AuraNote Privacy Policy
1. Information we collect and how we use it
1.1 Account and sign-in
When you sign in with a text message, we process your phone number, the verification result, your user ID and sign-in status. When you sign in with a password, we process your username and your password in a securely processed form. Your phone number is used to verify your identity, manage your account, keep it secure and decide which servers serve you based on its country or region. The nickname and profile photo you choose are used to display your profile.
1.2 Connecting and binding the recorder
When you connect an AuraNote recorder card, we process Bluetooth advertising data, the device name, device ID or serial number, firmware version, battery level, recording status and connection and binding status, to scan for, connect to and control the recorder, transfer recordings and manage the device. The binding between a recorder and your account is stored on our servers to activate the Free Plan and manage membership benefits. When a recorder is bound to a new account, the app erases the recordings already on it. Older Android versions may require location permission to scan for Bluetooth devices; we do not use it to track your location.
1.3 Recordings, marks and imported files
Recordings on the recorder transfer to your phone automatically once it is connected. When you import audio or video files from your phone, we process the file content, name, format, duration, size and creation time. Marks, text notes and photos you add during a recording are linked to the matching moment in the recording and synced to cloud storage under your account. When you tap Mark, a short clip of the last part of the recording is uploaded to our servers to create the one-line summary.
1.4 Transcription, notes and AI processing
Only when you tap "Start transcribing" or use features such as questions or translation are the relevant recordings, transcripts, marks, photos and questions uploaded to our servers and sent to the cloud service providers needed for that feature: transcription, speaker labels, notes and mind maps, translation and answers. The results are stored in your account so they can be shown, edited, synced and searched. To let you search your recordings, we build a search index of recording titles, transcripts and notes on our servers.
Voiceprint recognition is currently offered only to mainland China accounts. If you separately agree to turn on voiceprint recognition and choose clips of a recording, we send the selected clips to Tencent Cloud Speaker Recognition to create and store voiceprint features, which are used to recognize enrolled speakers in recordings you submit later. You can choose not to turn it on; this does not affect recording, transcription or naming speakers manually. When you delete a voiceprint or withdraw consent, we stop new voiceprint matching and delete the voiceprint in the cloud.
1.5 Notifications
If you allow notifications, we store your device's push token (such as an Apple push token) to let you know when a transcript and notes are ready. You can turn off notifications at any time in your system settings.
1.6 Exporting to Reminders or Google Tasks
When you add action items from a note to iPhone Reminders, the app writes them directly to Reminders after you grant access; this content does not pass through our servers. When you choose Google Tasks, you sign in with Google and authorize AuraNote to manage your task lists, and the app sends the action items to Google. We never receive or store your Google password.
1.7 Membership and purchases
When you buy a membership or other paid items, we process the plan, order number, store product ID, transaction ID, receipt verification result, subscription and payment status, membership period and minutes, to activate benefits, check renewals and provide after-sales support. Full payment account and bank card details are handled by Apple, Google, Alipay or other payment channels; we do not store them.
1.8 Support and feedback
When you contact us through a feedback ticket or by email, we process the contact details, description, screenshots and logs you provide, to find the problem and reply to you.
1.9 Operations and security
To keep the Services running, prevent abuse and fix problems, we process your device model, operating system, app version, IP address, network type, request times, and error and operation logs. We do not currently use third-party analytics or advertising components.
1.10 Clipboard
When you choose to paste, we read the text you paste through the system clipboard to fill in the current input field. When you tap Copy, we write the selected content to the system clipboard. We do not read the clipboard on launch or while running in the background. Whether pasted content is uploaded depends on the feature you then use, such as sign-in, saving or Q&A, and is handled as described for that feature.
2. System permissions
- Bluetooth: to find, connect to and manage the AuraNote recorder and transfer recordings.
- Camera: to take photos in recording marks or for your profile photo.
- Photos, media and music library: to choose a profile photo, import audio or video, and save exported images and files.
- Microphone: only when you use a feature that needs the phone's microphone, such as enrolling a voiceprint.
- Notifications: to tell you when a transcript and notes are ready, and to show the recording status and Mark button on the Lock Screen.
- Reminders (iOS): to add action items to Reminders when you choose to.
- Location: only to meet the Bluetooth scanning requirements of some Android versions; we never track your location without telling you.
- Local network, network status and storage: to connect to our services, check network status, and save recordings, imported files and cache.
You can withdraw non-essential permissions in your system settings. The related features may then stop working, but other features are not affected.
3. Local storage
The app stores your sign-in status, preferences, recorder connection history, recording files, task status and cache on your phone to provide basic functions. Built-in web pages may use cookies or similar technologies to work properly. Uninstalling the app deletes this local data.
4. Service providers, sharing and disclosure
We do not sell your personal information. To provide SMS verification, cloud storage, transcription, AI processing, translation, notifications and payment verification, we share information with service providers only to the extent necessary, and require them by contract and access controls to process it lawfully. See the Third-Party SDK Information for details.
Except with your separate consent, to meet legal obligations, to protect significant lawful interests or where the law otherwise provides, we do not share or publicly disclose your personal information to other third parties. Content you send to others with the share feature is shared as you decide. In a merger, division or asset transfer, we will inform the recipient as required by law and require it to keep protecting your information.
5. Where and how long we store information
Accounts registered with a mainland China phone number: data is stored on servers and cloud resources in mainland China.
Accounts registered with a phone number from another country or region: data is stored on servers and cloud resources in the United States (Amazon Web Services). Recordings, notes and other data of these accounts are not transferred back to mainland China; transcription and AI processing are performed by Amazon Web Services in the United States. When we send a sign-in code to a phone number outside mainland China, the number is provided to an international SMS provider to deliver the message.
We keep information only as long as needed to provide the Services: account information for as long as the account exists; recordings, notes and results until you delete them or delete your account, with deleted recordings kept in Recently Deleted for 30 days before automatic removal; and transaction and security logs as required by law and audits. After that, we delete or anonymize the information, unless the law requires otherwise or backup rotation has not yet finished. If personal information of mainland China accounts needs to be provided outside China, we will notify you, obtain your separate consent and complete other procedures required by law.
6. Security
We protect information with HTTPS encryption in transit, access controls, private object storage, time-limited signed links, permission isolation, log auditing and backups. No internet service is completely secure; if a security incident may affect your rights, we will take remedial measures and notify you as required by law.
7. Your rights
In the app, you can view and edit your account information; manage and delete recordings, notes, voiceprints and results; turn off notifications; withdraw system permissions; sign out; and delete your account. Once your account is deleted, its data is permanently deleted.
You can also ask to access, copy, correct, complete or delete your personal information, withdraw consent, receive a copy of your personal information, or ask us to explain how we process it. If the laws where you live, such as the EU General Data Protection Regulation or California consumer privacy laws, give you additional rights, we will respond as those laws require. Withdrawing consent does not affect processing carried out before the withdrawal.
Submit requests through "Mine > Feedback Ticket" in the app or by email to jiaoyang@lumenorigin.net. To protect your account, we may verify your identity first, and we will reply within the period required by law (generally no more than 15 working days).
8. Children
AuraNote is intended mainly for adults. Children under 14 (or the age set by local law where it applies) should use it only with a parent's or guardian's consent and guidance. If we learn that we have processed a child's personal information without a guardian's consent, we will delete it promptly.
9. Updates and contact
If this Policy changes significantly, we will notify you through the app, a pop-up or other prominent means, and obtain your consent again where required.
Operator: Beijing Woxiang Network Technology Co., Ltd.; Address: 5F, Unit 1, Building B6, China Vision (Zhongguo Shijie), Baohe District, Hefei, China; Email: jiaoyang@lumenorigin.net. Privacy questions and personal information requests can also be submitted through "Mine > Feedback Ticket" in the app.