Aurapex — Privacy Policy & Terms of Service

App: Aurapex · Operator and controller of your data: Miralo AG, Untere Roostmatt 8, 6300 Zug, Switzerland (UID CHE-173.130.047) · Contact: support@aurapex.app · Last updated: 5 November 2026

Privacy Policy

What we collect. An account ID (Aurapex creates a private account on your phone the first time you use it — no email or name, only a random account ID), your email only if you add one, the fitness details you enter (goal, sex, age, height, weight, activity level), what you ask your coach to remember (including a first name, if you give one), your logs (food, workouts, weight, sleep, focus sessions), your Screen Time setup, basic usage data (when you open the app and how often you use the AI features), your iPhone's daily step count if you turn on Motion & Fitness (see Motion & Fitness), and four separate kinds of photo, each handled differently and described below: the selfie you use for "Future You", the meal photos you take to estimate calories, the progress check-in photos you choose to save, and the photos and short videos you attach in coach chat. Some of this — your body measurements, food, weight, sleep, progress photos and anything about your health you tell the coach — is health data, and your selfie is a photo of your face. We treat both as sensitive.

Your account. Aurapex creates a private account on your phone the first time you use it. It has no email or name — only a random account ID — and it is what lets the coach, photo estimates, barcode lookup and your "Future You" render work, and what backs up your data. We need it to provide the service you use (GDPR Art. 6(1)(b)). A device account that has not been used for six months is deleted with everything in it, and one that never finished setup is deleted after a week; photos and renders stored under a deleted account are removed by a follow-up clean-up. Add an email only if you want to sign in on another phone. Delete your account yourself at any time from You › Delete my account.

Screen Time and app blocking. If you use the app-blocking features, Aurapex stores your daily screen-time goal, your scheduled blocks, your per-app limits and your under-goal streak in your account, so they follow you across devices. Aurapex never learns which apps you chose. Apple's Family Controls framework hands the app an opaque token that can shield your selection without revealing it, and that token stays on your device — it is never uploaded to us. We also do not receive a per-app breakdown of your usage: iOS only reports that a time threshold was crossed, which is why the in-app figures are shown as minimums (for example "1h+").

1. Your selfie and the "Future You" render. Your selfie is used for one thing: generating your personal "Future You" visualization, which also serves as your coach avatar. It is sent securely to our image-generation provider (fal.ai) with no-retention instructions, and the original photo is deleted from our servers immediately after your render is created. The render is stored privately in your account. The render is an AI visualization — a vision, not a promise or prediction of results.

2. Meal photos. When you photograph a meal, or type what you ate to get an estimate, the photo or the words go to our AI provider Anthropic (USA) to work out what it is and roughly how many calories and grams of protein, carbs and fat it contains. Meal photos are not stored by us, are not added to your account, and are not used to train any AI model. Anthropic uses them only to answer us and deletes them within 30 days under its commercial terms. Only the resulting numbers and the meal name are saved to your food log, plus a short record that an estimate was made (time, calories, confidence) so the daily fair-use limit works; that record is deleted with your account.

3. Progress check-in photos. If you use progress check-ins, the photos you upload are stored privately in your own account in our storage, visible only to you — never on the Arena, never public, never shown to other users, and never used to train any AI model. They are not sent to any AI provider. They are kept until you delete the check-in or delete your account; both remove them from our storage permanently.

4. Photos and short videos in coach chat. When you attach a photo or a short video in coach chat, it is read to see what it shows: a meal gets a calorie estimate, and anything else is passed to your coach so it can answer you, which means those images reach our AI provider (Anthropic) twice. Videos are sampled into a few still frames first, and the video itself is never uploaded. Nothing you attach in chat is stored.

How your data is used. To run Aurapex for you: personalizing your plan and calorie targets, syncing across your devices, and powering your AI coach, and to understand how the app is used and what it costs to run (see Usage data). We do not sell your data. We do not show ads inside the app. We do not share your data for advertising or track you across other apps.

AI coach conversations. Your messages to your coach are sent to our AI provider (Anthropic, USA) to generate replies, under strict instructions that keep the conversation focused on your training, nutrition and focus. With each message go the details the coach needs: your name if you gave one, your goal, age and weight, your recent food, training, sleep, water and steps, your cheat days and streak, your workout plan, your sign-up training note, your to-dos and Focus schedules and what you asked it to remember. Your coach messages also carry your day plan and, if you connect a calendar, the times you're busy, never meeting names. Conversations are stored so your coach remembers context. You can turn this off at any time in You › Guides, privacy & help › AI coach and estimates. Anthropic does not train its models on it and deletes it within 30 days under its commercial terms. Conversations stay in your account until you delete it. A coach reply you report is kept with your report so we can review it.

Aurapex Help. The support chat (You › Guides, privacy & help): what you type there goes to our AI provider (Anthropic, USA) to write the answer, after your one-time OK for AI, together with your app and iOS version, your coach language, your subscription status, which parts of Aurapex are on and whether app blocking is set up — never your logs or health details. We do not keep the Help chat on our servers. To improve Help we keep day counts with no account and no words (answers, hand-offs and Did that help? taps) for 13 months. If you tap Talk to a person, the conversation, those details, your account ID and the email address you give go to the Aurapex team — by our email service (Resend, USA) or from your own email app — and we keep that request up to 24 months.

Motion & Fitness. If you turn on the step connector, Aurapex asks iOS for your iPhone's own step count for the current day and uses it to fill in STEPS TODAY. Nothing else is read from the motion sensor, and the raw sensor data never leaves your phone. The resulting daily step total is saved with the rest of that day's log and backed up to your account like the rest of your logs. Turn the connector off in the app (Food settings, or You › Connectors) and Aurapex stops reading it.

Usage data. We keep two kinds of usage record. App-open records hold your account ID, the time you opened the app, the app version and your time zone. AI usage records hold each use of an AI feature (coach replies, meal estimates, "Future You" renders and barcode scans) with what it cost us to run. They never contain your logs, photos or messages. We use them to understand how Aurapex is used and what it costs to run. Our legal basis is our legitimate interest in operating the service and planning its capacity and cost (GDPR Art. 6(1)(f); Swiss FADP). These records stay in our own database at Supabase, on servers in the EU; no analytics company receives them, and they are never sold or used for ads. We keep exact open times for 90 days and daily open counts for 13 months, which lets us compare the same month a year apart, and AI usage records for 25 months, which covers two full years of cost planning. If you delete your account, your open records are erased and your AI usage records are unlinked from your account; the cost totals are kept with no identifier. Daily fair-use limits still count AI use per account, whether usage stats are on or off. You can object at any time: turn off You → Guides, privacy & help → Share usage stats (your open records are deleted and your AI usage is unlinked), or, on app versions without the switch, email support@aurapex.app.

Subscription screen counts. If the subscription screen is shown to you, we count per calendar day (never the time of day) whether it was shown, whether you started a trial, bought, restored or redeemed a code, and which plan. These counts are linked to your account, are not kept when Share usage stats is off, and are deleted after 13 months or with your account.

Service providers and where your data goes. We use: Supabase (hosting, sign-in, database and storage — servers in Ireland, EU; Supabase itself is a US company); Anthropic (USA — AI coach replies, Aurapex Help and meal estimates); fal.ai (USA — the "Future You" image generation, with storage-minimizing settings); Apple (USA — purchases and, if you allow them, notifications); Resend (USA — sign-in emails and Help hand-offs); and ImprovMX (USA) with Gmail (Google, USA) for our support inbox. Each receives only what is needed for its function, and none of them receive your data for advertising purposes. Fitness apps you link directly are described under Fitness apps you link directly, and food lookups under Food lookups. Exercise pictures load from GitHub (USA), which sees that request the way any website does — nothing else about you.

Food lookups. Food searches and scanned barcodes are looked up at Open Food Facts, a public food database, straight from this phone: only the words or the number, nothing about you. A scanned barcode's number also goes from your account to our own server, to check our shared product list.

The Arena leaderboard. Joining the Arena is optional. If you join, your chosen Arena name, your aura score and your streak are visible to other Aurapex users. Your email, your photos, your logs and everything else stay private. You can leave the Arena at any time from the You tab, and you can hide any other user from your board. Other signed-in Aurapex users can also see the date (never the time) of your last Arena update. If you add friends in Aurapex, each of you can see when you connected.

The shared food database. When you create a food in Aurapex, its details — name, brand, serving size and nutrition numbers — are added to a shared database that every Aurapex user can search, so the catalogue gets better for everyone. Only the food's details are shared: your name, account and logs are never shown to other users. You can delete a food you created at any time, and any user can report an incorrect or inappropriate entry, which we review and may remove.

Backups and sign-in records. Your app data is backed up to our database under your account; add an email and it follows you to a new phone. To protect you from accidental data loss, when that backup is replaced we keep up to 10 earlier versions of it for at most 30 days; only you can read them. Our hosting provider's sign-in system keeps the times you signed in and your active sign-in sessions (including the device's IP address and app type) so it can keep you signed in securely. If you subscribe to Aurapex Pro, Apple handles the payment and your payment details never reach us. The app reads your subscription status from Apple on your phone. If you are signed in when you buy, your Aurapex account ID is sent to Apple with the purchase, so that the subscription can be linked to your account. All of this is deleted when you delete your account, except a security log of sign-ins that our hosting provider keeps for a limited time and our cost totals, which keep nothing that identifies you.

How long we keep it. Your account and everything in it: until you delete it (a device account unused for six months, or one that never finished setup after a week, is deleted automatically, as described under Your account). Coach conversations, renders, progress photos, foods you created and reports you filed: until you delete your account (renders, progress photos and foods you created can also be deleted one by one). Records from fitness apps you link: up to 13 months. Usage records: as described under Usage data. Backup versions: at most 30 days. Support emails and Help hand-offs: 24 months after your question is answered, then deleted.

Our websites. aurapex.app and this page are hosted by Netlify (USA), which keeps visitors' IP addresses in short-lived server logs for security. We use no cookies, analytics or ads on them. Until our own font files go live, aurapex.app loads its fonts from Google Fonts (Google, USA), which sees your IP address when the page loads; this page uses no web fonts.

Your rights & deletion. You can ask us for a copy of your data (also in a reusable file), to correct it, to delete it, to restrict or object to how we use it, and you can withdraw any consent you gave. You can delete your account and all associated data at any time from You › Delete my account in the app, or by emailing support@aurapex.app; we answer within 30 days. No decision with legal or similarly significant effect on you is made automatically — calorie targets and AI-built plans are suggestions you can change. If you think we got something wrong, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, in the EU/EEA, to the data protection authority where you live or work.

Age. Aurapex is intended for users 13 and older. Under 18, the photo visualization feature is restricted and may not be available.

Terms of Service

The service. Aurapex is a discipline and fitness companion: tracking tools, an AI coach, and motivational features. Aurapex provides general fitness information only — it is not medical advice, diagnosis or treatment. Consult a professional before major changes to diet or training, and stop if something hurts.

No outcome promises. Calorie and macro figures are estimates, presented honestly as estimates with ranges. The "Future You" visualization is a motivational rendering, not a guarantee of any physical result.

Price and subscriptions. Aurapex is free to download, and building your personalized plan is free. Using Aurapex every day — the coach, food and training logs, lock-in sessions, streaks and the Arena — requires Aurapex Pro, an auto-renewing subscription sold through Apple. Turning your app blocks off is always free. Before you subscribe, the app shows the price, the billing period and any free trial. Payment is charged to your Apple Account when you confirm the purchase, or when a free trial ends. The subscription renews automatically at the same price and period unless you turn off automatic renewal at least 24 hours before the end of the current period; you can manage or cancel it at any time in your Apple Account settings. If you start a paid subscription during a free trial, any unused part of the trial ends. Refunds are handled by Apple under its own policies. People who used Aurapex before subscriptions launched may receive a free period or a discount, as shown in the app. Nothing you created in Aurapex is deleted if you don't subscribe. Your use of the app is also subject to Apple's Licensed Application End User License Agreement. If these terms and Apple's agreement conflict on the licence to use the app, Apple's agreement governs; these terms govern the Aurapex service.

AI features. Coach replies, Aurapex Help answers, meal estimates and "Future You" renders are generated by AI. They can be wrong — check anything important, and never treat them as medical advice.

Aura and the Arena. Aura is points and standing only. The full rules are in the app under You › Official rules.

Your conduct. Upload only photos of yourself. Choose an Arena name that isn't abusive, hateful, sexual or impersonating someone else — names are filtered, other users can report them, and we may reset or suspend accounts that break this rule. Don't abuse, reverse-engineer or disrupt the service.

Zero tolerance. Objectionable, abusive or hateful content and abusive users are not tolerated. We remove such content and may suspend or end accounts that post it.

Ending your account. You can delete your account at any time in the app. We may suspend or end an account that breaks these terms, abuses the service or the shared food database, or tries to obtain aura or reward codes by tampering.

Foods you create. Foods you add to the shared database must be real foods with honest numbers — no abusive, misleading or promotional entries. By creating a food you allow Aurapex to show it to other users; you keep the right to delete it. We may correct or remove entries that are reported or inaccurate.

Under 16? If you are under 16, use the photo features (Future You and meal photos) only with a parent or guardian's OK.

Liability. The service is provided "as is" to the maximum extent permitted by law. Nothing in these terms limits liability that cannot be limited under Swiss law.

Food data attribution. Packaged-food and barcode data comes in part from Open Food Facts, available under the Open Database License (ODbL), and from the USDA FoodData Central public-domain database. Community-contributed foods in Aurapex are shared under the same open spirit.

Changes. We may update these terms and this policy; the date at the top changes, and material changes are shown in the app before they apply.

Governing law. Swiss law, place of jurisdiction Zürich, mandatory consumer protections unaffected.

Questions? support@aurapex.app · Support & FAQ