Privacy Policy

Beta sign-up measurement

We use first-touch campaign labels (utm_source, utm_medium, utm_campaign, utm_content and utm_term), the referring domain, landing page path and first-touch time to understand how families reach the beta. A random identifier and these labels are held in sessionStorage for the browser tab session, for up to 24 hours, so moving between our pages does not overwrite your original source. Internal beta links use a separate entry-point label. This measurement is separate from your optional answer to how you heard about Aurion.

We count measured anonymous visits, beta-link clicks, accepted sign-ups and email confirmations, and associate sign-up source information with your beta registration. We do not store full referring URLs or raw IP addresses in this measurement dataset. Campaign values should not contain personal information. Measurement records are kept for 90 days and cleared on subsequent visit processing; if the website receives no visits, cleanup occurs when processing resumes. The beta email list follows its separate unsubscribe process. Disabling JavaScript does not prevent beta sign-up, but automatic source information may be unavailable.

Website analytics

We use Amazon Web Services (AWS) CloudWatch RUM on our public website to understand visits. It measures page views, referring domains, browser and operating system, device type, language, and approximate location such as country or region. It may generate temporary identifiers held in page memory. We disable analytics cookies and do not persist analytics identifiers in browser storage or use browser fingerprinting. We do not enable session recording or collect form contents, URL query parameters, or URL fragments through this tool. We do not send your beta sign-up email or the answer you type in the source question to RUM. AWS processes this measurement data in the US West (Oregon) region and retains raw RUM event data for 30 days. See AWS’s data collection information.

Beta sign-up and how you found us

If you join the beta candidate list at /launch, we store your email address, the sign-up page, and registration, confirmation and unsubscribe records. We also offer the optional question “How did you hear about Aurion?” with Search, AI assistant (ChatGPT, Perplexity…), X, LinkedIn, Friend or family, and Other choices. If you choose Other, you may add a short answer. We store that answer with your sign-up to understand how families discover Aurion and improve our outreach. Answering is optional and does not affect your place on the candidate list. Please do not include personal or sensitive information in this answer. Contact support to request access to or deletion of your sign-up information.

Information we collect

Depending on the features you use, Aurion may collect or process:

• Account information such as email address, display name, sign-in provider, authentication status, and support communications.
• Household information such as family profile details, members, roles, permissions, preferences, locale, time zone, and optional location settings.
• Calendar, task, reminder, checklist, preparation, and related content that you create, import, edit, or ask Aurion to manage.
• Conversation content, voice input and transcripts, assistant requests, generated responses, and related operational metadata when you use chat or voice features.
• Photos, camera captures, documents, attachments, and other materials that you choose to upload for profiles, planning, extraction, or content recognition.
• Location information that you choose to provide or allow while using the app, such as household places, map selections, route endpoints, and travel checks.
• Connected-service information such as provider metadata, authorization tokens, remote identifiers, and sync state when you connect an external service.
• Technical information such as device and push-notification identifiers, notification preferences and delivery status, app version, logs, diagnostics, security events, and network information needed to operate and protect the service.

Google Sign-In and Google data

If you choose Google Sign-In, Aurion may request basic profile information such as your name, email address, and profile identifier to create or access your account. If you separately connect Google Calendar, Aurion may request calendar permissions to read, synchronize, create, update, and delete calendar events only when needed for calendar features you use or actions you request.

If you separately enable the optional Gmail connection, Aurion requests read-only access to message metadata, message content, and relevant attachments so it can surface reviewable reminders, tasks, calendar proposals, and preparation items according to the email rules you configure. Aurion does not use this permission to send, modify, label, or delete Gmail messages.

We use Google user data only to provide or improve user-facing Aurion features such as authentication, household coordination, calendar sync, reminders, email productivity, and support. We do not sell Google user data, use it for advertising, or use it to train generalized AI models. Aurion's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Apple, Microsoft, iCloud, and other connected services

If you use Sign in with Apple, Aurion receives the account identifier and any name or relay email address that you choose to share. If you connect Microsoft Outlook, iCloud, a public calendar, or another supported service, Aurion processes the credentials, authorization tokens, account identifiers, calendar or email content, and synchronization state needed to provide the connection you request. Permissions and available actions depend on the provider and the options you enable. You can disconnect a connected service from Aurion and may also revoke access with that provider.

Photos, location, notifications, and biometrics

Aurion accesses the camera, microphone, photo library, or location only after you use a feature that needs it and grant the related device permission. Materials you choose to upload may be stored by Aurion and processed by service providers when needed for extraction, recognition, AI assistance, or another feature you request. Location is used for place selection, household planning, routes, and travel checks; Aurion does not request always-on location access.

If you enable notifications, Aurion and its delivery providers process push tokens, device information, notification preferences, and delivery status to send service notifications. Face ID or another device biometric may be used to confirm an account action, but biometric templates remain under the operating system's control; Aurion receives only the authentication result.

Google Workspace data and AI models

Aurion does not use data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or machine learning models, and does not permit its AI service providers to do so.

How we use information

We use information to provide Aurion features, authenticate users, sync household data, personalize assistant interactions, operate AI and voice workflows, send service notices, provide support, improve reliability, prevent abuse, maintain audit records, and comply with legal obligations.

Family and shared-device use

Aurion is designed for family use. Information added to a shared household space may be visible to other members or administrators according to household roles, audiences, and visibility settings. Avoid adding information you do not want shared with your household.

AI and voice services: data, recipients, and permission

AI planning and assistance are core Aurion features. Depending on the request and features you enable, we send your messages and conversation context, voice recordings or transcripts, photos or files you submit, and relevant family profile, calendar, task, and connected email content to the following providers. This information is used to understand requests, extract planning details, create answers and suggestions, and provide speech recognition or spoken responses.

• Amazon Web Services (AWS): Amazon Bedrock processes AI requests and relevant context. Amazon Transcribe processes voice input to produce text; recordings may be sent directly from your device to AWS using short-lived authorization. Amazon Polly processes response text to generate speech.
• DeepInfra, Inc.: processes AI requests and relevant text or image content through Aurion's backend for answers, planning, and content recognition.

The updated iOS app presents this disclosure and asks you to expressly agree to AI data sharing before continuing with sign-in or registration. The choice is not preselected. Existing signed-in users who have not accepted the current disclosure are asked to review it before continuing into the app. Choosing Not now does not grant permission. Because AI is integral to this service, you cannot continue into the app without agreeing; you can contact support to request access to, export, or deletion of your existing account data.

Connected-service authorization and device permissions are separate from AI consent. Connecting a calendar or email source permits the relevant content to be used for the Aurion features you enable, including AI assistance. Only connect and share information that you are entitled to use. Do not submit passwords, verification codes, or unnecessary sensitive information in messages or attachments.

Our AI service providers must protect personal information to the same or a greater level as this policy, with limited-purpose processing, confidentiality, access controls, and appropriate security safeguards. Requests are sent over encrypted connections. Provider processing is governed by applicable service terms and privacy protections; see AWS Bedrock data protection and DeepInfra data privacy. Provider retention can include limited operational or security records; we do not promise that every service retains no data.

Aurion does not use your private family content to train generalized AI models. We configure the production AWS account to opt out of Amazon Transcribe and Amazon Polly using customer content for service improvement. DeepInfra describes its inference-data and model-specific exceptions in the linked data privacy documentation. AI responses can be inaccurate; review suggestions before relying on them. Processing may take place in the United States or another location used by the relevant provider, which may be outside your country of residence.

Other service providers

We also use cloud hosting, email delivery, notification delivery, and connected calendar or email providers. They process information needed to operate the features you request, subject to the same protection requirements described above.

Data protection and retention

We use administrative, technical, and organizational safeguards designed to protect information, including access controls and encryption for sensitive credentials where applicable. We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, maintain security, and support backup or audit requirements.

Your choices

You can disconnect connected calendar or email accounts, change household settings, request an export of your account data, or start account deletion from Account Security in the app. Disconnecting a Google account stops future access through that connection; you may also revoke Aurion's access from your Google Account. The last administrator of a household may need to transfer administration or remove the household first. Some records may remain for a limited period in backups, audit logs, fraud-prevention records, or records we are legally required to keep.

Children

Aurion is intended for adults and families under adult supervision. It is not intended for unsupervised use by children under 13. Parents or guardians are responsible for managing a child’s participation in a household account.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and provide additional notice when appropriate.

Contact

For privacy questions, data requests, or support, email support@hiaurion.com. Please do not attach passwords, authentication codes, or unnecessary sensitive family information.