Privacy Policy

1. Information We Collect

We collect the following information:

• The five quick-reflection answers are processed in the page URL to generate a brief observation. If you stop there, they are not stored in your account. If you continue to the 30-question flow, the selected situation, resulting observation pattern, and up to two supporting answers are carried as report context and may be saved with your report after sign-in.
• Thirty self-report answers you provide, used to calculate five descriptive dimension indicators and generate answer-linked reflection content.
• Account data: your email address, used for magic-link sign-in.
• Purchase records: transaction ID, amount, currency, and status (via our payment provider).
• Funnel events: a random identifier limited to the current browser tab, language, whether report context was present, and completed product stages. These events do not include answers, report text, email, IP address, or a persistent cross-session identifier.
• Cookies and local storage used to operate sign-in, report access, and the Service.

2. How We Use Your Information

We use your information to:

• generate your brief observation, response overview, and Complete Reflection Report;
• deliver purchases and maintain your account and report history;
• measure aggregate completion and purchase stages without storing answer content in analytics;
• operate, secure, and improve the Service;
• communicate with you about your account or purchases.

3. Payment Information

Payments are processed by Dodo Payments, our Merchant of Record. We do not collect or store your full payment card details. Dodo Payments processes payment data under its own privacy policy.

4. Service Providers We Share With

We rely on trusted providers to run the Service:

• Supabase — database and authentication;
• Dodo Payments — payment processing and billing;
• Vercel — application hosting.

5. Cookies and Local Storage

We use cookies to keep you signed in and local storage to remember certain preferences and unlock state. You can control cookies through your browser settings, though some features may not work without them.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

7. Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@auriao.com.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights. To make a request, contact us at support@auriao.com.

10. Data Location and China Privacy Rights (PIPL)

Your personal information is stored on infrastructure located in the United States: our database and authentication (Supabase) and application hosting (Vercel) are US-based, and payments are handled by Dodo Payments. We do not store your personal information on servers in mainland China.

Because the Service is operated from mainland China, our operator may access your information from China solely to operate, provide, and support the Service. Under China's Personal Information Protection Law (PIPL), this constitutes a cross-border handling of personal information, which you acknowledge by using the Service.

Under the PIPL you may have the right to access, copy, correct, and delete your personal information, to withdraw consent, and to request an explanation of our processing rules. To exercise these rights, contact us at support@auriao.com.

11. International Data Transfers

Your information is stored and primarily processed in the United States and may be processed in countries other than your own. It is not stored on servers in mainland China. Where required, we take steps to ensure appropriate safeguards for such transfers.

12. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

14. Contact

Questions about your privacy? Contact us at support@auriao.com.