feeling. These inferences are used to suggest relevant content, peers, and groups, and to surface safety support if needed. They are internal product instruments and may be inaccurate.
- Emergency contact information that you provide conversationally, if and when you choose to share it (Section 10.3).
- Usage telemetry: screens viewed, features used, session duration, and aggregate engagement patterns.
- Device & technical data: device model, operating system version, app version, language settings, time zone, IP address (truncated for storage; see Section 8), and crash diagnostics.
4.3 Information generated on our website
When you visit our website (to learn about Auré or join the waitlist), we collect:
- Cookie and similar data: see Section 14. We use strictly necessary cookies for the site to function and, with your consent, anonymized analytics cookies. We do not use advertising cookies or third-party advertising pixels.
- Website experience conversations: the light version of Auré built into the website processes your messages to generate replies but does not retain them against an account or profile (Section 3).
We may, in the future, add a newsletter you can subscribe to or comments on our blog. These features are not active today. If we add them, we will update this Policy first: for a newsletter, we would collect your email address and subscription status and retain them until you unsubscribe (every issue would include an unsubscribe link); for blog comments, we would collect the content of your comment, the display name you choose, and associated technical data. We are describing this now only so that adding such a feature later is transparent and not a surprise.
4.4 Information we receive from third parties
- Payment processors (if you subscribe): Apple App Store and Google Play handle payments. We receive confirmation of subscription status and the obfuscated identifier the platform provides; we do not receive your credit card number, bank account, or full billing address.
- Crash and analytics providers: see Section 7 for the list and what they receive.
- Service providers handling crisis hotline routing: when you use our safety module, we may use a third-party geolocation service to identify an appropriate regional hotline (Section 10.2).
4.5 What we do not collect
We do not collect or ask for your full legal name; your home address; your photograph; your social media accounts; your contacts; your location continuously in the background; your partner’s name, photograph, or any identifying information; the names of any third parties you discuss; or biometric data.
If you happen to mention any of the above in a conversation with our AI or in a group post, that information will be processed as part of your conversational content (Section 4.2) — but we do not actively solicit it and we ask you, in-product, to avoid sharing identifying details about third parties.
5. Special categories of personal data (Article 9 GDPR / sensitive personal information)
Some of the information we process is treated under European, UK, and California law and/or the law of other jurisdictions as special category or sensitive data. This includes:
- Data revealing sexual orientation (collected at onboarding in the application)
- Data concerning emotional state and distress — strictly speaking, Auré is not a health service, doctor, licensed or qualified professional support such as a therapist, or medical provider, but we recognize that information about emotional states, distress, and crisis indicators is treated as health-adjacent data by regulators, and we apply the heightened standard regardless.
Legal basis under GDPR Art. 9 / UK GDPR Art. 9: Your explicit consent, given at the moment of onboarding and renewable in your privacy settings.
Under California’s CPRA (Sensitive Personal Information): You have the right to limit our use of this sensitive personal information to what is strictly necessary to deliver the Service. See Section 13.2.
Under Brazil’s LGPD (dados pessoais sensíveis, Art. 11): Your specific, distinct consent is collected before processing, and you may revoke that consent at any time.
Other jurisdictions: Auré complies with applicable laws; check the laws of your specific jurisdiction
If you withdraw consent for the processing of special category data, we will be unable to continue providing core features of the application that depend on this data (placing you in a relevant context, suggesting peers and groups, and AI personalization). We will explain this clearly at the moment of withdrawal, and you will retain the right to delete your account and all associated data (Section 13.1.c).
6. Why we process your information
We process your personal information for some or all of the purposes described below:
- Provide you with access and use of the Service, including processing or fulfilling orders and transactions, verifying information, and processing payments;
- Provide customer support, facilitate communication to respond to user requests and concerns;
- Analyze and improve the Service for operational effectiveness and viability of current and prospective services, including to measure traffic and usage trends, and provide and analyze online surveys;
- Ensure security and integrity of the Service, including troubleshooting, debugging to identify and repair errors that impair existing functionality;
- Comply with applicable laws and regulatory obligations, including risk mitigation; and
- Any other purposes disclosed to you at the time we collect your information with your consent.
Under GDPR/UK GDPR/LGPD, we use and process information for some or all of the following purposes:
| Purpose | What this means in practice | GDPR/UK GDPR legal basis | LGPD legal basis |
|---|---|---|---|
| Providing the Service | Running the AI assistant, displaying your chat history, placing you in a relevant context, connecting you to groups and peers, persisting your account | Performance of contract (Art. 6(1)(b)) | Execution of contract (Art. 7, II) |
| Operating the waitlist | Storing your contact details to notify you when the application launches | Consent / performance of pre-contract steps (Art. 6(1)(a)/(b)) | Consent (Art. 7, I) |
| Processing sensitive emotional content | Letting you talk to Auré about your relationship and feelings; generating internal context inferences | Your explicit consent (Art. 9(2)(a)) | Specific consent (Art. 11, I) |
| Safety detection and support module | Identifying crisis indicators in your conversations and surfacing the safety module | Vital interests (Art. 6(1)(d)) and explicit consent for special category data (Art. 9(2)(a)) | Protection of life or physical safety (Art. 7, VII and Art. 11, II, f) |
| Group and peer safety | An AI safety monitor evaluating room and chat content; acting on user reports | Legitimate interests in safety and platform integrity (Art. 6(1)(f)) | Legitimate interest (Art. 7, IX) |
| Website and waitlist | Operating the website and storing waitlist contact details to notify you at launch | Consent / legitimate interests (Art. 6(1)(a)/(f)) | Consent / legitimate interest (Art. 7, I / IX) |
| Customer service security, and Service improvement and analytics | Understanding which features help users; fixing bugs; designing better experiences | Legitimate interests (Art. 6(1)(f)), balanced against your privacy interests | Legitimate interest (Art. 7, IX) |
| Communications about the Service | Sending transactional notifications, important Service changes, and (where you opt in) occasional emails | Performance of contract (transactional) / consent (marketing) | Execution of contract / consent |
| Legal compliance and protection of rights | Responding to lawful requests; defending against claims; preventing fraud and abuse | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) | Legal obligation (Art. 7, II) / legitimate interest (Art. 7, IX) |
Scroll horizontally to see the full table →
6.1 We do not train AI models on your conversations
As of the effective date of this Policy, we do not use your identifiable conversations with Auré’s AI in the application, your group posts, your peer chat messages, or any sensitive content that identifies you, to train, fine-tune, or otherwise improve any AI model, whether ours or a third party’s. This commitment applies to your identifiable account and in-app content. It does not apply to anonymized website demonstration data described above and in our Terms of Service Section 3.6, which has been stripped of personal information and technical identifiers so that it no longer identifies you; anonymized demonstration data may be used internally to evaluate and improve our AI systems.
If, in the future, we wish to use such content for model training, we will:
- Update this Policy;
- Obtain your explicit, separate, opt-in consent through an in-app prompt; and
- Allow you to continue using all core features of the Service whether you give that consent or not.
Anonymized aggregate metrics (for example, how many users reached their first peer conversation in a given month) may be used for service improvement at any time, because such metrics do not constitute personal data once properly aggregated.
6.2 We do not sell your information
We do not sell your personal information in the ordinary sense of that word. We also do not “sell” or “share” your personal information as those terms are defined under the California CPRA, which captures certain forms of cross-context behavioral advertising and data brokerage. We do not engage in any of those activities.
6.3 No advertising; intake never feeds ad audiences
The Service does not display third-party advertising. We do not use your information to target you with ads, on or off our Service.
No information you share when experiencing Auré, joining the waitlist, onboarding, or talking with the AI is ever used to build, seed, or refine advertising audiences — including custom audiences or lookalike audiences — on any advertising platform. Any advertising measurement we perform on our website ends at the point a person begins interacting with Auré; it never extends into the conversation or anything you disclose within it.
7. Who we share your information with
We share personal information only as described below. We never sell your data and we never share it with advertisers.
7.1 Service providers (data processors) and related persons or entities
We use third-party service providers to operate the Service. Each is bound by an agreement that restricts their use of your information to providing services to us. The providers named below are examples of those we may use; we may add, remove, or substitute functionally equivalent providers as the Service develops, and we are not limited to the specific providers named. The categories of provider we may use include:
- Cloud hosting and infrastructure providers, which host the Service and store data on our behalf — for example Amazon Web Services (AWS), Google Cloud, Microsoft Azure, and Cloudflare, and comparable providers.
- Artificial-intelligence, large-language-model, and voice providers, to which your messages (and, if you use voice features, your audio) are sent so that responses can be generated or transcribed — for example OpenAI, Anthropic, Google (Gemini / Vertex AI), Microsoft Azure OpenAI, AWS Bedrock, and ElevenLabs, and comparable providers. Where such a provider processes the content of your conversations, we require by contract that it not use your content to train its models, not retain it beyond what is needed to return a response, and not use it for any purpose other than serving Auré.
- Crash and performance monitoring providers, which receive technical and diagnostic data but not the content of your conversations.
- Analytics providers, which receive usage events to help us understand and improve the Service — for example Google Analytics (configured without advertising features) and Microsoft Clarity, and comparable privacy-respecting providers. We do not use advertising pixels or advertising-targeting trackers (see the “No advertising” section).
- Payment processing: Apple App Store and Google Play, governed by their own privacy policies.
- Communications providers, which help us deliver transactional email, text-message (SMS), and push notifications such as confirmations, security alerts, and waitlist and launch updates — for example Twilio, SendGrid, Mailchimp, and Amazon SES, and comparable providers.
- Customer-support tooling, if you contact our support team.
The specific providers we use may change over time. Before launch, and on request at any time by contacting us at info@myaurelife.com, we will make available a current list of the providers that process personal data on our behalf.
We also share information with affiliates, related persons or entities, subsidiaries, or other business partners for the purposes of management and analytics, providing you with the Service, payment processing, website and mobile application data hosting, customer service, providing your account, compliance with industry standards and applicable law, security and performance monitoring, and other business activities.
If you remove information or content that you posted to the Service, copies may remain in cached and archived pages of the Service unless otherwise requested in writing except if not allowable by law.
7.2 The AI assistant
When you converse with Auré’s AI — whether in the application or in the light demonstration on our website — the content of your messages is transmitted to our AI model provider so that a response can be generated. The provider acts as a data processor on our behalf and is contractually required to delete your message after the response is returned and not to train its models on it. Separately, as described above, we log website demonstration conversations and anonymize them for our own internal evaluation and improvement.
Auré’s responses are generated by a language model. They are not the statements of a human professional and may contain errors, including factual errors or context errors. Do not rely on them for medical, legal, financial, or safety decisions and always keep in mind that there could be errors.
7.3 Groups and the AI safety monitor (the “anonymity” disclosure)
The application includes group circles where users in a similar situation can post and read each other’s reflections. We want to be precise about how groups work and what “anonymous” does and does not mean:
- Groups are not pre-screened by human moderators. Posts are shared with others in the room as you write them; we do not read and approve each post before it appears. Instead, an AI safety monitor is present in every room.
- An AI safety monitor evaluates room content for safety — including harassment, abuse, and indicators of crisis — and can act on what it detects in line with our Community Guidelines.
- You can report in one tap. Every room provides one-tap reporting. Reports are reviewed and acted upon under the Community Guidelines.
- Posts appear to other members under a pseudonymous handle, but are not anonymous to us. Authorized Auré personnel can access the account associated with a post — including your onboarding-provided attributes — where needed to handle a report, investigate a safety concern, or meet a legal obligation.
- We retain a record of group posts, including those removed by the safety monitor or after a report, for safety and audit purposes (Section 9).
We use the word “anonymous” in the product to describe the experience between members or users, not the relationship between you and the platform. We want this to be unambiguous.
7.4 Connecting with a peer (1:1)
Peer connections are optional and always under your control:
- You choose. You connect with a peer by reading short bios of real users in a similar situation and choosing whom to reach out to. The other person may reply, leave your message unanswered, or decline.
- Mutual opt-in per channel. Text, audio, and video each require both people’s separate consent. No channel opens unless you both agree to it.
- Trigger protection. Our connection logic carries bidirectional protection designed to avoid pairings likely to be distressing to either person.
When you connect with a peer, the other person can see your pseudonymous handle, the general context you are in, and the messages you choose to send. The other person cannot see your real identity, your email address, your phone number, your exact age, your city, or any other onboarding data unless you choose to share it in conversation. We strongly recommend that you do not share personally identifying information with peers, and we provide in-app guidance to this effect.
7.5 Safety, medical necessity, applicable law, and emergency situations
If we determine, in good faith, that there is an imminent risk of serious harm to you or another person, we may share information with emergency services or a designated emergency contact you have provided, to the extent necessary to address the issues. That is, we may disclose data to a doctor, licensed or qualified professional support such as a therapist, medical provider, or third party including governmental entity without your prior consent in any instances of medical necessity or emergency or otherwise comply with applicable law.
7.6 Independent professionals directory (future feature)
Auré may, in a future version, offer an optional directory of independent, verified professionals who choose to list themselves, searchable by location and language. These professionals are not Auré staff and accounts are individual. If and when this directory launches, we will update this Policy to describe exactly what information is and is not shared in connection with it. Until then, no such feature is active and no data is shared with any such professional.
7.7 Compliance
We may disclose your information to comply with a valid subpoena, court order, warrant, regulatory request or requirement, or other legal requirement or obligation. Except as otherwise provided, we will not voluntarily disclose your data without legal compulsion or requirement.
We may also disclose your information in our sole discretion in order to to establish, protect and/or exercise our rights to prosecute or defend against legal claims; to investigate, prevent and take action against suspected illegal activities and suspected fraud; to protect the rights, reputation, safety and security of our Service, employees, users of our Service, and/or the public; and to prevent, investigate and take action against any violation of our policies or agreements, or as otherwise required by law.
7.8 Corporate transactions
Information may also be shared with applicable third parties including successors and assigns, such as in the event of a corporate transaction including a business merger, bankruptcy, consolidation, joint venture, acquisition, or sale of assets. If such an instance occurs, your information may be transferred to another entity, subject to the same protections set out in this Policy or as updated under Section 20.
8. International transfers of personal data
Aure LLC is located in Florida, in the United States and is governed by Florida law. By using the Service, your personal information will be transferred to and processed in Florida in the United States and potentially in other countries where our service providers operate.
Subject to the Governing Law section below:
For users in the European Economic Area, the United Kingdom, and Switzerland, we rely on Standard Contractual Clauses (the European Commission’s 2021 SCCs and the UK Addendum) and, where applicable, additional safeguards including encryption in transit and at rest, pseudonymization where feasible, and contractual restrictions on processor access. A copy of the SCCs we use, with confidential commercial terms redacted, is available on request to info@myaurelife.com.
For users in Brazil, transfers occur under the LGPD’s international transfer mechanisms (Art. 33), specifically based on contractual clauses approved by the ANPD where applicable, your specific consent for transfers of sensitive data, and our binding commitment to maintain LGPD-equivalent protections.
Other jurisdictions: Auré complies with applicable laws; check the laws of your specific jurisdiction.
Truncated IP addresses are used for analytics. Full IP addresses are retained only as long as needed for security purposes (typically 30 days for fraud and abuse detection logs).
9. How long we keep your information
We retain personal information only as long as necessary for the purposes described in this Policy.
| Category | Retention period |
|---|---|
| Waitlist contact info | Kept for up to 160 days, by which point the application is expected to be live; at that time we update the website, this Policy, and the Terms, and either migrate you (with notice) or delete your waitlist details. You can ask us to remove you sooner at any time. |
| Website demonstration conversations | Logged and stored, then anonymized before internal review. After anonymization (removal of personal information and technical identifiers), the data no longer identifies you and may be retained internally to evaluate and improve our services and AI systems. |
| Account profile (onboarding data) | For the lifetime of your account, then 30 days after deletion. |
| Conversations with Auré’s AI | For the lifetime of your account, then 30 days after deletion. You can delete individual conversations or the full chat history at any time from privacy settings; deletion is propagated within 30 days. |
| Group posts | For the lifetime of your account; you can delete individual posts (removed from view immediately and from backups within 30 days). Safety records are retained for 24 months for safety review. |
| 1:1 peer chats | For the lifetime of your account; either party may delete the conversation, which removes it from both sides within 24 hours. |
| Safety-module records | Retained for 24 months in a restricted-access store, used solely for product safety review and legal defense. |
| Emergency contact info | For the lifetime of your account; you can remove or update it at any time. |
| Payment records | As required by tax law (typically 7 years), in a restricted store accessible only to finance and legal staff. |
| Server logs (security, fraud, abuse) | 90 days, then aggregated or deleted. |
| Backups | Rotated and overwritten; deletion requests are reflected in backups within 35 days. |
You may request deletion of your account at any time (Section 13). On deletion, all personal data tied to your account is erased except where retention is required by law (e.g., financial records) or for the establishment, exercise, or defense of legal claims, in which case the data is moved to a restricted-access store and the retention period for that data is documented. Except to the extent specifically prohibited by applicable law, Auré has no responsibility for any data transmitted to and from your device and/or computer and Auré recommends that you make regular back-ups of all information and data on your device and/or computer.
10. The Safety Flow
The application includes a safety flow designed to support users who appear to be in distress. This section explains how it works because it materially affects what we do with your information.
10.1 Detection
Our AI evaluates the content of your conversations, group posts, and peer chats for indicators of crisis (for example, expressions of suicidal ideation, intent to harm, or acute danger). This evaluation happens automatically. If a trigger fires, the app surfaces a gentle safety prompt and, depending on your response, may show a safety module — a full-screen view with safety options.
10.2 Geo-detected hotlines
If you choose to “Call a hotline,” the app uses your device’s coarse location (country and, where relevant, region) to identify an appropriate national or regional crisis line. We do not store this coarse-location lookup beyond the duration of the lookup itself. We do not connect the call ourselves; tapping the option opens your device’s dialer.
10.3 Trusted contact
You may, in conversation with Auré’s AI, choose to designate a trusted contact (typically a friend or family member). This person’s name and contact details (phone or email) are stored encrypted at rest and used only if you trigger the “Reach Trusted Contact” option from the safety module. We do not contact this person without your action.
10.4 What we don’t do
- We do not transmit your conversations to crisis hotlines or law enforcement automatically.
- We do not retain a long-term “risk score” file on you.
- We do not share safety-flow data with insurers, employers, government agencies (other than in response to lawful legal process), or any commercial third party.
10.5 Limits of the Safety Flow
The safety flow is not an emergency response system. It is a set of in-app affordances to help you find appropriate human resources. If you are in immediate danger, please contact local emergency services.
11. Security
We apply administrative, physical, and technical safeguards designed to protect your information, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256 or equivalent)
- Pseudonymization of conversational content from operational systems where feasible
- Strict role-based access controls; access to user content by Auré staff is limited to a small number of authorized personnel and is logged
- Periodic third-party security review and regular vulnerability scanning as the Service grows
- Incident response plan; in the event of a personal data breach, we will notify affected users and the relevant supervisory authorities within the timeframes required by applicable law (typically 72 hours for GDPR notifiable breaches)
No system is perfectly secure. We commit to working honestly with you and with regulators if something goes wrong.
We care about the security of your personal information and take reasonable physical, technological and administrative measures in an attempt to protect and safeguard your personal information against loss, theft, and unauthorized access, use, disclosure or modification. However, we cannot ensure or warrant the security of any information you provide to us as no system is perfect, nor can we guarantee that unauthorized access or theft of data will not occur. User discretion is advised when submitting personal information to the Service.
For features on our websites that require a login, password, two-factor authentication (2FA), biometric identification, or other means to access or use the Services, you are responsible to protect against unauthorized access by safeguarding the confidentiality of how you access or use the Services. We strongly encourage that you do not share this information with anyone.
12. Children
The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, you are not allowed to use the Service and must stop immediately. If we become aware that we have collected personal information from someone under 18, we will delete it without delay. Parents or guardians who believe their child has provided us with personal information may contact us at info@myaurelife.com.
This age requirement is stricter than the legal minimum in many jurisdictions because the nature of the Service — emotional content surrounding adult intimate relationships — is not appropriate for minors.
13. Your rights and choices
You have rights over your personal information. The specific rights available to you depend on your region; the bulk of them apply globally because we have chosen to extend GDPR-style rights to all users regardless of location.
13.1 Rights available globally
- Access — get a copy of the information we hold about you. Available in-app under Settings → Privacy → Download my data.
- Rectification — correct inaccurate information. Available in-app under Settings → Profile.
- Deletion — delete your account and associated personal information. Available in-app under Settings → Privacy → Delete account. Deletion is final and the Service will not retain a backup of your account beyond the periods stated in Section 9.
- Portability — receive a copy of the data you have given us in a structured, commonly used, machine-readable format. Available alongside Download my data.
- Withdraw consent — withdraw any consent you have given (including for processing of special category data) at any time. Available in Settings → Privacy → Consents.
- Object — object to processing based on legitimate interests. Contact info@myaurelife.com explaining the basis of your objection; we will respond within 30 days.
- Complain to a supervisory authority — if you believe we have not handled your information appropriately, you may complain to your local data protection regulator. We would, however, appreciate the chance to address the issue first.
13.2 California (CCPA / CPRA) — additional rights
If you are a California resident and are using the Service in California and subject to the Governing Law section below, you have:
- The right to know the categories and specific pieces of personal information we have collected, the sources, the purposes of collection, and the categories of third parties with whom we share it.
- The right to correct inaccurate personal information.
- The right to delete personal information.
- The right to opt out of “sale” or “sharing” of personal information (note: we do not sell or share personal information as those terms are defined under California law, but you have this right available regardless).
- The right to limit the use and disclosure of sensitive personal information to what is strictly necessary to deliver the Service. Auré’s onboarding data and conversational content qualify as sensitive personal information; we already limit its use to the purposes described in this Policy, and you can confirm or further restrict this in Settings → Privacy.
- The right to non-discrimination for exercising your privacy rights.
To exercise any of these rights, use the in-app controls or contact info@myaurelife.com. We do not require an account to make a verifiable request, but we will need to verify your identity to a reasonable degree of certainty before acting on a request involving sensitive information.
13.3 European Union, United Kingdom, and Switzerland — additional rights
In addition to the rights in Section 13.1, if you reside in the European Union, the United Kingdom, or Switzerland and you are using the Service in those countries and subject to the Governing Law section below, you have the right to restrict processing in certain circumstances (for example, while we verify the accuracy of contested data) and the right to lodge a complaint with the data protection authority in your country of residence.
You can find your local supervisory authority via the European Data Protection Board (EDPB) website or, for the UK, the Information Commissioner’s Office (ICO).
13.4 Brazil (LGPD) — additional rights
If you reside in Brazil and are using the Service in Brazil and subject to the Governing Law section below, under LGPD, in addition to the rights in Section 13.1, you have the right to: confirmation of the existence of processing; anonymization, blocking, or elimination of unnecessary or excessive data; information about the public and private entities with which we share data; information about the possibility of refusing consent and the consequences of doing so; and revocation of consent at any time.
The Brazilian National Data Protection Authority (ANPD) is the supervisory authority for LGPD complaints.
13.5 Other jurisdictions
Subject to the Governing Law section below, we extend the substance of the rights in Section 13.1 to all users globally. If a specific right is required under your local law and is not addressed above, please contact us at info@myaurelife.com and we will work with you to honor it.
13.6 Response times
We respond to verifiable rights requests within 30 days (extendable to 60 days for complex requests or longer in our discretion, with notification). There is no fee for the first request in any 12-month period; we may charge a reasonable fee for subsequent, repeated, or unfounded requests.
14. Cookies and similar technologies
Our website. When you visit myaurelife.com, we use a minimal set of strictly necessary cookies for the site to function and, with your consent, anonymized analytics cookies. We present a cookie banner that lets you accept or reject non-essential cookies, in line with GDPR and CCPA requirements. We do not use advertising cookies or third-party advertising pixels, and any advertising measurement ends at the point you begin interacting with Auré (Section 6.3). Our cookie policy is available at myaurelife.com/cookies.
Our application. Within the app, we use device-level identifiers and local storage to operate features and remember your preferences. We do not use these for advertising.
15. Do Not Track
Our website does not respond to “Do Not Track” browser signals at this time. We do not engage in cross-context behavioral tracking that would be affected by such signals.
16. Automated decision-making
Auré’s AI generates personalized responses and infers an internal context for you — drawn from factors such as how recently you discovered the betrayal, how long it went on, whether it has ended, and how you are feeling. These are not decisions with legal or similarly significant effects within the meaning of GDPR Art. 22 or other applicable law. These inferences affect which content, peers, and group options the Service shows you; it does not affect your access to essential services outside the Service or your eligibility for anything other than features of the Service itself.
If you disagree with how the system has placed you, you can: continue using the Service regardless (no part of the Service is gated by a hard wall on this basis); request that a human review the inference by contacting info@myaurelife.com; or provide feedback within the app.
17. Geographic availability
The Service is offered for use in the following countries at launch: the United States, the United Kingdom, Canada, Ireland, Australia, and New Zealand.
The Service is not currently offered in, and may not be used from, any country or region subject to comprehensive United States sanctions — currently Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine — or any other jurisdiction where local law makes offering the Service impracticable or where we are subject to applicable sanctions. This list may change as sanctions are updated. We plan to add further languages and markets after launch; when we do, we will update this Policy.
If you access the Service from a country where it is not offered, you do so at your own risk and we may in our sole discretion temporarily or permanently suspend or remove your account.
18. Region-specific addenda
For users in California, the European Union, the United Kingdom, Brazil, and Canada (specifically Quebec under Law 25), and subject to the Governing Law section below, region-specific addenda are available at myaurelife.com/privacy/regional. These addenda do not reduce the protections in this Policy; they describe the application of local laws and provide local contact details.
19. EU/UK representative; data protection officer
EU Representative under GDPR Art. 27: To be appointed before launch in Ireland/the EEA. We are required to designate a representative in the European Union because we offer services to data subjects in the EEA. The representative’s contact details will be added before that launch.
UK Representative under UK GDPR Art. 27: To be appointed before launch in the United Kingdom, applied separately following Brexit.
Brazil Data Protection Officer (Encarregado de Dados) under LGPD: Not applicable at launch — Brazil is not a launch market. To be appointed before any launch in Brazil as part of the Spanish / Latin-America fast-follow.
EU/UK Data Protection Officer: Auré is not currently required to appoint a DPO under GDPR Art. 37, but given the sensitivity of the data we process we may voluntarily appoint one. Contact info@myaurelife.com.
20. Changes to this Policy
We may update this Policy from time to time in our sole discretion. If we make material changes — changes that affect your rights, the categories of data we collect, the purposes for which we process data, or the parties with whom we share data — we will notify you in-app or by email at least 30 days before the changes take effect and, where required by law, obtain your renewed consent.
Non-material changes (for example, corrections of typos, updates to contact information, clarifications that do not affect your rights) may be made without advance notice. The “Last updated” or “Last revised” date at the top of this Policy will always reflect the most recent revision. A historical archive of previous versions is available at myaurelife.com/privacy/archive.
21. How to contact us
For any question, request, or concern about this Policy or your personal information:
- Email: info@myaurelife.com
- Postal mail: Aure LLC, Attn: Privacy Officer, 9349 Collins Avenue, Surfside, Florida 33154, United States
- In the EU/EEA: [REPRESENTATIVE CONTACT — TBA]
- In the UK: [REPRESENTATIVE CONTACT — TBA]
- In Brazil: [DPO/ENCARREGADO CONTACT — TBA]
We aim to respond to all privacy inquiries within 7 business days and to all formal rights requests within the statutory periods set out in Section 13.6.