AurePrivacy Policy
Aure records conversations you choose to record, turns them into text, and writes them up as notes and tasks. Recordings are personal by nature, so this policy is written to be read. If anything here is unclear, write to privacy@aurecard.com.
Who we are
Aure is operated by Exercise Augmented Reality Pvt Ltd, Bengaluru, India ("Aure", "we"). We are the data controller for your account and the recordings you make with Aure. Where your employer or organisation has set up Aure for its team, the organisation decides what its members share within it and is the controller for that shared use; this policy still governs how we process the data.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account: email address, name you choose, sign-in tokens | You, when you sign in | To create and secure your account |
| Audio recordings | Your microphone when you press record; the Aure card when it uploads | To transcribe and write them up for you |
| Transcripts, notes, tasks, insight cards, and questions you ask Aure | Produced from your recordings and your typing | The product itself |
| Time zone and language preferences | Your device | So "tomorrow at 2 pm" becomes the right moment, and so we transcribe in your language |
| Card telemetry: battery, storage, firmware, pending recordings, device identifier | The Aure card | To show card status and keep it working |
| Organisation data: your membership, unit, and what your organisation has chosen to roll up | Your organisation's admin | Team features you or your organisation turned on |
| Technical logs: request identifiers, timestamps, error messages | Our servers | To keep the service running and debug failures |
| Payment details for reservations | Razorpay, our payment provider | We receive confirmation and a reference, never your card number |
We do not collect your contacts, your location, or your phone's call logs. The Aure app does not record calls through the phone; it only records what the microphone hears when you have started a recording.
How recordings are processed
- Audio is uploaded over an encrypted connection and stored in a private bucket that only your account can read.
- Transcription and note-writing run on AI models. Today these run through an inference provider under contract to us (OpenRouter and the model providers it routes to). Audio and text are sent for processing only, are not used by those providers to train models under our agreements, and are not retained by them beyond processing.
- Recordings from the Aure card are encrypted on the card, verified on arrival, and processed the same way.
- Nobody at Aure listens to your recordings or reads your notes except to resolve a support request you have made, or where the law requires it.
Sharing
Your notes are private to you unless you share them: into a space with people you invite, to a friend, or to your organisation's units where your organisation has enabled that. What you share is visible to the people you shared it with, and org roll-ups may summarise shared notes for the unit's members. You can see and change what is shared from inside the app.
We do not sell personal data, and we do not show advertising.
Service providers
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, file storage, authentication | Mumbai, India (ap-south-1) |
| Vercel | Hosting and API | Global edge, functions in Mumbai |
| OpenRouter and routed model providers | Transcription and note generation | United States and EU |
| Resend | Transactional email (invitations, sign-in links) | United States |
| Razorpay | Payments for reservations | India |
| Apple and Google | App distribution and push notifications | Global |
Where processing happens outside India, it is done under contracts that require the provider to protect your data to at least the standard in this policy.
Retention
- Recordings, transcripts and notes are kept until you delete them or delete your account.
- Audio for a note can be deleted separately from its transcript inside the app.
- Card telemetry is kept for 90 days.
- Server logs are kept for 30 days.
- When you delete your account, all of the above is deleted within 30 days, except records we must keep for tax or legal reasons (payment references).
Your rights and controls
- Delete your account from the app: Me → Privacy & account → Delete account. This removes your recordings, notes, tasks, and profile. See aurecard.com/delete-account if you cannot open the app.
- Export your notes and transcripts from the same screen, or by writing to us.
- Access, correct, or object: write to privacy@aurecard.com. We respond within 30 days.
- If you are in the EU/UK you may also complain to your local supervisory authority. If you are in India, you have the rights set out in the Digital Personal Data Protection Act 2023, and our grievance officer can be reached at the same address.
Recording other people
You are responsible for recording lawfully. In many places you must tell people they are being recorded, and in some you need their consent. The Aure card shows a lit amber seam for the whole time it records so that people in the room can see it. Do not use Aure to record anyone secretly.
Children
Aure is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
Security
Data is encrypted in transit (TLS 1.2 or later) and at rest. Access inside Aure is limited by role and logged. The Aure card stores recordings encrypted and authenticates to our servers with a key unique to each card.
Changes
We will post changes here and, for material changes, tell you in the app or by email before they take effect.