Privacy Policy
This policy explains what the Aurora application does with information today, as it is actually built. Aurora is a personal dashboard in private development and closed testing. It is not a publicly launched or commercially available service.
Who operates Aurora
[Operator legal identity to be added before public launch] Aurora is not a registered company, corporation, or other legal entity, and this document does not claim that it is.
Information you provide
When you create an account, you provide an email address and a password. If you sign in with Google instead, you provide your Google account rather than a password.
Once you are using Aurora, anything you enter is information you provide. Depending on which parts you use, that can include your first name, the places you save (including their approximate coordinates), calendar events, birthdays you add for yourself or other people, saved journeys between two places, the teams and athletes you follow, news preferences, and entries you write in the prayer journal.
Some of this is personal, and some of it is about other people — a birthday you record for a family member, for example. Aurora treats all of it the same way: it stays in your browser.
Authentication information
Accounts are handled by Supabase, an external service that stores your email address and, if you use one, your password in a secured form. Aurora itself never stores your password. When you type it in, it passes through Aurora’s server on its way to Supabase and is not written down or recorded along the way.
Signing in creates cookies that keep you signed in between pages. Those cookies come from Supabase and are the only cookies Aurora uses. There are no advertising, analytics, or tracking cookies, because Aurora has no advertising, analytics, or tracking.
Because your browser contacts Supabase directly when you sign in, Supabase can see network information such as your IP address. Aurora does not control what Supabase records or how long it keeps it. See Supabase’s privacy policy.
Signing in with Google
If you choose “Continue with Google”, Aurora asks Google only for the minimum: confirmation of who you are, your email address, and basic profile information such as your name. Aurora does not request access to your Gmail, Google Calendar, Contacts, Drive, or anything else in your Google account, and cannot read them.
That sign-in happens between your browser, Google, and Supabase, so Google can see network information such as your IP address as part of it. Aurora does not control Google’s own handling of that. See Google’s privacy policy.
Information stored in your browser
This is the most important thing to understand about Aurora as it exists today: nearly everything you create in Aurora is stored in your own browser on the device you are using. It is not stored on a server, and it is not sent anywhere for safekeeping.
That has consequences worth being plain about:
- Your Aurora content does not follow you to another browser, another device, or another person’s computer. Signing in elsewhere shows you an empty Aurora, not your own.
- Clearing your browser’s data for Aurora removes that content permanently. There is no backup and no way to restore it.
- Anyone with access to your device and browser profile can see it.
- It is stored in ordinary readable form, not encrypted, and this policy does not claim otherwise.
Aurora also keeps a small record of when you last opened it and which occasional messages it has already shown you, so that it does not repeat them. You can view and erase that record at any time from Settings.
How information is used
Information is used to run the features you are using and for nothing else. Your saved places are used to fetch weather, alerts, and travel times for those places. Your calendar entries are used to show your calendar. Your preferences are used to remember how you like Aurora to look and behave.
Aurora does not sell information, does not share it for advertising, does not build profiles for marketing, and does not send marketing email. There is no advertising or analytics in Aurora at all.
Services Aurora relies on
Aurora shows information it fetches from outside services. It cannot do that without telling them enough to answer. What each one receives differs, and the differences matter:
Sign-in services
Supabase and Google handle signing in. Your browser contacts them directly, so they can see account and network information including your IP address.
Services that receive places or search text
To show weather, alerts, radar, and travel times, Aurora sends the coordinates of the places you have saved to Open-Meteo, the National Weather Service, RainViewer, and TomTom. When you search for an address, the text you type is sent to TomTom, or to Photon if TomTom is unavailable.
These requests are made by Aurora’s own server rather than by your browser, so those services see the server making the request and not your device or IP address. They do receive the coordinates and the search text themselves. Your name, email address, and account are never included.
Services that receive nothing about you
News and sports come from NPR, Florida Phoenix, The Conversation, ESPN, TheSportsDB, and the Florida Department of Transportation. These are fetched by Aurora’s server as general content, and carry no information about you, your account, or your location.
Each of these services has its own privacy practices and its own retention, which Aurora neither controls nor can describe on their behalf. The links above are provided so you can read theirs directly; including them is not an endorsement.
How long information is kept
Information in your browser stays until you or your browser removes it. Aurora does not expire it, and this policy does not promise a retention period, because the application does not currently enforce one.
Your account with Supabase lasts until it is deleted. Information Aurora fetches from outside services is held briefly on the server to avoid repeating identical requests, typically for a few minutes, and is not written to permanent storage.
Security
Aurora checks who you are on the server for every page behind sign-in, rather than trusting the browser, and requests to outside services are made by the server so that your device is not exposed to them. Passwords are handled by Supabase and never stored by Aurora. Aurora does not write your personal information into its logs.
No system is completely secure, and Aurora is in development. This policy does not guarantee the security of your information, and information stored in your browser is only as protected as the device and browser profile it sits in.
Your choices, and what you can remove today
Being straightforward about the limits here matters more than sounding capable:
- You can delete individual things from within Aurora where a control exists — a saved place, a calendar event, a birthday, a journey, a followed team, or a prayer entry.
- You can erase what Aurora remembers about your visits from Settings.
- You can remove everything Aurora has stored in a browser by clearing that site’s data for Aurora. In most browsers this is under Settings, then Privacy, then a control named something like “Cookies and site data”, where you can search for the Aurora address and delete its data. Your browser’s own help pages describe the exact steps.
- You can sign out at any time from Settings. Signing out ends your session; it does not delete your account, and it does not delete anything stored in the browser.
Deleting your account is not available yet. Aurora has not built it. Clearing your browser data removes what is stored on that device but does not delete your sign-in account, and clearing one browser has no effect on any other. Account deletion and better data-management controls are planned but not implemented, and this policy will not pretend otherwise until they exist.
If you want your account removed in the meantime, you can contact us using the details below. We cannot promise a response time, because no formal process for handling such requests exists yet.
Children
Aurora is not intended for anyone under 18, and you should not use it or create an account if you are younger than that. Aurora asks you to confirm your age when you create an account, but it does not verify it, and this policy does not claim that it does. If you believe someone under 18 has created an account, please contact us.
Changes to this policy
This document has a version, shown at the top. When something meaningful changes — new information being collected, a new service receiving it, or a change to your choices — the version changes and you will be asked to read and accept it again the next time you sign in. Corrections to wording that do not change what Aurora does will not interrupt you.
Contact
[Privacy and support contact email to be added before public launch]
Until that address is published, this document should be treated as an internal working draft rather than a policy you can act against.
See also the Terms of Service.