Privacy Policy

1. Who we are and what this covers

Aura is a native Mac and iPhone application made and published by Type Visions ("we", "us", "our"). This Privacy Policy covers the Aura application (the "App") and the website at auragenerate.com (the "Site"). If you have any question about it, write to support@auragenerate.com.

2. The short version

The App has no accounts, no analytics and no servers of ours. Everything you make stays on your device or goes directly to the AI providers you choose, using your own API keys. The Site uses privacy-friendly aggregate analytics and stores only what you send us through the contact form or by email.

3. Information the App does not collect

The App does not collect, store on our systems, or transmit to us any of the following:

• Your API keys or other credentials
• Your prompts, settings or generation parameters
• Your generated content (images, videos, voiceovers, music)
• Your personal files, reference images or library
• Usage analytics, telemetry or crash reports
• Device identifiers, advertising identifiers or location data
• Payment details, which Apple processes (see section 7)

In App Store terms, the App's privacy label is "Data Not Collected".

4. What stays on your device

The App keeps its working data locally, under your control:

• API keys are stored in Apple's Keychain on the device where you entered them.
• Generated media, your library, projects, favorites and history are saved in the App's own storage on your device.
• Provider catalogs, model schemas and system prompts are copied to your Application Support folder so you can inspect or edit them.
• Diagnostic logs (for example crash or hang reports) are written to the same folder. They are never sent anywhere automatically; you decide whether to share one with us when asking for support.

Deleting the App, or its Application Support folder, removes this data. We hold no copy.

5. Data you send to third-party AI providers

When you generate content, enhance a prompt, refresh a provider's model list, or use the Heal feature to repair a failing request, the App sends the relevant prompt, parameters, reference files and request details directly from your device to the provider you selected, authenticated with your own key. Depending on the providers you connect, this may include Kie.ai, FAL.ai, Runware, Replicate, Runway, Higgsfield, OpenAI, Anthropic, xAI, Perplexity or any custom endpoint you configure.

Those providers process your data under their own terms and privacy policies, as part of your own account with them. We do not sit in between, and we never receive, see or store what you send them or what they return.

6. Agent access

On the Mac, you can optionally turn on Agent Access, which lets a local AI agent you already use (such as Claude Desktop or Claude Code) ask the App to generate media on your behalf. This connection runs entirely on your computer. Your keys still never leave the device, and you choose which agents to connect and can turn the feature off at any time.

7. Purchases

The App is sold through Apple's App Store. Apple handles the transaction, so we never receive your name, address, card or bank details. Apple's Privacy Policy governs that data. The App checks your purchase or trial status on the device itself.

8. Permissions

The App asks only for what a feature needs: network access to reach the providers you configured, and access to the files or Photos items you choose to open, import or save. It does not request your location, contacts, camera or microphone.

9. The Site

The Site is different from the App, and this is everything it touches:

• Hosting: the Site runs on Vercel. Like any web host, Vercel may keep short-lived server logs, including IP addresses, for security and operations.
• Analytics: we use Vercel Analytics and Speed Insights, which record aggregate page views and performance metrics without cookies and without identifying you or tracking you across other sites.
• Contact form: if you send a message, we store your name, email address, the message and the IP address it came from, so we can reply and prevent abuse. Delivery uses Resend, an email service.
• Launch list: if you ask to be notified when Aura is released, we store your first name, email address, the time, and the IP address the request came from. We use it to tell you when Aura is available and to send occasional news about the app, such as new features or offers. We never sell or rent the list. Every message has an unsubscribe link, and you can also write to us to be removed.
• Email: if you write to us, we keep the correspondence for as long as it takes to help you.
• Bot protection: the signup form is protected by Cloudflare Turnstile, a privacy-focused alternative to traditional CAPTCHAs. It checks the request in the background and may set a short-lived cookie for that purpose. Cloudflare states that it does not use the data to profile or track people across sites.
• Cookies: apart from the Turnstile check above, the Site sets no cookies for visitors. A strictly necessary session cookie is used only when our own staff sign in to the Site's admin area, and preview versions of the Site may set a password-gate cookie.
• No advertising, no ad networks and no third-party trackers.

10. How we use and share information

We use the little we do receive to answer you, to operate and secure the Site, and to comply with the law. We do not sell personal information, do not share it for advertising, and share it only with the service providers named above (Vercel for hosting, Resend for email, Cloudflare for bot protection, Neon for the database) or when a law or court requires it.

11. Retention

For the App, there is nothing for us to retain. For the Site, contact messages and emails are kept for as long as needed to handle your request and are then deleted. Server logs follow Vercel's retention periods.

12. Your rights

You can ask us to show, correct or delete anything you have sent us by emailing support@auragenerate.com. We honor requests under the GDPR, the UK GDPR, the California Consumer Privacy Act and similar laws. We do not sell or share personal information as those laws define it, and we do not track you across websites, so there is nothing to opt out of.

13. Children

The App and the Site are not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has sent us personal information, contact us and we will delete it.

14. Security

Keys live in Apple's Keychain, all provider traffic uses HTTPS, and the Site is served over HTTPS with strict security headers. The best protection, though, is that we simply do not hold your data.

15. Where data is processed

The Site is hosted in the United States. The AI providers you connect process data wherever their own services run; check their policies for details.

16. Changes to this policy

We may update this Privacy Policy from time to time. Changes are posted on this page with a new "Last updated" date, and material changes will also be noted in the App's release notes.

17. Contact

Type Visions, publisher of Aura. Email: support@auragenerate.com.