Privacy Policy
Last updated: April 17, 2026
Aura Hub ("we", "our", or "us") operates the Aura Diary mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Who We Are
Aura Hub is an independent software company based in Lagos, Nigeria. You can contact us at:
- Email: support@auradiary.app
- Website: https://aurahub.com.ng
2. What Data We Collect
Data you provide directly
| Data | Why we collect it |
|---|---|
| Email address | Account creation and login via Supabase Auth |
| Display name | Shown on your profile and leaderboard |
| Journal entries (text) | Core app functionality — storing your diary |
| Voice recordings (audio) | Voice-to-text transcription and audio playback |
| Mood ratings | Mood tracking and analytics |
| Tags and labels | Entry organisation |
| Notification preferences | Sending you reminders you configure |
Data collected automatically
| Data | Why we collect it |
|---|---|
| App crash reports | Diagnosing and fixing bugs (via Sentry) |
| Feature usage events | Understanding how the app is used (via PostHog) |
| Ad impressions and interactions | Serving relevant ads to free-tier users (via AdMob) |
| Device identifiers | Required by AdMob for ad delivery |
| IP address | Included by default in server requests |
3. How We Use Your Data
- Provide the service — storing your journal entries, syncing across devices, delivering AI features
- Improve the app — crash reports and analytics help us fix bugs and prioritise features
- Process payments — subscription billing via RevenueCat (App Store / Play Store) or Paystack (web)
- Send reminders — push notifications you opt into and can disable at any time
- Serve ads — free-tier users see ads via Google AdMob; Pro users see no ads
- AI features — journal text is sent to Together AI for polish and summarisation (Pro only); we do not retain your text on Together AI's servers beyond the duration of the API call
4. Where Your Data Is Stored
| Data type | Where stored | Encryption |
|---|---|---|
| Journal entries (text) | Supabase (PostgreSQL, EU region) | Encrypted at rest — your entries are encrypted with a per-user key before being stored. Our engineers cannot casually read them. |
| Voice recordings | Supabase Storage | Encrypted at rest and in transit (TLS) |
| Authentication data | Supabase Auth | Managed by Supabase |
| Local device data | On-device only (WatermelonDB) | Device-level encryption |
Free-tier users' entries are stored locally only and never uploaded unless they enable cloud sync.
5. Third-Party Processors
We share data with the following third parties only to the extent necessary to operate the service:
| Processor | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, file storage | All cloud data | https://supabase.com/privacy |
| Together AI | AI text polish and summarisation (Pro) | Journal text during API call only | https://www.together.ai/privacy |
| RevenueCat | iOS and Android subscription management | User ID, purchase receipts | https://www.revenuecat.com/privacy |
| Paystack | Web payment processing (NGN) | Email, payment details | https://paystack.com/privacy-policy |
| Google AdMob | Ads for free-tier users | Device identifiers, usage data | https://policies.google.com/privacy |
| Sentry | Crash reporting and error tracking | Crash logs, device info, user ID | https://sentry.io/privacy |
| PostHog | Product analytics | Anonymous usage events, user ID | https://posthog.com/privacy |
We do not sell your personal data to any third party.
6. Data Retention
- Active accounts: your data is kept for as long as your account exists
- Deleted accounts: all data is permanently deleted within 30 days of account deletion (see §8)
- Crash logs: retained for 90 days on Sentry
- Analytics events: retained for 12 months on PostHog
7. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the data we hold about you
- Correction — request that inaccurate data be corrected
- Deletion — request that your account and all associated data be deleted (see §8)
- Portability — export your journal entries as PDF, Markdown, or JSON from the app (Pro feature)
- Objection — object to processing for analytics or advertising
To exercise any of these rights, email us at support@auradiary.app or use the in-app account deletion feature.
8. Account and Data Deletion
You can delete your account and all associated data at any time:
In the app: Profile → Account → Delete Account → confirm by typing "DELETE"
This permanently deletes:
- Your Supabase Auth account
- All journal entries, mood data, tags, and audio files stored in the cloud
- Your subscription record
- All AI usage logs
Deletion is immediate and irreversible. Local data on your device is also wiped. See our Data Deletion page for more details.
9. Children's Privacy
Aura Diary is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us at support@auradiary.app and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your data:
Aura Hub Lagos, Nigeria support@auradiary.app https://aurahub.com.ng