Nlongvity
← Back to AURA

Privacy Policy

Last updated: October 17, 2026 · Effective date: October 17, 2026

This Privacy Policy describes how Aura processes personal data. It is written to comply with the EU General Data Protection Regulation (GDPR) as incorporated into Norwegian law by the Personal Data Act of 15 June 2018 (personopplysningsloven). Our supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).

Aura processes data concerning your health. This is a "special category" of personal data under Article 9 GDPR, requiring stronger protection than ordinary personal data. Your symptom logs, conversations with Aura, journal, cycle history and the patterns Aura notices are kept in an encrypted database on your phone. Our servers hold the email you sign in with and the details you have given about yourself. That is your name, conditions, symptoms, life chapters and how long each has lasted, cycle and period lengths, last period date, contraception and brand, date of birth, work pattern, language and permissions. They also hold your subscription status, your consent choices, a crisis record and a few technical records. Section 4 explains each of them. Nothing is sent to an AI service until you say yes.

1. Who we are

Nikolai Langsem (trading as Nlongvity), a sole proprietorship registered in Norway
Oslo, Norway
Contact: hello@nlongvity.com
Privacy contact: privacy@nlongvity.com

We are the data controller for the personal data described below. We have not appointed a Data Protection Officer, because Article 37 GDPR does not require one at our scale. We will appoint one if that changes.

2. How Aura is built

  • What you log is kept in an encrypted database on your phone. Your symptom logs, conversations with Aura, journal entries, mood and energy entries, pain entries, flare events, cycle history and detected patterns are stored in encrypted local storage on your device (SQLCipher). They are not stored on our servers. The health information you give us at setup is — section 4 lists it.
  • If you delete the app, that data goes with it. We hold no copy to return to you, and none to lose.
  • Our servers hold a small amount about you — your account and profile (including the health information you give us at setup), your subscription status, your consent choices and a few technical records. Section 4 explains each of them.
  • Aura's AI only runs if you allow it. The first time it is needed, Aura asks you ("Before Aura replies"), names who receives what, and waits. If you allow it, your message and a summary of your records are sent, through our server, to Anthropic to write each reply. If you choose "Not now", nothing is sent: conversations with Aura, letter reading and pattern descriptions are switched off, and everything else — logging, your cycle, patterns, reports, and crisis support — keeps working. You can change your answer at any time in Settings › Your data · privacy › "Aura's AI (Anthropic)". Your answer is stored on your device.

3. What is sent to our AI provider — and only if you allow it

Aura's AI features are provided by Anthropic (the maker of the Claude models). Requests go from your phone to our server (which runs on Supabase) and from there to Anthropic. We keep none of the content (see section 4 for the technical record we do keep).

3.1 When you chat with Aura

To write a reply that is actually about you, we send the following with each message. This is the fullest disclosure in this policy, and it is the one to read closely.

  • Your message, and up to nine earlier messages from the conversation, yours and Aura's.
  • Things you have told Aura across conversations. This is a short list of lasting facts you have stated. They cover what helps you, what does not, and what you have already tried. They also cover what a test has ruled out, what you have told her a clinician said to you, what you prefer, and topics you have asked her not to raise. These are kept on your device and sent with each message so she does not make you repeat yourself.
  • Patterns Aura has noticed about your body, for example that your hardest days tend to fall late in your cycle, or that low-energy days tend to come a day or two before pain days.
  • A short description of you. It covers your life chapters and how long each has lasted, and a set phrase about why you are here, based on your main life chapter. It also covers up to six conditions and up to six symptoms you told us about, and your contraception method while you use it. Your name, date of birth, working pattern and contraception brand are not part of it.
  • Your medications — the name and dose of what you are taking, and of anything you have paused, up to eight of each. The prescriber's name is deliberately never sent.
  • Where you are in your cycle and when your next period is likely, and whether that comes from your recorded cycles, from the cycle length you entered, or from a typical estimate. Your recorded cycles can include period dates imported from Apple Health (section 5).
  • This week's signals from what you have logged in Aura. They cover your pain, energy, sleep and mood levels and their direction of travel. They also cover how many flares you had, and your worst pain day, with up to two places and two kinds of pain you logged for it. Sleep read from Apple Health is not included, with the one exception in section 5.
  • What has recently helped you, your recent mood, any programme you are part-way through, your routine lately, and how much you have logged so far.
  • How you have described today, the time of day, and the language Aura should reply in.
  • Your plan (Free or Aura Care) and how many messages you have left before they refill. Our server adds this from its own records, not from your phone, so Aura can answer you if you ask.
  • Upcoming appointments in the next week, by number and day only, never what they are.
  • The words of any support card already on your screen, so Aura does not repeat them back to you.
  • Up to three article titles that might fit what you have just said.

Two of these deserve to be named rather than listed. Things you have told Aura across conversations can include what you say your doctor told you, and topics you have asked her to leave alone. Patterns Aura has noticed are inferences about your body. Both are sent with every message.

What is never sent is your journal, your full log history, and your steps from Apple Health. Aura never reads your journal. Sleep read from Apple Health is not sent either, with the one exception in section 5.

3.2 When you ask Aura to read or translate a letter

  • Reading a letter: when you photograph a letter from your clinic and tap to send it, the whole photo is sent — it may show your name, address, patient number, diagnoses, medicines and dates, whatever the letter shows — so Aura can find appointments and medicines in it. Nothing is sent before you confirm the photo.
  • Translating a letter: the letter text you paste is sent so Aura can explain it in plain words.
  • Neither the photo nor the text is stored by us. What Aura finds is saved on your phone only after you review it.

3.3 Pattern descriptions

To describe a pattern in words, Aura sends numbers worked out on your phone — for example the cycle day your pain tends to peak, how often flares cluster, a sleep-and-energy comparison — together with short words you used for where and how it hurts (60 characters at most) and the first condition you told us about. Your raw logs and notes are never sent. The numbers are calculated on your phone; the AI only words them.

3.4 What Anthropic does with it

Anthropic uses it to generate the reply and, under our agreement with them, does not use it to train its models and does not sell or share it. Anthropic deletes what it receives within 30 days. It can keep it longer if it is flagged as breaking Anthropic's usage policy, or if the law requires it. Flagged content can be kept for up to 2 years, and the safety scores given to it for up to 7 years.

4. What our servers hold

  • Your email address, account identifier and password credential — to sign you in.
  • Leftover sign-in records. When you sign up with email, reset your password or change your email address, our sign-in service keeps a short record of it. A daily clean-up removes each record once it is more than a day old, so none is kept for more than about 2 days.
  • Health information you gave us at setup — the conditions and symptoms you told us about, your life chapters and how long each has been going on, whether you use contraception and which method and brand, your typical cycle and period length, and the date of your last period. When you later change your conditions, symptoms, life chapters, contraception, or cycle and period length in the app, our copy is updated too. This is health data under Article 9, and we hold it so that your setup survives a new phone and Aura knows you from your first message there.
  • Your name, date of birth, working pattern, language and permission answers. Aura uses your name to address you and your language to speak to you, and our copy restores both on a new phone. Aura asks for your date of birth to check that you are 18 or over. Your permission answers say whether you allowed Apple Health and notifications when you set Aura up. Nothing in Aura uses our copy of your working pattern or your permission answers.
  • Your subscription status, plan and period end — to unlock paid features, and so Aura can tell you your plan when you ask.
  • Your consent choices — your health-data consent and your analytics consent, with when each was given or withdrawn. These are kept as a record of what you agreed to, until you delete your account.
  • A record of each request to our server — which feature was used and when, linked to your account, with no content. Deleted after 30 days. It keeps the service running and prevents abuse.
  • Daily usage counts. These are numbers only, never content, each kept against your account and the date. They count how many messages you sent to Aura, and how many short symptom-log summaries (from the pain, energy and sleep logs) you posted to Aura, which do not count against the daily message limit up to a ceiling. They apply the fair-use limit and its exemptions, and let Aura tell you how many messages you have left. A daily clean-up removes them once they are older than 2 days, and they are always deleted when you delete your account.
  • A record that a message was already counted. When the connection drops and your phone sends a message to Aura again, it sends it with the same random message identifier, so that Aura answers it but your daily counts go up only once. To do that, our server keeps, against your account, that identifier, which daily count the message was added to, and the date — never what you wrote and never the time — and how many resent messages were answered that day. A daily clean-up removes these once they are older than 2 days, and they are always deleted when you delete your account.
  • A crisis record. If a message you send to Aura is one our server recognises as a crisis or an urgent-care situation, the messages you send for the rest of that day and all of the next day don't count against the daily message limit. To apply that, our server keeps, against your account, the date that last happened — never the time and never what you wrote. Because it shows that you sent such a message, we treat it as health data. A daily clean-up removes it once that period is over, and it is always deleted when you delete your account.

Not on our servers: your symptom logs, your conversations with Aura, your journal, your cycle history, your flares, the patterns Aura has noticed, anything read from Apple Health, or your answer to the AI question. They are kept on your phone. Once you allow Aura's AI, your messages and short summaries made on your phone pass through our server to Anthropic, and our server keeps no copy (section 3).

5. Apple Health

If you allow it, Aura reads three things from Apple Health on your device: sleep, menstrual flow (to import period start dates) and step count. Sleep and period starts are saved into Aura's local database on your phone; steps are shown and not stored. Aura does not read heart rate or heart-rate variability, and it never writes to Apple Health.

Your sleep and steps from Apple Health stay on your phone, with one exception. In versions of Aura before 1.0.4, the energy and sleep log filled in last night's sleep hours from Apple Health, for you to keep or change. If you saved a log that way, its hours now count as sleep you logged in Aura, and they can be sent like any sleep you log (section 3). Period dates imported from Apple Health become part of your cycle history, so what Aura works out from your cycle can reflect them. Once you allow Aura's AI, a short summary of your cycle and any cycle patterns go with your messages (section 3.1). Pattern descriptions also carry numbers from your cycle (section 3.3). Nothing read from Apple Health is stored on our servers. Turning Apple Health off in Settings stops Aura reading it and removes the synced sleep. Period dates already imported stay in your cycle history.

6. Legal basis for health data (Article 9)

We rely on Article 9(2)(a) — your explicit consent, which you give on the health-data consent screen when you start. That consent is:

  • Freely given — Aura is not required for anything else, and nothing else is conditional on it.
  • Specific — it covers operating Aura as described in this policy.
  • Informed — this policy states what is processed and what is sent to our AI provider.
  • Explicit — you confirm it on its own screen.

Sending to our AI provider is a separate choice. Aura asks for it on its own, before anything is sent, and you can say no while still using the rest of the app.

You can withdraw at any time:

  • The AI: Settings › Your data · privacy › "Aura's AI (Anthropic)". Nothing more is sent from that moment.
  • Everything we hold: delete your account in Settings. That removes what our servers hold about you. Section 8 explains what it does not remove.
  • Everything on your phone: delete the app. Your logs, conversations and journal are kept in an encrypted database on your phone, so removing the app removes them. What our server holds is removed when you delete your account (above).
  • Permissions: revoke Apple Health or notifications in iOS Settings at any time.
  • Analytics: withdraw analytics consent in Settings, separately from everything else.

Withdrawing consent does not undo processing that already took place lawfully.

7. Sub-processors and international transfers

  • Anthropic — the AI requests described in section 3: messages and summaries, your plan and how many messages you have left, letter photos and letter text you choose to send, pattern numbers. Anthropic deletes what it receives within 30 days, unless its safety systems flag it, and does not use it to train its models. United States, under the European Commission's Standard Contractual Clauses.
  • Supabase — our server: your account, profile, subscription, consents and the technical records in section 4, stored in Ireland (AWS eu-west-1). AI requests pass through Supabase's server functions on their way to Anthropic and are not stored there.
  • A second Supabase project — serves the library's articles and images. EU/EEA.
  • RevenueCat — your subscription and receipts. United States, under Standard Contractual Clauses. RevenueCat is told your Aura account identifier so that a subscription follows you to a new phone; this associates that device's purchase history with your account until you delete your account; when you do, we ask RevenueCat to delete that record. Our server uses the same identifier to ask RevenueCat whether your subscription is active. RevenueCat also sees the IP address your phone's request comes from, and derives an approximate country from it, which is stored on your subscriber record. Aura never asks for your location, never reads it, and does not use the country — but this happens inside their service and we cannot switch it off. It is why our App Store privacy label declares coarse location.
  • Apple — payment and Sign in with Apple. If you type an address into an appointment, what you type is sent to Apple Maps to return suggestions; it is not sent to us and not stored by us. Apple's own statement on what Maps does with it: apple.com/legal/privacy/data/en/apple-maps. "Find care" on an urgent-care card opens Apple Maps with a search for urgent care, and "Get directions" on an appointment opens it with the address you saved. Apple Maps may use your location under its own permission. Aura itself has no location permission. Voice input is recognised on your device — the audio is not sent to Apple's servers or to us.
  • Google — Sign in with Google, if you use it.
  • Resend — your email address, to deliver account emails. EU/EEA.
  • Sentry — crash and error reports. They are sent whether or not you allow usage data, because we need them to keep Aura working. A report contains technical details of what went wrong, your device model and system version, the app version and your account identifier. It does not contain what you write to Aura or in your journal. If saving a log fails, the report names the kind of log (for example pain or sleep). EU/EEA (Germany).
  • PostHog — product-usage events, only if you consent. EU/EEA. PostHog can derive a country from your IP address; we have turned that off for every event we send.

8. Your rights under GDPR

  • Access (Article 15) — most of your data is already on your device and visible in the app. For what our servers hold, email hello@nlongvity.com.
  • Rectification (Article 16) — correct your profile in Settings, or ask us.
  • Erasure (Article 17) — delete your account in Settings, or see /aura/delete-account. Deleting your account in the app removes your account and the records about you in section 4. It also erases everything Aura kept on your phone, and asks RevenueCat to delete its record of you. If you signed in with Apple, Aura also asks Apple to revoke its access. From version 1.0.4, if you signed in with Google, it asks Google the same. Leftover sign-in records are removed by a daily clean-up within about a day. Crash reports already sent to Sentry stay until they expire. If you allowed usage data, events already sent to PostHog are not deleted. What Anthropic has already received stays until Anthropic deletes it on its own schedule (section 3.4).
  • Restriction (Article 18) — email us.
  • Portability (Article 20) — email hello@nlongvity.com and we will send you the data our servers hold about you, in a structured, machine-readable format (JSON), within 30 days (Article 12(3)). That includes the health information you gave us at setup. Your logs, conversations and journal are not included because we do not have them — they are on your device.
  • Object (Article 21) — email us.
  • Automated decision-making (Article 22) — Aura makes no automated decisions producing legal effects. Her replies, patterns and predictions are informational.
  • Withdraw consent (Article 7(3)) — see section 6.

You may also complain to Datatilsynet (postkasse@datatilsynet.no).

9. Security

  • Everything in transit is encrypted with TLS.
  • Data on your device is encrypted with SQLCipher, plus iOS file protection.
  • Your sign-in token is held in the iOS Keychain, encrypted by the operating system.
  • Server-side data is encrypted at rest by our hosting provider.
  • Passwords are handled entirely by Supabase Auth. We never store or see your password.
  • Access to production systems is limited to the operator.
  • Rate limiting and request size limits are enforced server-side.

10. If you are in crisis

For mental health crisis support in Norway:

  • Mental Helse: 116 123 (free, 24/7)
  • Emergency: 113

Aura also shows helpline numbers for your region inside the app, from data stored on your phone, so it works without a connection, is never behind a subscription, and never depends on the AI.

11. Children

Aura is for adults: you must be 18 or older. When you set Aura up, it asks for your date of birth and does not accept a date under 18. We do not knowingly process data about anyone under 18. If you believe someone under 18 has an account, contact us at hello@nlongvity.com.

12. How long we keep things

  • On your device: until you delete it, or delete the app.
  • Account, profile and consent records: until you delete your account.
  • Subscription records: until you delete your account.
  • Request records: 30 days.
  • Crisis record: removed by a daily clean-up once the day after it has ended; always with your account.
  • Daily usage counts: removed by a daily clean-up once older than 2 days, and always with your account.
  • Record that a message was already counted: removed by a daily clean-up once older than 2 days; always with your account.
  • Leftover sign-in records: removed by a daily clean-up within about 2 days, and within about a day after you delete your account.
  • AI requests at Anthropic: deleted by Anthropic within 30 days, unless its safety systems flag them (section 3.4). Never used for training.
  • Crash diagnostics at Sentry: at most 90 days.

13. Changes to this policy

We will update this page and change the date above. Material changes will be notified in the app.