Privacy

What Aura keeps

Your focus sessions, goals, reflections, blocklists, schedules, and settings are stored only on this Mac, in your user Library folder. Aura has no account system, no sign-in, and no server that receives your focus data.

If you save people as Anchors, their name and optional email are kept on this Mac too, so you can pick them when locking a session. If you choose Email unlock code, Aura sends the selected name, email and signed Pro licence to its Cloudflare delivery service. Resend delivers a private unlock code and a separate setup code. Your chosen person shares the setup code only if they agree to help. No focus activity, goals, sites or reflections are included. The Mac keeps only code fingerprints, never the unlock code. Delivery request fingerprints and rate-limit records are kept for up to seven days to prevent duplicate messages and abuse. Resend processes the address and message for delivery. Deleting local app data does not recall sent emails or delete provider delivery records.

What leaves this Mac

Optional services and purchases:

• Website icons. If you turn on "Fetch website icons" in Settings → Privacy, Aura sends the domain name of a site on your list to DuckDuckGo's icon service once, then caches the icon locally. It is off by default. Core focus sessions work offline.
• Your purchase. Payment is handled by Stripe on Stripe's own pages. Aura never sees or stores your card details. Your activation file is verified on this Mac using a signature check — optional partner email setup sends it to Aura’s service to authorize delivery. Normal activation and focus sessions do not require a server check.

Your email address

If you buy Aura, Stripe collects your email to send a receipt and to deliver your activation key. That email is used for those two messages and for support you initiate. There is no mailing list, and your address is not sold, shared for advertising, or used to profile you.

Browser access

Website Watch reads the address of the frontmost tab in supported browsers, on this Mac, using macOS Automation permission. It is used only to decide whether to open the Aura Gate. Addresses are not logged, stored, or transmitted.

Your control

Settings → Privacy can export everything Aura holds as a file you keep, export a diagnostics report, or delete all local Aura data including sessions, reflections, Anchor credentials, and cached icons. Optional email delivery records are separate from local app data.

Contact

Privacy questions: santech_devs@outlook.com