Privacy Policy

Last updated: May 9, 2026

1. Who we are

AuraWallet (“AuraWallet”, “we”, “our”) is a personal finance application operated by FomeThings. We help individuals track their accounts, transactions, categories, and investments across multiple currencies. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

2. Information we collect

We collect only the information needed to provide the service:

  • Account information. Email, name, preferred language, country, and primary currency, provided when you sign up.
  • Authentication data. If you choose Sign in with Apple or Google, we receive the email and name granted by the provider. We do not receive your password.
  • Financial data you enter. Wallets, transactions, categories, recurring payments, and investment holdings you create. This data lives in your account and is never shared with other users or sold to third parties.
  • Assistant conversations.When you use Aura, the in-app assistant, we store the messages you send and Aura’s replies so your chat history persists across sessions. You can clear this history at any time from within the assistant.
  • Subscription state. Whether your account is on the free or premium tier, including trial dates and renewal dates. Payment details (card, billing address) are handled directly by Apple or Google and are never sent to us.
  • Device data. Push notification token, language, and timezone, used to deliver notifications and format dates.
  • Diagnostics. Anonymous crash reports and error traces, used to fix bugs.

3. How we use your information

  • To provide and operate the app’s features.
  • To power Aura, the in-app assistant, which answers questions about your finances and helps you record and organize your transactions.
  • To send you transactional notifications you opted into (recurring payments, market updates, dividend events).
  • To process subscription purchases, renewals, and trial states.
  • To respond to your support requests.
  • To diagnose crashes and improve reliability through anonymous error logs.

We do not sell your data. We do not share your financial data with advertisers, data brokers, or third parties for marketing purposes.

4. Service providers

We rely on a small set of trusted providers to operate AuraWallet. Each one processes only the data needed for its function: Supabase (authentication and database), RevenueCat (subscription management), OneSignal (push notifications), Sentry (anonymous crash reporting), Resend (transactional email), and optional sign-in via Apple and Google. Market data is sourced from Financial Modeling Prep, CoinGecko, and CryptoCompare using public asset symbols only — no personal or financial data is shared with these market data providers.

AI assistant. When you use Aura, the message you send and only the financial figures needed to answer it are sent to Google’s Gemini API to generate the reply. Google processes this data solely to return the response and does not use it to train its models; it is never used for advertising. Aura is grounded in your own data and can only read the account you are signed into.

5. Data retention and deletion

We keep your data while your account is active. You may delete your account at any time from Settings → Account → Delete account inside the app. Account deletion permanently removes your profile, wallets, transactions, categories, recurring payments, investment holdings, and subscription record from our active database. Backups are retained for up to 30 days for disaster-recovery purposes and are then purged.

6. Your rights

Depending on your jurisdiction, you may have rights to access, export, correct, or delete the personal data we hold about you. The in-app account deletion path satisfies the right to erasure. Contact us using the address below for any other request.

7. Children

AuraWallet is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to your account is protected by your authentication credentials and row-level security on the database. While no system is perfectly secure, we apply industry-standard practices to protect your information.

9. International transfers

Our service providers may process your data in regions outside your country of residence. By using AuraWallet, you consent to this cross-border processing under the safeguards each provider has committed to.

10. Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be communicated in-app or by email before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

Questions or requests: support@aurawallet.app.