Updated 30 September 2026
Privacy policy
Aurore writes meditations from what you tell her. This page explains, plainly, what we keep, why, with whom, and how to erase all of it.
This is a translation, provided for convenience. The French version is the one that binds.
1. Who is responsible
The data controller is Michaël Joseph, sole trader (537 848 582 R.C.S. Meaux), 11 chemin des Thuilliers, 77400 Thorigny-sur-Marne, France, publisher of the app — see the legal notice. For any question about your data: contact@auroremeditation.com.
2. The data we process
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email address | Creating your account and signing you in (code sent by email), writing to you when your program is ready or when a payment failed | Performance of the contract | Life of the account |
| Email address (notices about your sessions) | Telling you each month where your balance of sessions stands, warning you before a lot expires, before a yearly renewal, and before a conversation left without a program is erased | Legitimate interest — can be switched off at any time in the app (Account → Emails) or through the link at the foot of every email | Life of the account |
| Email address (a word from Aurore) | Reminding you that a session is waiting, or that a ready program has not been listened to yet | Consent — box unticked at signup, withdrawable at any time in the app or through the link at the foot of every email | Until consent is withdrawn |
| Log of emails sent (type, date) | Never sending you the same reminder twice | Legitimate interest | Life of the account |
| First name (optional) | Making the conversation with Aurore personal | Performance of the contract | Life of the account |
| The content of your conversations with Aurore | Understanding what you need and writing your program | Performance of the contract; for anything touching on your health, your explicit consent, asked before your first message (GDPR, Article 9), withdrawn by deleting your account | Life of the account |
| Programs, sessions and generated audio files | Letting you listen to them | Performance of the contract | Life of the account |
| Subscription state and purchases (App Store, Google Play) | Managing your subscription and your access | Performance of the contract, accounting obligations | Life of the account, then 10 years for accounting records |
| Model usage log (volume of text generated, cost) | Tracking costs and guarding against abuse | Legitimate interest | 13 months, anonymized when the account is deleted |
| Session tokens, sign-in codes | Securing access | Legitimate interest | Code valid 10 minutes, erased within 2 days; session: 180 days |
| Conversations left without a program | Letting you pick up a conversation you began | Performance of the contract | 30 days, then erased automatically |
An automatic task runs every night and erases what no longer has reason to be kept: abandoned conversations after 30 days, sign-in codes after 2 days, and the weeks of a program written during a free trial that was never followed by a subscription, 30 days after the trial ended (the weeks the trial covered stay). What no longer exists cannot be lost.
We never ask you for a diagnosis. What you tell Aurore may still touch on your health or your private life: that is why the app asks for your agreement before your first message, and records it with its date. If you raise a sensitive subject in the conversation, Aurore restates it as a general felt state and uses it only to write your session. To accompany you from one program to the next, at the start of each conversation Aurore reads the title, the goal, what you listened to and the conversation that led to each of your last three programs, never the text of the sessions: you can ask her to start fresh, and a program set aside or deleted leaves her memory. We use no advertising, no trackers and no behavioural analytics; this site sets no cookies.
3. What is automated
Aurore is an artificial intelligence (European AI Act, article 50). The conversation and the text of the sessions are produced by a language model (Claude, Anthropic) from your answers; her voice is generated by ElevenLabs. No decision producing a legal or similarly significant effect is taken about you automatically: you choose what you listen to, and you can delete everything.
4. Who the data is shared with
Technical providers only, each for a precise task and under contract:
| Provider | Role | Data | Where |
|---|---|---|---|
| OVH (France) | Hosting the servers, the database and the audio files | All | France |
| Anthropic | Generating the text (conversation, sessions) | Conversation content, first name | United States, standard contractual clauses; no training on our data |
| ElevenLabs | Voice synthesis | Session text | United States, standard contractual clauses |
| RevenueCat | Tracking in-app purchases made on the App Store and Google Play | Aurore account identifier (random, no email or first name), purchase history passed on by the store | United States (European Commission standard contractual clauses) |
| Apple | In-app purchase of subscriptions on iPhone | Transaction identifier | Per Apple |
| Sentry (Functional Software, Inc.) | Reporting technical errors, so they can be fixed | Route called, error code, account identifier. Never the content of a conversation or a session, never an email address | European Union (Frankfurt) |
| Resend | Sending emails (sign-in code, program ready, payment, reminders) | Email, first name. Never the content of a conversation or a session | European Union |
| Scaleway (France) | Off-site backup copy, so that an incident on the main server does not lose everything | Database backup, encrypted before it leaves the server and unreadable by the host; copy of the audio files | France (Paris) |
5. Your rights
You may access your data, correct it, have it erased, ask for it to be ported, object to a processing or restrict it. Deleting the account entirely is done in the app (Account → Delete my account): it erases your email, your first name, your conversations, your programs and their audio files, and ends your subscription; their backup copies are gone within 30 days. For anything else: contact@auroremeditation.com. You may also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of your own country.
6. Security
Passwordless sign-in with a one-time code; session tokens stored hashed; audio files served through signed links with a limited life; encrypted transport (TLS) everywhere.
The database is backed up every night and kept for 30 days. Each backup is encrypted on the server, before it leaves, with a key whose private half is stored on none of our servers: neither the host keeping the copy nor anyone reaching those files can read them. A copy is placed with a second host, in France, so that a fire or a major failure cannot take the machine and its backups at the same time. The audio files are copied the same way, without encryption: each night the copy follows what was erased, and at the second host an erased file is kept 30 days at most, then goes. Thirty days after an account is deleted, nothing of it remains, backups included.
7. Minors
The app is intended for people aged 16 and over. A program may be written for a younger relative, under the responsibility of the adult who holds the account.
8. Changes
This policy may change with the service; the date at the top of the page governs, and any substantial change is announced in the app.