Privacy Policy

Delete your Aure account

If you cannot access the app, email privacy@alnuir.com for assistance with an account-deletion request.

Scope and our approach

This Privacy Policy describes how Alnuir (“Alnuir,” “we,” “us,” or “our”) processes information through the Aure mobile application, website, and related services. Aure is a heart-nutrition wellness app, so some information we handle may be considered sensitive personal information or consumer health data under applicable law.

Data we collect

Account and contact information

Email address, authentication identifiers, account credentials in protected form, name, and information provided through Sign in with Apple. We also collect information you send to support or in feedback.

Profile and heart-nutrition preferences

Age, biological sex selection, height, weight, activity level, time zone, calorie target, and goals such as general heart health, cholesterol-supportive habits, lower sodium, or lower sugar. These details help personalize limits, scores, and insights.

Scans, food logs, and insights

Barcodes, product names and brands, serving information, ingredients, nutrient values, Heart Index results, personalized insights, scan history, logged foods, daily summaries, Heart Scores, streaks, quotas, and related timestamps.

Nutrition Facts label photos are currently read on your device using Apple’s Vision technology. The image itself is not sent to Alnuir for OCR. Recognized nutrition information and a resulting scan record may be saved when you continue with or log the scan.

Device, usage, and purchase information

App version, device and operating-system information, IP address, time zone, push-notification token and preferences, feature activity, diagnostics, security events, and subscription entitlement or transaction status. Apple processes payment-card information; we do not receive your full payment-card number.

Where data comes from

We collect information:

• directly from you when you create an account, complete onboarding, scan or log food, change goals, or contact us;
• automatically from your device and your use of Aure;
• from Apple when you use Sign in with Apple, purchase a subscription, or enable notifications; and
• from food and nutrient databases when Aure looks up a barcode or product.

How we use data

We use information to:

• create and secure your account and provide customer support;
• identify foods, calculate nutrition results, personalize limits and insights, and maintain your scan history and dashboard;
• manage free and paid scan allowances, subscriptions, and entitlements;
• send service messages and notifications you choose to receive;
• detect misuse, prevent fraud, troubleshoot, and protect Aure and its users;
• understand feature performance and improve the Services; and
• comply with law, enforce our terms, and establish or defend legal claims.

Where required, we rely on your consent. We may also process information to provide the Services you requested, comply with legal obligations, and pursue legitimate interests such as security and product improvement, where those interests are not overridden by your rights.

AI-powered insights

When you request personalized insights, Aure sends limited product information—such as nutrition values, serving details, ingredients, and the product’s positive or negative nutrition factors—together with relevant goal, focus-nutrient, and daily-limit context to our AI service provider through authenticated cloud functions. The provider processes that information to generate the requested text. Successful results may be cached in your user-scoped account to improve speed and reduce repeated processing.

AI output can be inaccurate and is not used to make legal or similarly significant decisions about you. It is wellness guidance, not medical advice.

How we share data

We disclose information only as reasonably needed to:

• Cloud and account providers, including Google Firebase, for authentication, database hosting, server functions, security, and operational logs;
• AI providers, including OpenAI, to generate the personalized insight you request;
• Subscription providers, including Apple and RevenueCat, to process purchases and maintain entitlement status;
• Food-data providers, such as Open Food Facts or USDA data services, to find product and nutrient information;
• Notification and technical providers that help deliver messages, diagnose failures, or operate Aure;
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security; or
• A successor organization in a merger, financing, reorganization, or sale, subject to appropriate safeguards.

Providers may process information only for the services they perform for us or as otherwise disclosed to you. Aure does not have public profiles or social sharing of your scans and health-nutrition data.

Consumer health data privacy

This section is our consumer health data notice. “Consumer health data” means personal information that identifies or can reasonably be linked to you and relates to your past, present, or future physical or mental health, as defined by applicable law.

Aure may collect or infer consumer health data from your age, biological sex selection, height, weight, activity level, heart-health goals, nutrition scans and logs, personalized limits, Heart Index results, Heart Scores, and daily patterns. We collect it from you, your device, and the food-data sources described above. We use it to provide the features you request, personalize heart-nutrition guidance, maintain your history, improve accuracy and reliability, secure the Services, and comply with law.

We share consumer health data only with the service-provider categories described in “How we share data,” and only where needed to provide Aure or with your consent. We do not sell consumer health data. We will obtain any consent required by applicable law before collecting or sharing consumer health data for a new purpose.

Depending on where you live, you may have the right to confirm whether we collect or share consumer health data, access it, withdraw consent, or request deletion—including deletion from processors where required. To exercise these rights or appeal a decision, email privacy@alnuir.com. We may verify your identity before completing a request.

Retention and deletion

We keep account, profile, scan, and dashboard information while your account is active and for only as long afterward as reasonably necessary for the purposes described here, including security, legal compliance, dispute resolution, and fraud prevention. Retention periods vary by data type and legal obligation.

You can delete your Aure account from the app. Account deletion removes your Firebase authentication account and recursively deletes the active user record and its related scan, dashboard, usage, and insight-cache data. Limited information may remain temporarily in backups, security logs, or provider systems, or where retention is legally required. It will be isolated from ordinary use and deleted or de-identified under the applicable retention schedule.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access and user-scoped storage. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. If a qualifying breach occurs, we will provide notices required by applicable law.

Your choices and privacy rights

• Profile: review or update goals and available profile details in Aure.
• Camera and notifications: manage permissions in iOS Settings. Disabling camera access prevents scanning; disabling notifications stops optional push messages.
• Account deletion: use the in-app delete-account control or contact us.
• Privacy requests: depending on your location, request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an appeal.

Submit a request to privacy@alnuir.com. We may need to verify your identity and authority. We will not discriminate against you for exercising a privacy right. You may also have the right to complain to your local data-protection authority or state attorney general.

Age, international transfers, and HIPAA

Children and age restrictions

Aure is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that a child under 13 has provided personal information to Aure, we will take reasonable steps to delete it.

If you believe that a child under 13 has provided personal information to Aure, please contact us at privacy@alnuir.com.

International processing

Alnuir and its providers may process information in the United States and other countries whose privacy laws may differ from those where you live. Where required, we use recognized safeguards for international transfers.

HIPAA

Aure is a consumer wellness service and is not offered on behalf of a HIPAA-covered healthcare provider or health plan. Information you provide directly to Aure may not be protected by HIPAA, though other privacy and consumer-protection laws may apply.

Updates and contact

We may update this policy as Aure or applicable law changes. We will update the effective date and provide additional notice when required. Material changes will not be applied retroactively in a way that reduces your rights without any consent required by law.

Questions, requests, or appeals may be sent to privacy@alnuir.com. General support is available at support@alnuir.com.