Aurora privacy policy

Last updated: 10 July 2026

Aurora does not collect, transmit, or sell any personal data. All migraine logs, health data, and analytics computations happen entirely on your device.

1. Data we process on-device

Aurora is a migraine diary that processes everything locally on your iPhone using SwiftData. The following data is created and stored on your device only:

• Migraine attacks and prodromes: date, time, severity, location, symptoms, triggers
• Daily check-ins: pain levels, mood, sleep quality, notes
• Medication events: drug name, dose, timing, effectiveness ratings
• Menstrual cycle data, if you choose to track it for menstrual migraine analysis
• Biometric data from Apple Health: sleep, HRV, wrist temperature, body temperature, resting heart rate, menstrual flow, steps, headphone audio exposure (only if you grant per-type permission)
• App preferences: language, accessibility, subscription state, stored in UserDefaults

2. What we do not collect

We do not collect, transmit, or store any personal data on external servers. Specifically:

• No analytics or telemetry SDKs are integrated
• No crash reporting services
• No advertising identifiers (IDFA) and no ad networks
• No tracking technologies. Aurora does not implement App Tracking Transparency because there is nothing to track
• No third-party SDKs of any kind. Aurora is built exclusively on Apple frameworks

3. iCloud sync

Aurora syncs your migraine data only between your own Apple devices via your private CloudKit container, secured by your Apple ID. Apple classifies this as the user's own data: it is not collected by us, and we have no access to it.

If you sign out of iCloud or disable CloudKit for Aurora, your data remains on the device you used it on.

4. Apple Health (HealthKit)

Aurora reads the following from HealthKit only with your explicit, per-type permission:

• Sleep stages and duration
• Heart rate variability (SDNN, RMSSD)
• Wrist temperature and body temperature
• Resting heart rate
• Menstrual flow and cycle markers
• Steps and physical activity
• Headphone audio exposure
• Workouts
• Dietary caffeine
• Time in daylight
• Biological sex (one-time profile prefill, confirmed by you)

Aurora writes headache events back to HealthKit as standard HKCategoryTypeIdentifier.headache samples so you can see them alongside data from other apps. Values derived from HealthKit are stored in your diary and, like the rest of your records, sync only between your own devices via your private CloudKit container (see section 3). They are never accessible to us or to any third party.

5. Location and weather (WeatherKit)

Aurora uses your location only to fetch barometric pressure from Apple's WeatherKit service, which is used as a prediction input for the trigger model and to warn you about significant pressure drops over the next 48 hours.

Coordinates are not stored on our servers (we don't have any) and are not sent to anyone other than Apple's WeatherKit. Apple does not retain user-identifying location data from WeatherKit queries. If you decline location access, Aurora falls back to a privacy-preserving default city.

6. Subscriptions and in-app purchases

Aurora Plus subscriptions and the lifetime purchase are handled by Apple's StoreKit framework. Cancellation, auto-renewal, and refunds follow Apple's standard terms. We do not receive, store, or have access to your payment information. Subscription status is verified on-device through StoreKit 2.

7. Face ID and biometric authentication

The optional app lock (Aurora Plus) uses Apple's LocalAuthentication framework. Biometric data is processed entirely by iOS and is never accessible to Aurora.

8. Your rights

• Export: Settings → Data → Export JSON (or CSV for Aurora Plus).
• Delete: Settings → Delete all data. One tap wipes local data and triggers CloudKit deletion within Apple's standard 30 days.
• You can revoke Health, Location, or Notifications permissions at any time in iOS Settings.

9. Children's privacy

Aurora is rated 13+ on the App Store. Pediatric migraine (under 14 years) is explicitly excluded from supported clinical populations and described in the app accordingly. We do not knowingly collect any information from children.

10. Not a medical device

Aurora is a wellness app, not a medical device. It does not diagnose, treat, or prescribe. PDF reports are prepared as structured material for a neurologist consultation, not as clinical decisions. Discuss all medical decisions with your doctor.

11. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top reflects the latest revision. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy: pavel.yatskevich@gmail.com