Privacy Policy

1. Who We Are

Auvoren is a productivity, goal-setting, habit, reflection, and personal coaching app operated by Auvoren Software Inc., an Ontario corporation. In this policy, “Auvoren,” “we,” “us,” and “our” refer to Auvoren Software Inc.

For privacy questions or requests, email support@auvoren.app.

2. Scope

This policy applies to information handled through the Auvoren mobile app, its supporting cloud services, customer support, product communications, and this website. It does not govern third-party websites or services you visit independently.

New authenticated accounts must accept this Privacy Policy and the Terms of Use before entering the app. That required acceptance is separate from the optional personalized Coach, AI Mascot, and personalized-notification choices described below.

3. Information We Handle

Information You Provide

• Account information: email address, authentication records, and account identifiers. Auvoren does not ask for your age or full date of birth during ordinary signup.
• Profile and onboarding information: display name, time zone, preferences, motivations, focus areas, and answers you choose to provide.
• Your Auvoren content: goals, tasks, schedules, habits, quit trackers and reasons, optional quit plans, triggers, urge logs and outcomes, focus sessions, progress, check-ins, reflections, Coach history, notes, checklists, and related settings.
• Support and feedback: messages, attachments, contact details, and information you intentionally send when asking for help or providing feedback.

Our website support form saves your email, optional name, selected topic, and message in our hosting database so we can respond. Previously submitted early-access requests remain subject to the same retention rules; you can ask us to remove one. Form records and daily aggregate page, legacy early-access-link, and saved-request counts are eligible for deletion after 180 days and removed by scheduled cleanup or subsequent request processing.

These aggregate counts do not use analytics cookies, visitor identifiers, query strings, or message contents. Our browser page/link counter skips collection when your browser sends Do Not Track. A daily keyed, one-way hash of the network address limits abuse; rate-limit records expire after about 24 hours and are removed by cleanup. Hosting infrastructure separately processes ordinary request information and may maintain security logs. Website fonts are hosted with the site rather than fetched from a third-party font service.

Account confirmation and password-reset emails contain your email address and the information needed to complete the requested account action. If you email support, our email providers process the message, attachments, sender details, and delivery information. In-app text feedback and support email are separate records. An optional screenshot report opens your email composer so you can choose an attachment and review the message before sending; Auvoren does not attach screenshots automatically.

Information Created When You Use Auvoren

• Progress and product activity: completions, streaks, milestones, reminder preferences, bounded allowlisted product events, diagnostic fingerprints, feature interactions, and timestamps needed to operate and improve the app.
• AI operations: the bounded context sent for an enabled AI request, generated response, request identifier, provider/model details, usage counts, and limited metadata used for quotas, security, and troubleshooting.
• Device and notification information: app version, operating system, installation information, push token, time zone, language, notification preferences, delivery status, and limited technical diagnostics.
• Subscription information: product, entitlement, renewal, trial eligibility, and transaction status supplied by Apple and RevenueCat. Store transaction identifiers used for cross-account quota linking are one-way hashed before Auvoren stores the quota identity. We do not receive your full payment-card number.

Device-Local, Cloud, and Exported Information

Authentication sessions are stored using iOS Keychain or Android Keystore-backed secure storage. Other offline app content is stored locally for offline use and is also synchronized to a private, account-scoped Supabase application snapshot. Client-accessible cloud records use owner-based access controls.

App-managed recovery copies may retain earlier account content on the device to protect against failed saves or restores. Offline changes reach the cloud and other devices only after a successful sync.

Optional device-calendar import. If you explicitly allow calendar access and choose calendars to display, Auvoren reads matching event titles and times so they can appear as read-only items in Schedule. Calendar event content, calendar names, locations, notes, attendees, and identifiers are not uploaded to Auvoren, cloud backups, analytics, notifications, or personalized AI. The selected device-calendar identifiers are stored only on that device so Auvoren can remember which calendars to show.

Widgets and Live Activities. If you use these features, Auvoren shares a limited local snapshot with its iOS extension so progress, selected task or tracker titles, and focus-session information can appear outside the app. Widget title visibility can be controlled in Settings. Information displayed on your Home Screen, Lock Screen, or Dynamic Island may be visible to others who can see your device.

If you create a portable JSON backup, it is unencrypted and may contain goals, reflections, and other private content. The backup remains wherever you save or share it and is under your control.

Information We Do Not Seek

Auvoren does not require precise location, contacts, photos, microphone access, or full payment-card details for its core features. Please avoid putting information you do not want processed into goals, reflections, support messages, or optional AI requests.

If you are 13 to 17, remember that goals, reflections, quit reasons, and Coach messages can contain sensitive personal information. Do not enter information that you are not comfortable storing on your device and in your private Auvoren cloud account or, when you enable an AI feature, sending as bounded context to the disclosed AI provider.

4. How We Use Information

We use information to:

• create, authenticate, protect, and support your account;
• save, synchronize, restore, and export content and preferences;
• provide goals, tasks, schedules, habits, focus sessions, progress, reflections, Coach interfaces, reminders, and other app functions;
• provide an individual personalized AI feature only when its separate permission is active;
• verify subscription access, enforce trials and AI limits, prevent fraud, and keep entitlement state consistent between accounts;
• respond to support requests and intentionally submitted feedback;
• detect abuse, enforce security controls, troubleshoot errors, and maintain reliability;
• understand product performance using bounded events that exclude goal titles, task titles, reflection text, emails, passwords, tokens, Coach messages, and notification text; and
• comply with law and enforce our Terms of Use.

5. Optional Personalized Coach, AI Mascot, and Notifications

Auvoren’s planning and progress tools can be used without personalized AI permission. The AI Mascot remains hidden when its personalization permission is off. Personalized AI is off by default.

Coach personalization and AI Mascot personalization are two independent optional choices. Personalized notifications require a third independent choice before personalized cloud processing. Your device’s notification permission is separate and may also be requested for local reminders or focus alerts. The server records the version and server timestamp for required policy acceptance and each optional AI choice. You can withdraw Coach, mascot, and notification personalization independently in Settings.

What May Be Sent

When a personalized feature is enabled and invoked, Auvoren may send only the bounded context relevant to that feature. Depending on the request, this can include your message and recent Coach conversation, selected goals, motivations, tasks, schedules, habits, quit reasons and relevant support-plan or urge-outcome details, progress facts, check-ins, recent reflection summaries, or recent notification bodies. A one-way hashed account identifier may accompany requests for provider safety and abuse prevention.

Passwords, authentication tokens, full payment details, portable backup files, internal storage keys, and unrelated app content are excluded from AI prompts.

Provider and International Processing

Auvoren currently uses OpenAI for enabled personalized AI. AI requests may be processed where OpenAI or its authorized subprocessors operate. Auvoren sends foreground Responses API requests with response storage disabled and keeps OpenAI’s optional model-improvement data sharing disabled. Under OpenAI’s standard API data controls, request and response content may still be retained in abuse-monitoring logs for up to 30 days by default, with limited longer-retention exceptions for legal or safety reasons. OpenAI credentials remain in server-side secrets and are not included in the app.

Your Control

AI output can be incomplete, inaccurate, or unsuitable. Auvoren may present a proposed tracking or planning action, but it does not apply that action until you review and confirm it. Withdrawing permission stops new requests for that feature; it does not reverse processing already completed for requests you previously authorized.

6. Service Providers and When Information Is Shared

We do not sell personal information or share goal and reflection content for third-party advertising. We disclose information only as needed to operate Auvoren, follow your choices, protect the service, complete a business transaction subject to appropriate safeguards, or comply with law.

Provider privacy notices explain their handling in their respective roles. We may also disclose information when reasonably necessary to comply with legal process, investigate fraud or security incidents, enforce agreements, or protect users and others.

7. Your Choices and Privacy Rights

Depending on where you live, you may have rights to access, correct, or delete personal information; withdraw consent; ask how information has been used or disclosed; or challenge our compliance.

• AI choices: independently enable or disable personalized Coach, AI Mascot, and personalized notifications in Settings.
• Notifications: change Auvoren reminder preferences and your device’s notification permission.
• Calendar: hide imported calendars in Schedule or revoke calendar access in device settings.
• Account information: update available profile information in the app.
• Portability: create and share a portable JSON backup from the app. Protect it as you would other private files.
• Account deletion: use the in-app delete-account control. You may contact us if you cannot access the account.
• Privacy request: email support@auvoren.app. We may verify your identity before completing a request; do not send your password or sign-in codes.

You may complain to the Office of the Privacy Commissioner of Canada or another applicable regulator, though we encourage you to contact us first so we can try to resolve the concern.

8. Retention and Deletion

When the app is offline, a bounded queue of product events stays on the device for up to seven days for retry. These events exclude your written content and are sent only for the account that created them; an introduction completed before login is attached to the next account.

Account content is generally retained while the account is active or until you delete content or the account, subject to limited legal, security, fraud-prevention, backup, and dispute-resolution exceptions.

Coach chat: the visible conversation uses a 30-minute message window. Older messages are pruned when the active Coach screen runs its cleanup, and that change syncs afterward. This is not a promise that all copies are erased exactly 30 minutes after sending: offline/cloud snapshots, recovery copies, your exported files, and provider records may last longer. Reflections and changes you explicitly save to a goal, schedule, or tracker remain separately.

Account-linked AI cost records are retained for cost accounting and abuse prevention while the account exists. Notification deduplication fingerprints and achievement-delivery records are retained while the account exists to avoid repeating messages and milestones. These records are separate from the short-lived context and event records above and are removed with account deletion, subject to the limited exceptions described here.

These are Auvoren retention periods. Separately, OpenAI may retain API request and response content in abuse-monitoring logs for up to 30 days by default, subject to limited legal or safety exceptions. Auvoren sends requests with response storage disabled and does not opt in to model-improvement sharing.

In-app deletion removes the Supabase authentication account, account-owned cloud records, matching RevenueCat customer record, and that account’s local Auvoren content and privacy choices on the device. User-controlled exported files and device backups are not deleted because Auvoren does not control them. Deleting the app or account does not cancel an Apple subscription.

Website form submissions and support emails are stored separately from your app account and are not automatically matched to account deletion. Contact us to request their deletion. Support correspondence is kept as needed to handle your request and any related legal, security, or dispute obligations; the website form and in-app feedback limits above do not automatically delete email. Copies on another offline device may remain until that device reconnects or you remove its local app data.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, encrypted network connections, secure platform storage for authentication sessions, owner-scoped cloud access controls, server-side credentials, checksummed snapshots, and bounded server endpoints.

No app, storage system, or transmission method can be guaranteed completely secure. You are responsible for protecting your device and credentials and should contact us promptly if you believe the account has been compromised.

10. International Processing

Auvoren is operated from Canada, but providers may process or store information in the United States and other countries where they or authorized subprocessors operate. Local laws may differ from those in your province or country, and information may be accessible to courts, law enforcement, or national-security authorities under applicable law.

11. Minimum Age and Teen Users

Auvoren is available only to people aged 13 or older. We do not ask for age during ordinary signup, knowingly permit accounts for children under 13, or knowingly collect their personal information.

If you are below the age of majority where you live, review this Privacy Policy and the Terms of Use with a parent or legal guardian and obtain any permission required by applicable law. Auvoren may include user-entered sensitive topics and optional AI-generated responses. It is not confidential professional care, therapy, medical treatment, or an emergency service.

If we learn that an account belongs to a child under 13, we may suspend or delete the account and associated information. A parent or guardian who believes a child under 13 has created an account can contact support@auvoren.app so we can investigate and take appropriate action.

12. Changes to This Policy

We may update this policy as Auvoren, its providers, or legal obligations change. We will post the revised policy here with a new date and provide additional in-app notice when a change is material or renewed acceptance is required.