AURORA

Privacy Policy

Effective May 26, 2026

Aurora is a Bible AI app. This policy explains what data the app touches, where it goes, and what's never collected. We tried to write it in plain English — if anything's unclear, email us.

What stays on your device by default

Unless you opt in to sync, everything you create in Aurora lives only on your phone:

• Your selected tradition (denomination)
• Your daily streak and visit history
• Saved verses
• Journal entries and reflections

This data is stored in your phone's local app storage. We don't have a copy. Reinstalling the app or tapping "Reset all data" in Settings removes the local copy — we can't recover it for you.

Optional: Sign in with Apple + cross-device sync

If (and only if) you tap "Sign in" in Settings, Aurora uses Sign in with Apple to create an account and your data syncs across your Apple devices via Supabase (a Postgres database we operate). Specifically, after sign-in we store on the server:

• Your tradition, streak, and last visit date
• Your journal entries (date, the question you asked, the verse found, your reflection if any)
• Apple's anonymized user identifier (a long opaque string)
• Your email address — but only if you chose "Share My Email" in the Apple sign-in sheet. If you chose "Hide My Email," Apple gives us a relay address and we never see your real email.

Server data is protected by row-level security: only you (signed in as you) can read or change it. We do not look at the contents of your journal. We do not analyze, advertise against, or share it. You can sign out at any time (your local journal stays on the device but stops syncing), and you can delete your server-side data by emailing us.

What gets sent to our AI proxy

When you tap "Find scripture," two things are sent to our proxy server:

• The text of your question or struggle
• Your selected tradition (e.g. "Catholic" or "Evangelical Protestant")

The proxy is a Cloudflare Worker we operate. It immediately forwards your request to Anthropic (the company that builds Claude, the AI model that finds the verse). We do not store the contents of your question. We do not log it. The proxy keeps only the standard Cloudflare request metadata — IP address, timestamp — for rate limiting, retained briefly per Cloudflare's policy below.

What Anthropic does with your request

Anthropic processes your question to generate the verse and commentary. Per Anthropic's commercial API terms, they do not use API customer data to train their models. Anthropic retains data per their privacy policy, available at anthropic.com/legal/privacy.

What Cloudflare sees

Cloudflare hosts our proxy. They see standard request metadata — IP address, timestamps, headers — retained briefly for security and abuse prevention. Their privacy policy: cloudflare.com/privacypolicy. We use this only to enforce rate limits.

No analytics, no ads, no data brokers

We don't run analytics or telemetry. We don't display ads. We don't sell or share data with marketers or data brokers. The only third parties involved are the ones named above (Anthropic, Cloudflare, and — if you opt in — Apple for Sign in with Apple and Supabase for sync storage), each used only for the specific purposes described.

A note on the AI's answers

Your rights

You can sign out at any time (server data is preserved so it's there when you sign back in). You also have the right to request a copy of your data — email hello@aurorabible.app and we'll send your journal entries as JSON within 7 days.

Deleting your account

If you signed in to Aurora with Apple, you can delete your account and every piece of data tied to it directly from inside the app — no email or phone call required:

1. Open Aurora and tap the You tab (bottom right).
2. Scroll to the bottom and tap Delete account.
3. Confirm twice. Your account, journal entries, saved verses, tradition preference, and visit history are removed from our servers permanently within seconds.

If you've never signed in, your data lives only on your phone — uninstalling the app deletes everything Aurora has. There is no account to delete in that case.

If for any reason the in-app deletion fails or you cannot access the app, email hello@aurorabible.app and we'll process the deletion manually within 7 days.

Children

Aurora is not directed at children under 13. Even with the crisis safety layer, the AI may discuss topics not appropriate for young children.

Changes

If we change this policy, we'll update the "Effective" date and post the change here. For material changes — like starting to collect accounts — we'll require you to acknowledge the new policy in-app.

Contact

Aurora · hello@aurorabible.app