Aureni is designed for private reflection. This policy explains what the app handles, what stays on your device, what is sent only when you ask for analysis, and the controls available to you.
Arcturne LLC (“Arcturne,” “Aureni,” “we,” “our,” or “us”) operates the Aureni iOS application, its support services, and the Aureni production API. Arcturne LLC is the business responsible for the personal information described in this policy.
Questions or privacy requests may be sent to info@arcturne.com.
This policy covers the Aureni iOS and Android apps, the Aureni support experience, Aureni-specific pages on the Arcturne website, and the systems used to provide analysis, encrypted sync, account, safety, and subscription functionality.
Apple separately operates the App Store, Apple Account, Sign in with Apple, StoreKit, iCloud Keychain, and system dictation. On Android, Google operates Google Play, Google Account, Sign in with Google, Play Billing, and ML Kit; your chosen keyboard provider operates its dictation service. OpenAI separately provides AI processing used at your direction. Their services are governed by their own terms and privacy practices.
Depending on the features you use, Aureni may handle:
Use aliases when possible and include only the details needed for a reflection. Do not submit information you do not have the right to share.
When you select a screenshot, Apple Vision on iOS or bundled Google ML Kit on Android reads it on your device to extract text. Aureni does not upload or store the raw screenshot. You review and edit the extracted text before requesting analysis.
When you choose voice input, Aureni directs you to iPhone dictation. Aureni receives dictated text and does not create or store an audio recording. Apple’s handling of system dictation is governed by Apple’s privacy practices and your device settings.
On Android, you may use your keyboard’s microphone to dictate text. Aureni receives text and does not record audio or request microphone access. Your keyboard provider may process dictation under its own privacy settings.
Google ML Kit processes the selected screenshot on the Android device. It may send Google technical information such as a per-install identifier, device and app information, feature usage, processing latency, image dimensions or format, input/output sizes, and error codes. This SDK reporting does not send the screenshot or its recognized text. See Google’s ML Kit data disclosure.
Before analysis, Aureni locally attempts to redact common email-address and United States phone-number patterns. Automated redaction may not identify every sensitive detail, so you remain responsible for reviewing the text.
Aureni uses a third-party artificial-intelligence service, OpenAI, Inc. (San Francisco, USA), to generate reflections. Before the first analysis, the app shows a disclosure that lists exactly what will be sent and to whom, and nothing is transmitted until you choose “Allow.” You can reopen that disclosure from the capture screen at any time, and you can withdraw AI consent in the app’s Privacy screen.
When you request an analysis, the following is sent from your device to the Aureni analysis API (operated by Arcturne LLC) and, after an automated safety check, to OpenAI’s API:
Aureni does not attach raw screenshots or audio, account credentials, structured name or email fields, contacts, precise location, or your encrypted history to an OpenAI analysis request. The single reviewed moment and the context listed above are included. Text you submit, including an alias or a quoted conversation, can contain names, contact details, health information, or other personal information. Automated redaction is incomplete; remove anything you do not want to share before submitting.
Aureni requests that the response not be stored as a reusable OpenAI response by setting storage off for the request. Under OpenAI’s API data usage policies, content sent through the API is not used to train OpenAI’s models, and OpenAI may retain API data for a limited period for service operation, safety, and abuse monitoring under its applicable API data controls unless Arcturne’s production account is approved for more restrictive retention.
Aureni does not write the raw analysis input to its application database. It stores a one-way input hash for safe retry handling and may temporarily retain the generated response for up to 24 hours so an interrupted request can be returned consistently. The temporary response payload is then removed.
AI output can be inaccurate, incomplete, or inappropriate for a particular situation. Aureni is not designed to infer another person’s private thoughts or intentions and does not treat possibilities as facts.
On Android, choose Report this AI reflection to flag a generated response as harmful, inaccurate, inappropriate, or another concern. Review the generated text and confirm that you agree to share it with Arcturne support. We receive that selected text, reason, analysis reference, pseudonymous account reference, and submission time to review the report, investigate abuse, and improve safety.
The report does not automatically include your original moment, source excerpt, screenshot, audio, or full vault. A generated response can repeat personal details, so edit the report before sending. Reports are stored encrypted and available to authorized reviewers. Filing a report does not request a new OpenAI analysis or automatically send an email.
We use information described in this policy to:
We do not use relationship content for third-party advertising, and we do not sell relationship content.
On iOS, Aureni Membership is sold through Apple’s in-app purchase system. Apple processes payment details, taxes, refunds, cancellations, and billing credentials. Aureni does not receive your full payment-card number.
Aureni receives Apple-signed transaction and subscription-status information needed to unlock membership, prevent fraud, restore access, and handle expiration, grace period, billing retry, refund, or revocation.
Deleting your Aureni account or data does not cancel an Apple subscription. You can manage Apple billing through Apple subscription settings.
On Android, Google Play processes membership payment and billing credentials. Aureni does not receive your full payment-card details. Our server sends the purchase token to Google to verify entitlement and acknowledge a verified purchase. We store the token encrypted to check renewals, expiration, grace periods, and billing problems. Google sign-in is required before buying or restoring an Android membership so access can be associated with a stable Aureni account across reinstallations. You may also sign in on our web deletion page to verify ownership before confirming deletion; that page keeps its Aureni session only in memory and clears it when you leave, cancel, delete, or the page session expires.
Restore with the same Google account used to sign in to Aureni and the Google Play account that made the purchase. Restoring membership does not restore history by itself. Android history recovery separately requires an existing encrypted cloud backup, the same Aureni Google account, and its recovery key. Deletion does not cancel Google Play billing; manage it in Google Play subscriptions.
On iOS, if you enable limited product analytics, the service accepts only allowlisted events and short, non-content properties linked to a pseudonymous identifier. Examples include completing onboarding or viewing the membership page.
Relationship text, aliases, screenshots, audio, message drafts, generated coaching content, and outcomes are prohibited from product analytics. You can turn these optional iOS events off in Aureni’s Privacy controls. Android does not send these Aureni product events; ML Kit technical reporting is separate and has no Aureni in-app opt-out.
On iOS, the local Aureni vault uses AES-GCM encryption and an encryption key stored in Apple Keychain. If you optionally enable Sign in with Apple and encrypted vault sync, the Aureni vault service stores ciphertext while the synchronized encryption key remains in Apple’s iCloud Keychain system.
On Android, the local vault uses AES-GCM encryption with a key protected by Android Keystore. App backup and device-transfer backup are disabled. Google sign-in links membership and service records; signing in alone does not upload the local vault. If you separately enable encrypted cloud sync, Aureni encrypts a copy of your profile, connections, reflections, corrections, and outcomes on the device with a separate random key before uploading it. The cloud key is stored locally under Android Keystore protection. You must save its recovery code separately to restore on another Android installation with the same Google account. The server receives ciphertext and synchronization metadata, but never the recovery key. Profile preferences and AI consent remain local choices when records are restored.
Keep your recovery key private. Aureni cannot reset it or decrypt a backup for you. Without a working local vault or the recovery key and an existing cloud backup, uninstalling Aureni or losing a device can permanently remove access to history. Turning sync off stops future synchronization on that device and leaves its existing local and encrypted cloud copies in place. Account deletion removes the associated live cloud backup and key identifier; saved recovery keys cannot restore deleted server data. Exported files are readable copies saved to a location you choose; protect or delete those copies separately.
Network transport uses HTTPS. Production systems are designed to use least-privilege access, secret management, authentication, logging, and database protection. No method of transmission, storage, or encryption can guarantee absolute security.
Protect access to your device and Apple or Google account, and share only the information necessary for the reflection you request.
We may retain information longer when reasonably required by law, litigation, security investigation, or to establish, exercise, or defend legal claims.
Aureni provides controls to edit profile context, correct memory, remove insights and derived events, disable optional iOS analytics, withdraw AI consent, export a readable copy, and delete your account and data.
Depending on where you live, you may also have legal rights to request access, correction, deletion, portability, restriction, or an appeal; to withdraw consent; or to object to particular processing. We will not discriminate against you for exercising an applicable privacy right.
Submit a request to info@arcturne.com. We may request information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where applicable law permits, subject to verification.
Arcturne does not sell personal information and does not share personal information for cross-context behavioral advertising.
On iOS, open Profile, select Delete account & data, type the requested confirmation, and complete the final deletion action. Confirmed server deletion removes live user records associated with the account. The local encrypted vault and local key are removed from the device.
On Android, open You → Delete all data, review the billing reminder, confirm deletion, and complete the action. Aureni removes the local vault when deletion starts and keeps the protected account credentials needed to finish server deletion. If a network request fails, server deletion remains pending; reconnect and retry. If the session expires, verify the same Google account to complete the pending request. Confirmed server deletion removes associated live cloud ciphertext and its key identifier, as well as other account records. Aureni clears the remaining account credentials after server deletion succeeds. It cannot erase local copies, exported files, or recovery codes stored on your other devices.
Apple and Google manage billing separately. Account deletion does not cancel subscriptions. Cancel or manage billing in the store that processed your purchase.
You can start a deletion request without reinstalling Aureni: visit Aureni account and data deletion or email info@arcturne.com. We verify authority before deleting server records. Server deletion cannot erase exports or device-only files outside our control.
Aureni is not directed to children, and we do not knowingly provide the service to anyone under 18. If you believe a minor has provided personal information, contact us so we can investigate and take appropriate action.
Aureni is relationship-clarity coaching software, not therapy, medical care, professional counseling, legal advice, crisis monitoring, or an emergency service. Aureni cannot monitor a user or contact emergency services on their behalf.
Arcturne is based in the United States, and information may be processed in the United States and other locations where our service providers operate. When applicable law requires a transfer mechanism or additional safeguard, we take reasonable steps to use one.
We may update this policy as Aureni, our providers, or legal obligations change. We will post the updated policy with a revised “Last updated” date. When a change materially affects how relationship content is handled, we will provide additional notice in the app or through another appropriate channel before the change applies where required.
Aureni Privacy Contact
Arcturne LLC
United States
info@arcturne.com
If applicable law gives you the right to complain to a state attorney general, privacy regulator, or data-protection authority, you may do so in the jurisdiction where you live or work.