Legal
Privacy Policy
Aurzone is a personal productivity, fitness, and mindfulness companion. This document explains exactly what data we collect, how it is used, and what controls you have. The app is local-first: nothing is sent to our servers unless you choose to sign in or opt in.
1. Two modes of operation
Guest mode (signed out)
- All data lives on your device only.
- We do not transmit any data, telemetry, or identifiers when you are signed out and Anonymous Usage Data is disabled (the default).
- Disabling cloud features has no effect on app functionality; everything works offline.
Signed-in mode
When you create an account or sign in:
- Your data is mirrored to our hosted Supabase project so you can sync across devices.
- Row-level security (RLS) ensures only you can read or write your rows.
- You can disable Cloud Sync at any time in Profile → Settings.
2. What we sync to the cloud (signed in)
| Domain | Table | Contents |
|---|---|---|
| Profile | profiles | Display name, avatar, age (optional), XP, level |
| Tasks | tasks | Titles, descriptions, due dates, status, tags |
| Focus | focus_sessions | Pomodoro timestamps, planned vs actual minutes |
| Habits | habits | Names, icons, frequency, streaks |
| Habit logs | habit_completions | Date stamps for each completion |
| Workouts | workouts | Name, date, exercises, sets, duration |
| Body stats | body_stats | Weight, measurements (optional) |
| Mood | mood_entries | Emoji level, optional note and tags |
| Journal | journal_entries | Free-text content you type yourself |
| Breathing | breathing_sessions | Pattern, duration, completion flag |
| Sleep | sleep_sessions | Bed/wake times, duration, quality rating |
| Reflections | daily_reflections | Notes on what went well / to improve |
| Daily XP | daily_xp | Per-day aggregate counters |
| Reminders | reminders | Custom reminder rules you create |
| Settings | user_settings | Your preferences blob |
We do not collect:
- Your email password (handled by Supabase Auth, encrypted at rest)
- Your IP address (beyond what Supabase needs for the request)
- Device identifiers, advertising IDs, or contact lists
- Health data unless you explicitly enable HealthKit / Health Connect
3. Anonymous usage telemetry (opt-in)
Disabled by default. When you turn on Anonymous Usage Data in Settings:
- We record event names like
dau_ping,task_completed, etc. - Payloads contain only counts/categories — never free-text content.
- Events are tagged with either your user id (signed in) or a rotating
anon_idstored on-device. - Stored in
usage_eventstable, used only for aggregate metrics (daily active users, feature adoption). - Toggling consent off immediately clears any locally-buffered events.
4. Third-party services
- Supabase — Postgres + Auth + Realtime. Used only when signed in or when telemetry is enabled.
- AdMob (optional) — Banner ads on the home dashboard. Test IDs only in development.
- Apple HealthKit / Google Health Connect — only invoked after you explicitly grant permission in Settings.
5. Your rights
You can, at any time:
- Export your local data: Profile → Account → Export Data.
- Delete your account and all cloud data: Profile → Account → Delete Account.
- Reset local data on this device: Profile → Settings → Reset All Data.
- Disable sync or telemetry independently in Settings.
6. Changes to this policy
When this policy changes we will bump the date above and surface a notice in the app on next launch. Continued use after that date constitutes acceptance of the updated terms.
7. Contact
For privacy questions or data-deletion requests, email us at hello@lokkhyo.com.