Last updated: August 26, 2026
AuraPath ("the app") is built privacy-first. This policy explains exactly what happens to your information when you use the app. It applies to AuraPath for iOS, published by Zenonas Valeika, and is written to satisfy the EU General Data Protection Regulation (GDPR).
AuraPath collects no face data and no biometric data of any kind. The app does not capture, request, receive, process, store, share or retain facial images, facial geometry, facial landmarks, face templates, fingerprints, or any other biometric identifier. It does not use ARKit face tracking, the Vision framework's face detection, Face ID data, or any comparable technology.
The app requests no access to your camera and no access to your photo library, and it contains no code path capable of capturing or uploading an image. Because no face data is collected, none is shared with any third party, none is stored anywhere, and there is no retention period to disclose.
Earlier pre-release builds of AuraPath included optional palm-reading and face-reading features, in which a photo was sent for a single analysis and immediately discarded without ever being stored. Those features have been removed from the product entirely, and the server endpoint that performed the analysis has been decommissioned. No photo, face image or derived face data from those builds was ever retained, and none exists today.
To build your portrait, the app uses the birth details you enter: date, optional time of birth, birthplace, and your name. These stay on your device. Your birthplace is typed by you manually and converted to coordinates for the astronomical calculation — the app never uses GPS and never reads your current location.
Journal entries — your daily rating, the tags you select, and any note you write — are stored only on your device, in the app's own storage. They are never transmitted to us or to anyone else. The insights the app shows you (streak, average day, strongest weekday, which tags lift or cost you) are calculated on your iPhone from your own entries. Deleting your data in Settings, or deleting the app, removes them permanently.
Every written reading in AuraPath — your portrait, the daily accent line, the year introduction, the compatibility report and the Aura companion's replies — is composed by an artificial-intelligence model that belongs to another company. This section states exactly what is sent, who receives it, how it is collected, what it is used for, and what that company is contractually required to do with it.
Before the app makes its first AI request, it shows you a full-screen disclosure listing the items below and naming Anthropic as the recipient. Nothing is transmitted until you tap "I agree". If you decline, the app continues to work: your day card, year path, compatibility scores, portrait numbers and journal are all calculated on your iPhone and remain available. You can withdraw your permission at any time in Settings → AI readings → Turn off AI readings, after which the app makes no further AI requests. The same disclosure is reachable at any time from that Settings screen, from the Aura chat and from the Match screen.
The recipient is Anthropic PBC, 548 Market Street, San Francisco, California, United States — the company that develops the Claude family of AI models. AuraPath does not call Anthropic from your phone: the request goes first to our own server in Frankfurt, Germany, which adds the instruction text and forwards it to Anthropic's API. Your IP address is therefore not exposed to Anthropic.
Anthropic processes this data as our processor, under Anthropic's Commercial Terms of Service and Data Processing Addendum, which we accept as an API customer. Under those terms, and confirming that the recipient affords the same or equal protection of your data as this policy does:
Anthropic's own privacy policy is published at anthropic.com/legal/privacy.
Our own server processes the request in real time and does not store it in any user profile or database linked to you — we maintain no accounts, so there is nothing for a request to be attached to. The one exception is the daily accent line, which is cached in a shared, non-identifying form: the cache key is a combination such as Leo | Virgo rising | Life Path 7, which is common to thousands of people and contains no name and no identifier. A random installation identifier accompanies requests to our server so that monthly usage limits can be enforced; it is generated on your device, is not derived from any device or personal identifier, is stored beside nothing but a counter, and is not passed on to Anthropic.
For sending this data to Anthropic, the legal basis is your consent under Article 6(1)(a) GDPR, given on the disclosure screen described above and withdrawable at any time in Settings. Where you send another person's first name and birth date through the Match feature, you are responsible for having that person's agreement before you do so; you can delete them from the app at any time.
The weekly note is the only part of AuraPath that stores anything about you on our server. It is off by default. Nothing described in this section exists for you unless you have opened Settings, typed an email address and switched it on.
Once a week our server sends this summary to Anthropic (see the section above, which applies unchanged) to compose one short note, stores the result, and emails it to you. The email is delivered by Resend (Resend, Inc., United States), which processes your email address and the message for the sole purpose of delivering it. If you additionally tick news and offers, the same email may carry one promotional block about AuraPath; the note itself never depends on that tick, and the two consents are separate.
Consent, Article 6(1)(a) GDPR, given by switching the feature on. Marketing content rests on the second, separate consent. Both are withdrawable at any time and withdrawal has no effect on anything else in the app.
Deletion is immediate and permanent. We keep no backup copy of an unsubscribed profile.
Subscriptions are processed entirely by Apple through your Apple ID. We never see your payment details.
The app contains no third-party analytics SDKs, no advertising SDKs, and no tracking of any kind across apps or websites.
Where the app processes the birth details you enter, the legal basis is performance of the service you requested (Article 6(1)(b)). Because we maintain no user accounts and store no personal profile on our servers, we hold no personal data about you to access, correct, export or erase. All of your data lives on your device and is under your control: Settings → "Delete all my data" removes your profile, journal, portrait and history permanently, as does deleting the app. Where the app sends data to Anthropic to compose written text, the legal basis is your consent, which you may withdraw at any time in Settings → AI readings. For any privacy question or request, contact us at the address below; we respond within 30 days.
Your data is retained on your device for as long as you keep the app. A short-lived, non-identifying cache of shared daily text is kept server-side and is not linked to any individual. Unless you have switched on the weekly note, our backend retains no personal data at all; if you have, the row described in that section is kept until you turn the feature off or unsubscribe, at which point it is deleted immediately.
The app is not directed at children under 13.
If this policy changes, the updated version will be posted at this address with a new date.
Questions or privacy requests? Email z.valeika@gmail.com or visit Support. See also our Terms of Use.