Privacy Policy

This Privacy Policy (“Policy”) describes how AuraLift AI, Inc., doing business as AuraLift (“Company,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the AuraLift platform, including all websites, mobile applications, application programming interfaces, AI coaching services, and related tools and services (collectively, the “Service”).

By accessing or using the Service, you (“User,” “you,” or “your”) acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Policy, you must not access or use the Service.

AuraLift provides AI-powered wellness coaching through artificial intelligence technology. In accordance with applicable state and federal regulations, we disclose the following:

• All coaching interactions on AuraLift are conducted by artificial intelligence, not by human beings.
• The AI coaching system is a computer program. It is not a human, it cannot feel human emotion, and it does not possess consciousness or subjective experience.
• AI coaching does not constitute professional therapy, counseling, psychiatric care, medical treatment, or any form of licensed mental health service.
• AI-generated responses are based on computational analysis of text patterns and evidence-informed wellness coaching frameworks, not on clinical judgment.
• The AI system cannot independently diagnose mental health conditions, prescribe medications, or create clinical treatment plans.
• Users are reminded of the AI nature of the Service at the start of each session and at regular intervals during extended sessions.

This disclosure is provided in compliance with, among others, the Utah Artificial Intelligence Transparency Act (HB 452), the New York AI Companion Models Law, California AB 3030, and applicable FTC regulations regarding AI-generated content.

Information You Provide Directly

• Account registration information: email address, first name, last name, and password (or OAuth credentials for Google Sign-In)
• Consultation intake responses: presenting concerns, wellness goals, preferred coaching pace, prior therapy/coaching experience, current mood
• Conversation content: text and voice messages exchanged with the AI coaching system
• Journal entries: written reflections, personal notes, and tagged entries
• Mood tracking data: self-reported emotional states, mood scores, and contextual notes
• Goals and commitments: personal wellness goals, progress tracking, and action plans
• Payment information: processed exclusively through Square; we do not store credit card numbers, bank account information, or financial credentials on our servers
• Feedback and support communications: messages sent to our support team, survey responses, and feature requests

Information Collected Automatically

• Device and browser information: device type, operating system, browser version, screen resolution
• Usage data: session frequency, session duration, feature usage patterns, navigation paths
• Technical logs: error reports, crash data, performance metrics, API response times
• Cookies and similar technologies: session cookies for authentication, preference cookies for user settings
• Voice data: when using voice coaching features, audio is processed in real-time through third-party speech-to-text services (Inworld AI) and is not stored after transcription

Information Derived from AI Processing

• Emotional state analysis: pattern-matched emotional indicators derived from conversation text (e.g., anxious, sad, happy) used to calibrate AI response style
• Conversation trajectory analysis: emotional trends tracked within individual sessions to inform coaching approach
• Crisis risk assessment: automated detection of crisis-related language patterns for safety protocol activation
• Behavioral patterns: aggregated patterns of engagement, mood trends over time, and goal completion rates

We collect microphone audio only when you explicitly start a voice coaching session and grant microphone permission. Raw audio is transcribed, and the resulting text transcript of your spoken words plus session context is sent to third-party AI services to generate personalized coaching responses. We do not store raw audio after transcription unless you explicitly save a session.

5.1 Service Delivery and Personalization

• Providing AI-powered wellness coaching conversations personalized to your needs, goals, and preferences
• Maintaining conversation context and memory across sessions to provide continuity of coaching
• Processing voice input for voice coaching features
• Generating personalized insights, mood reports, and wellness summaries
• Facilitating mood tracking, journaling, and goal-setting features

5.2 Safety and Crisis Response

• Detecting crisis language and activating safety protocols, including providing crisis resource information (988 Suicide & Crisis Lifeline, Crisis Text Line, 911)
• Age verification enforcement to restrict access to users 18 years of age and older
• Enforcing content safety boundaries to prevent harmful interactions

5.3 Service Improvement and Research

• Analyzing aggregated and de-identified usage patterns to improve AI coaching quality, safety, and effectiveness
• Training and improving AI models and coaching frameworks using de-identified and aggregated conversation data
• Conducting internal research on AI wellness coaching effectiveness
• Developing new features and coaching playbooks

5.4 Business Operations

• Processing subscription payments and managing billing through Square
• Sending transactional communications (account verification, password resets, billing notifications)
• Providing customer support and responding to inquiries
• Enforcing our Terms of Service and protecting against fraud, abuse, and security threats
• Complying with legal obligations, regulatory requirements, and law enforcement requests

6.1 Third-Party Service Providers

We share information with third-party service providers who assist in operating the Service, subject to contractual obligations to protect your data:

• Anthropic (Claude AI): AI model provider that processes conversation text to generate coaching responses. Anthropic’s data usage is governed by their API Terms of Service, which restrict use of API-submitted data for model training.
• Inworld AI: Speech-to-text and text-to-speech processing for voice coaching features. Audio is processed in real-time and not retained after transcription.
• Voyage AI: Vector embedding provider used to store and retrieve session embeddings for coaching context retrieval. We send only the minimum text data needed to generate embeddings. Voyage AI’s data handling is governed by their privacy policy at voyageai.com/privacy.
• Amazon Web Services (AWS): Cloud infrastructure hosting, including data storage, serverless computing, and content delivery. All servers and databases are located exclusively in the United States.
• Apple (App Store / StoreKit): For iOS app subscriptions, Apple processes payments through StoreKit. AuraLift does not receive or store your payment card details for iOS purchases, Apple handles all payment processing under Apple’s own privacy policy.
• Square: Payment processing for web-based subscriptions. We share only the information necessary to process transactions. Square’s handling of payment data is governed by Square’s own privacy policy and PCI-DSS compliance.
• Email service providers: For transactional emails (account verification, password resets, notifications).

6.2 Data Isolation Between Users

Your personal data, including coaching conversations, journal entries, mood logs, goals, and assessment results, is strictly isolated to your account. No user can access, view, or interact with another user’s data. All data is encrypted at rest and in transit, and access is restricted by authenticated, per-user authorization controls. We do not aggregate identifiable data across user accounts.

6.3 Institutional Partners

When you access AuraLift through an institutional partner (employer, charitable organization, or educational institution), we may share aggregated and de-identified usage statistics with that partner. We will not share your individual conversation content, journal entries, or identifiable wellness data with institutional partners without your explicit consent.

6.4 Legal and Safety Disclosures

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or other agreements
• Protect the safety, rights, or property of AuraLift, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to an emergency involving danger of death or serious physical injury

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

Raw microphone audio is deleted immediately after transcription (usually within seconds). Voice transcripts and session data are retained for up to 30 days or until you delete them.

If you have an AuraLift account, you can permanently delete your account and all associated personal data (including voice transcripts, coaching sessions, and any derived embeddings) directly from within the app.

Go to Settings → Account → Delete Account.

Deleting your account will remove your account, all session data, and we will request deletion of your data from Anthropic (Claude), Inworld AI, and Voyage AI.

Account deletion is irreversible. Some data may remain in backups for a short period (up to 30 days) for legal or security reasons, after which it is fully purged.

You can also turn off future data collection in Settings → Data & Privacy without deleting your account.

Before your first voice session (and before any data is sent to third-party AI services), we show a clear screen explaining that your voice transcript will be sent to Anthropic (Claude), Inworld AI, and Voyage AI for coaching responses and session storage. You must actively tap “Yes” for voice features to work. You can revoke microphone access at any time in your device Settings.

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

• Encryption: Your data is encrypted both at rest and in transit using industry-standard encryption protocols.
• US-based infrastructure: All data is stored and processed exclusively within the United States.
• Access controls: Strict internal access controls limit employee access to user data on a need-to-know basis.
• Data isolation: Your personal data is strictly separated from other users. No one can access your conversations, journal entries, mood logs, goals, or any other personal information except you.
• Regular security reviews: We conduct ongoing security assessments to identify and address potential vulnerabilities.

You can request deletion of your data via the in-app account deletion feature described above. For questions, contact us at support@auraliftai.com.

12.1 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to opt-out of sale/sharing, and the right to non-discrimination. To exercise these rights, contact us at legal@auraliftai.com.

12.2 Other State Privacy Laws

Residents of states with comprehensive privacy legislation (including but not limited to Virginia, Colorado, Connecticut, Utah, and Texas) may have additional rights under their respective state laws. We will honor applicable rights requests in accordance with state law. Contact us at legal@auraliftai.com to exercise any applicable rights.

AuraLift is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. Our AI coaching system includes active age detection, and users identified or suspected to be under 18 are immediately redirected to age-appropriate resources and denied access to the coaching Service.

If we learn that we have collected personal information from a user under 18, we will promptly delete that information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us at support@auraliftai.com.

AuraLift is operated exclusively from the United States. All servers, databases, and infrastructure are located within the United States. Your data does not leave US-based data centers. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your jurisdiction.

The Service may contain links to third-party websites, apps, or services (e.g., crisis resources, therapist directories). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on our website and, where appropriate, sending you an email notification. The “Effective Date” at the top of this Policy indicates when it was last revised. Your continued use of the Service after any changes constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

AuraLift AI, Inc.
Boca Raton, FL

Email: legal@auraliftai.com
Support: support@auraliftai.com