Privacy Policy

This Privacy Policy explains how Fangorn Tech (“aurabloom,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use the aurabloom mobile application, related websites, and related services (collectively, the “Services”).

Contact us:

• Email: phani@fangorn.tech
• Address: Bangalore, India
• Website: https://fangorn.tech

This Privacy Policy applies to information we collect when you:

• create or use an aurabloom account;
• use voice-based onboarding or daily call features;
• set reminders or enable push notifications;
• purchase or restore a subscription;
• contact us or request support; or
• visit pages on our website that link to this Privacy Policy.

A. Account and identity information

Depending on how you sign in, we may collect:

• name or display name;
• email address;
• phone number;
• Firebase user ID and authentication provider information;
• Google account profile details you choose to use for sign-in, such as your name, email address, profile photo, and Google account identifier.

B. Voice, transcript, and AI interaction data

When you use voice features, we may collect and process:

• microphone audio you provide during a voice session;
• live voice session metadata;
• transcripts of voice sessions;
• AI-generated responses, summaries, and derived insights;
• notes, memories, affirmations, manifestation goals, rituals, schedules, outcome scenes, and similar user-provided or AI-assisted content.

Microphone access is requested only when you start a voice feature that requires it.

C. App content and profile data

We may collect content you create or edit in the Services, including:

• manifestation goals and statements;
• onboarding answers;
• specific-person profile details;
• ritual and reminder settings;
• saved memories and session history;
• subscription status and premium entitlement status.

D. Device, app, and technical information

We may collect:

• app-generated device identifier;
• push notification token;
• platform and app version information;
• crash, diagnostics, and troubleshooting logs;
• IP address and general network/request metadata collected through our servers and service providers.

E. Payments and subscriptions

If you purchase a subscription, we may receive subscription and entitlement information from Apple, Google, and our subscription infrastructure providers. We do not receive your full payment card number.

F. Analytics and product usage data

We may collect analytics and product usage information, such as:

• app opens, screens viewed, onboarding progress, and purchase events;
• device-level or account-level analytics identifiers;
• email address or name where those fields are associated with analytics profiles for product measurement and support.

We may use personal information to:

• create and manage your account;
• authenticate you and maintain session security;
• provide voice sessions, AI features, reminders, and subscription features;
• convert speech to text, generate AI responses, and personalize your experience;
• save your progress, manifestation data, transcripts, and preferences;
• send push notifications and local reminders you request;
• process subscriptions, purchases, restorations, and entitlements;
• analyze usage, improve features, troubleshoot problems, and measure product performance;
• detect abuse, fraud, or security incidents;
• comply with legal obligations and enforce our terms.

We do not sell your personal information.

aurabloom includes AI-powered and voice-powered features. To provide those features, we may send audio, transcripts, prompts, and related session data to infrastructure and model providers that help us run speech recognition, language generation, voice synthesis, and real-time communications.

These providers currently include:

• Google Firebase Authentication, Cloud Messaging, and Google Sign-In;
• LiveKit for WebRTC and real-time voice communications;
• Baseten for language-model processing;
• Deepgram for speech-to-text;
• Rime and ElevenLabs for text-to-speech, depending on the feature or environment;
• RevenueCat for subscription infrastructure;
• PostHog for product analytics.

We use these providers only to operate, secure, support, and improve the Services, subject to contractual and technical safeguards. Where required by law or platform rules, we seek permission before accessing or sharing relevant data.

We may share information:

• with service providers that host, support, analyze, secure, or operate the Services;
• with authentication providers when you choose a sign-in method such as Google, phone OTP, or email link;
• with speech, AI, communications, subscription, analytics, and notification providers that process data on our behalf;
• with Apple, Google, and payment/subscription infrastructure as needed to manage purchases and subscriptions;
• when required by law, regulation, subpoena, court order, or valid governmental request;
• in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to appropriate confidentiality and notice obligations where required.

We do not sell personal information or personal and sensitive user data for monetary consideration.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain your account, resolve disputes, enforce agreements, and comply with legal obligations.

In general:

• account information is retained while your account remains active and for a reasonable period afterward as needed for security, fraud prevention, recordkeeping, and legal compliance;
• manifestation content, transcripts, memories, settings, and related profile data are retained until deleted by us in the ordinary course of operations or in response to your deletion request, subject to legitimate retention needs;
• push notification tokens are retained until replaced, invalidated, or removed;
• analytics records may be retained according to the settings and retention periods of our analytics providers;
• billing, tax, and transaction-related records may be retained for longer periods where required by law.

If you need exact operational retention periods for a production deployment, contact us at phani@fangorn.tech.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to:

• access personal information we hold about you;
• correct or update inaccurate information;
• request deletion of your account or personal information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request a copy of certain information in a portable format.

You can also:

• manage notification permissions in your device settings;
• stop using microphone-based features at any time;
• manage Google account access through your Google account settings where applicable.

To exercise privacy rights, contact us at phani@fangorn.tech.

If you created an account in aurabloom, you may request deletion of your account and associated data by:

• using the in-app account deletion option, where available; or
• emailing us at phani@fangorn.tech.

When we process a valid deletion request, we will delete or de-identify your account data unless we need to retain certain information for security, fraud prevention, tax, accounting, dispute resolution, or legal compliance purposes.

Your information may be processed in countries other than the country where you live, including countries where our service providers operate. Where required, we take steps designed to ensure an appropriate level of protection for transferred personal information.

aurabloom is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at phani@fangorn.tech, and we will take appropriate steps.

The Services may integrate with or link to third-party services. Their privacy practices are governed by their own privacy notices, not this Privacy Policy.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and may provide additional notice where required by law.

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact:

Fangorn Tech
phani@fangorn.tech
Bangalore, India