Page 1 of 1

Privacy

1. Controller

The controller for the Auroa app is Auroa, legal@shomi.cc. Core financial data (accounts, transactions, budgets, recurring payments, savings goals, events, etc.) is not stored on servers operated by Auroa — it is handled in on-device app storage.

2. What data is processed?Financial content you enter or import: accounts, transactions, categories, budgets, payments, savings goals, events and related metadata (amounts, dates, notes, places).Media: optional receipt/transaction images stored locally in the app.Profile (optional): first name, last name, date of birth, profile photo — on device.Usage patterns: local frequency data for UI personalisation — not sent to Auroa servers.Technical data as provided by iOS for app operation.No advertising, tracking or analytics SDKs operated by Auroa.
3. Purposes and legal bases (GDPR-style)Contract / steps prior (Art. 6(1)(b) GDPR): providing app features.Consent (Art. 6(1)(a)): e.g. AI receipt analysis, location / nearby merchant suggestions, notifications after opt-in; AI features can be disabled in Settings.Legitimate interests (Art. 6(1)(f)): e.g. fetching public exchange rates and keeping the app reliable without building a personal cloud profile at Auroa.
4. Storage and security

Data is stored locally using iOS mechanisms. iCloud Backup and exports you trigger follow Apple’s or your recipient’s rules. Optional app lock uses iOS device authentication; biometric raw data stays in the system.

5. SharingNo sale of personal data.xAI (Grok) — only when AI is enabled:Receipt analysis: selected receipt images (and related prompt context such as categories/currency),Budget forecast: budget name, limit, spending metrics and selected recent expense items (no receipt image). See https://x.ai.Apple MapKit / Core Location: location and POI suggestions with your permission — separate from xAI.Frankfurter.app: exchange-rate lookups (currency pairs); no user-account transfer by Auroa.Export/Share: only when you initiate it.
6. Location, camera, photo library

Used only with your OS permission (e.g. transaction location, nearby merchants, receipt photos).

7. Notifications

After explicit permission, reminders may be sent — managed in iOS Settings.

8. Export and deletion

You may export (CSV/PDF) and erase data (reset or in-app deletion). Backups (iCloud/Mac) may persist separately.

9. Your rights

Where GDPR applies: access, rectification, erasure, restriction, portability, objection and withdrawal of consent — contact legal@shomi.cc. Local data can also be managed directly in the app.

10. Children

Not directed at children under 16.

11. International transfers

Using AI or other foreign services may involve processing outside the EEA/CH — check provider documentation (e.g. xAI).

12. Changes

We may update this policy and publish it in-app. Please review periodically.

13. Contact

Privacy requests: legal@shomi.cc