Privacy Policy
This Privacy Policy explains how AOORA APPS, LLC (“we”, “us”) collects, uses, shares and protects personal data when you use our apps, websites, questionnaires and related services (the “Service”), and the rights you have. AOORA APPS, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, is the controller of your personal data. Contact: privacy@aoora.app.
1. Personal data we collect
1.1. Data you provide
- Identifiers and account data: email address, name (if provided), password or magic-link tokens, language.
- Questionnaire and profile data: answers you give during onboarding, such as age range, gender, goals, activity level, height, weight, target weight, dietary preferences, sleep habits and routines. Some of this may be health-related data.
- Birth data (Aoora: Relationship Map): dates, times and places of birth that you enter for yourself and, with their permission, for another person.
- Progress and content data: workouts, meals, habits, measurements, notes, photos you choose to upload.
- Purchase data: plan purchased, amount, currency, transaction identifiers and status. Card data is entered directly into our PCI-DSS-compliant payment processors; we receive only limited information such as card type, BIN country, last four digits and expiry.
- Communications: messages you send to support, including attachments, and your survey or review responses.
1.2. Data from third parties
- Apple / Google sign-in and app stores: identifiers and purchase status.
- Apple Health or Health Connect (only if you enable it): data types you choose to share, such as steps, workouts or weight. We do not use this data for advertising and do not share it with advertising partners.
- Payment processors and fraud-prevention services: payment outcomes, risk scores and dispute information.
- Advertising partners: information about the ad or campaign that brought you to the Service.
1.3. Data collected automatically
- Device and usage data: IP address, approximate location derived from IP, device model, OS, browser, app version, time zone, pages and screens viewed, clicks, session times, crash logs.
- Advertising identifiers (IDFA/GAID, where permitted) and click identifiers.
- Cookies, pixels and SDKs — see our Cookie Policy.
2. Purposes and legal bases
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Provide the Service, create your plan or chart, manage your account and subscription | Performance of contract |
| Process payments, send receipts, confirmation and renewal notices | Performance of contract; legal obligation |
| Process health-related questionnaire data to personalize your plan | Your explicit consent (which you may withdraw) |
| Customer support and communications about the Service | Contract; legitimate interests |
| Prevent fraud, abuse and unauthorized payments; defend against chargebacks and legal claims, including by keeping records of your acceptance of our terms (offer shown, time, IP, device) | Legitimate interests; legal obligation |
| Analytics, testing and improving the Service | Legitimate interests; consent where required for cookies/SDKs |
| Marketing emails about our own products (you can unsubscribe at any time) | Legitimate interests or consent, as required by law |
| Measuring and optimizing advertising, including sharing limited data with advertising partners | Consent |
| Complying with law, tax and accounting obligations and requests from authorities | Legal obligation |
3. With whom we share personal data
We do not sell personal data for money. We share it only with:
- Service providers acting on our instructions: cloud hosting and databases, web-funnel and questionnaire platforms, email delivery, customer support tools, analytics, crash reporting.
- Payment processors and acquirers (for example Solidgate and Stripe) and card networks, to process payments, prevent fraud and handle disputes.
- Advertising and measurement partners (for example Meta, Google and TikTok), with your consent, to measure campaigns and show relevant ads. Under some U.S. state laws this may be considered “sharing” or “targeted advertising”; see Section 5.
- App stores (Apple, Google) for purchases made through them.
- Professional advisers (lawyers, accountants, auditors) and authorities where required by law or to protect our rights, including in connection with disputes and chargebacks.
- Successors in a merger, acquisition, financing or sale of assets.
We never share health-related data or birth data with advertising partners for advertising purposes.
4. Data retention
We keep personal data as long as your account is active and as needed to provide the Service, then for as long as necessary to comply with legal obligations (for example, tax and accounting records, typically up to 7 years), resolve disputes, prevent fraud and enforce our agreements (payment and consent records are kept for at least the period during which a chargeback or claim may be brought). Health-related questionnaire data is deleted or anonymized when you delete your account, unless the law requires otherwise.
5. Your privacy rights
Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); not be subject to decisions based solely on automated processing with legal or similarly significant effects; and lodge a complaint with your data protection authority.
U.S. state privacy laws (including California CCPA/CPRA)
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws may request to know, access, correct and delete personal data, and to opt out of “sale”, “sharing” or targeted advertising. We honor Global Privacy Control signals. We do not knowingly sell or share personal data of anyone under 18. We use sensitive personal information (such as health-related data) only to provide the Service you requested. We will not discriminate against you for exercising your rights. You may use an authorized agent; we may need to verify your identity and the agent's authority. California “Shine the Light”: we do not disclose personal data to third parties for their own direct-marketing purposes.
Consumer health data
Where Washington's My Health My Data Act, Nevada SB 370 or similar laws apply, consumer health data is collected and used only to provide the Service you requested or with your consent, is not sold, and you may request access to or deletion of it.
How to exercise your rights: email privacy@aoora.app from your account email, or use the account deletion option in the app. We respond within the time required by law (generally 30 days in the EEA/UK and 45 days under U.S. state laws). If we decline a request, you may appeal by replying to our decision.
6. Age limitations
The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@aoora.app and we will delete it.
7. International data transfers
We are based in the United States and our providers may process data in the U.S. and other countries. Where we transfer personal data from the EEA, UK or Switzerland, we rely on adequacy decisions (including the EU-U.S. Data Privacy Framework where our providers are certified) or the European Commission's Standard Contractual Clauses and equivalent safeguards.
8. Security
We use administrative, technical and organizational measures such as encryption in transit and at rest, access controls and least-privilege principles. No method of transmission or storage is completely secure; please keep your credentials confidential.
9. Changes to this Privacy Policy
We may update this Policy. We will post the new version with an updated date and, for material changes, notify you by email or in the Service.
10. Contact us
AOORA APPS, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, +1 (484) 457-8250. Privacy requests: privacy@aoora.app. General support: support@aoora.app.