This policy describes the consumer health data AuraMed handles: information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. It applies to everyone, and it is written in the form the laws of Washington, Nevada and Connecticut ask for. Our full Privacy Policy gives the details, including how long each item is kept.
AURAMED S.A.R.L, a company registered in Lebanon (Main Road, Ras El Metn, Khaled Makarem Building, Ground Floor, Baabda, Mount Lebanon, Lebanon), is responsible for this data. Contact: mail@getauramed.com. AuraMed has no affiliates that receive it.
The health data we collect, and why
- Your cabinet: the medicines and supplements you add, their strength, how often you take them, the times you set and the dates of a course. Why: to show and explain them, check them for safety warnings, answer Aura's questions about them and send reminders.
- Your Health Profile: sex, age as you enter it, conditions (including smoking and regular alcohol use, if you enter them), allergies, pregnancy, breastfeeding or trying to conceive, weight, and an optional profile name. Why: to fit scan results, look-ups, safety warnings and Aura's answers to you.
- Your dose record: which items you marked taken, taken late or missed, and when. Why: to show your dose history, and so Aura can answer about today.
- Scans and look-ups: the photo you scan, a note you add, the product name you look up and the result. Why: to identify the product and explain its official label. The photo is not stored.
- Questions to Aura, typed or spoken, and Aura's memory of your own words, if it is on. Why: to answer, and to pick a conversation up where it was left. A voice recording is used once to write your question and is not stored.
- Names you type into the medicine or allergy search. Why: to suggest matching names.
- Reminders on the web: the item names and times, your time zone, course dates and your browser's notification address. Why: to send each reminder on time.
- Notifications in the app, only the ones you say yes to: your phone's notification address, your notification settings with the date and version of each yes, and a record of what was sent (type and time, no text or medicine name). Once a day our server reads your account copy to see what is due, and keeps nothing from that read. Why: to tell you about an expiry date you entered, a recall notice that may match a medicine you scanned, your week's dose count, and milestones. Each is off until you tick it; withdrawing consent stops them all at once.
- Usage events that show you use a medicine app, such as that a scan was completed or a first cabinet item or reminder was added, with a random device ID. They carry no medicine name, condition or question. Why: to understand and improve AuraMed. You can switch them off.
- Apple Health and Health Connect (steps, sleep, resting heart rate), if you connect them. They are read on your device and shown to you, and are not sent to AuraMed or anyone else, except when you choose to share some of them with a helper: then the last 7 days of the readings you chose are sent to our server, encrypted, for that helper.
- Appointments and refills (AuraMed Care or Pro): what an appointment is for, the doctor or clinic and its specialty, its date, time and place, and an optional phone number and notes; and for a refill, the medicine, the date or days of supply you entered, the reminder and an optional pharmacy. Why: to show them to you and remind you on your phone. They are never sent to an AI company.
- Health data you share with a helper: steps, sleep and resting heart rate from Apple Health or Health Connect, only the types you choose and only if you choose to share. Why: so the helper you chose can see them. Collected only with your separate consent.
Your cabinet, Health Profile, dose record and scan history are kept on your device. If you sign in, an encrypted copy is also kept with your account on our server so they come back on your other devices. AuraMed does not collect your precise location and does not use geofencing.
Where it comes from
From you: what you enter, scan, say or ask. From your device: Apple Health or Health Connect, only if you connect them, and only on the device, unless you choose to share some of it with a helper. From public U.S. government sources (the FDA, the National Library of Medicine, the NIH and the CDC): the official label and reference information used to explain a product. AuraMed buys no data about you and receives none from data brokers.
Who receives it
AuraMed shares consumer health data only with these service providers, which process it for us to run AuraMed:
- Anthropic (AI provider): your scans and look-ups with your Health Profile, cabinet safety checks, and questions to Aura with the context described in the Privacy Policy.
- OpenAI (speech to text): the recording of a spoken question and, in a voice conversation, up to twelve cabinet product names.
- ElevenLabs (text to speech, with OpenAI as a stand-in): the text of a spoken answer, never your recording.
- Upstash (our database, Frankfurt, EU): your encrypted account copy, if you sign in, web reminder records, and the notification records described above; and the health readings you choose to share with a helper, encrypted.
- Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging): the words of an app notification, on its way to your phone. They name a medicine only if you turned on medicine names on the lock screen.
- Vercel (hosting): every request passes through it, including the names you type into search, which are part of the request's web address.
- PostHog (usage analytics): the usage events described above, with a random device ID and your network address.
- Public U.S. government services (FDA, National Library of Medicine, NIH, CDC): product names, ingredient names, product codes (NDC or barcode, for recall checks) and search terms, sent from our server without your name, account or device address.
AuraMed never sells consumer health data and does not use it for advertising. It is not given to anyone else unless the law requires it.
Caregivers and shared access
Caregiver mode is optional and only for adults: you and each person who helps you must be 18 or older. It needs your permission for health data on the app's consent screen, and then a separate choice for each helper, made when you create a code: you choose what it shares and what the helper may do, and you tick that you agree to share these with the person who enters the code. The code works once, for 10 minutes; whoever enters it is connected at once, and you are told who connected, with a one-tap Remove. A helper cannot ask for access on their own.
- What is collected: your link to each helper (both usernames, the role and the categories you chose); a record of each consent (the date and time, the categories, the version of the words, and that you said you are 18 or older); a list of who viewed or changed what and when, never the information itself; the summary your device sends for your helpers, holding only the categories at least one helper may see; doses a helper recorded for you; and notices waiting for a helper; and, where AuraMed has switched them on for an account, refill counts, appointments and handover notes a helper records. Why: so the helpers you chose see only what you allowed, and so your choices can be shown.
- Who receives it: the helpers you choose, each only the categories you allowed; Upstash, which stores it (the summary, recorded doses and notices encrypted with AES-256-GCM); for health data you share with a helper, the helper you chose, and Upstash, which stores it encrypted; and Apple, Google or browser push services, which deliver a helper's notices without a medicine or condition name. When a helper checks medicines together or reads a label's Geriatric Use section, only the medicine names go to the public U.S. sources listed above. A helper's view of what you share sends nothing to an AI provider, and Aura is not part of caregiver mode. A dose a helper records for you becomes part of your own dose record, which reaches Anthropic only with your own questions to Aura, and only with your permission for the AI provider. Your questions to Aura are never shared with a helper.
- Stop and delete: stop sharing with a helper in one tap; their access ends at once and what was kept for them is deleted from our server at once. If you withdraw your permission for health data, your device sends your helpers nothing more and the summary they could see is deleted. Deleting your account deletes all of your caregiver information and every link, in both directions.
- Appointments and refills: a helper sees your appointments or refill dates only if you tick that category for that helper. A caregiver's appointments and refills for a person they care for stay with that person's record and are deleted with it.
If someone added you to AuraMed
A caregiver who has your permission, or is legally allowed to manage your medicines, can keep your medicines and reminders in AuraMed without you using the app. Both of you must be 18 or older.
- What is collected: your first name or nickname, your last name if they add it, your date of birth, how they are related to you, and the medicines, reminders, dose record and Health Profile items they enter for you; and our record that they confirmed their permission or authority (the time, the version of the words and the relationship). An ID scan reads only the name and the date of birth, on their phone; nothing else from it is kept or sent. Why: so the caregiver can keep your medicines and reminders and see the same safety information as for their own.
- Who receives it: the caregiver; Upstash, which stores an encrypted copy (AES-256-GCM) with their account; and Anthropic (Claude), which reads the label photos and checks the medicines they scan or enter for you, only with the caregiver's separate permission. Never sold, never used for advertising.
- See or delete it: you, or your authorised agent, can ask by email to mail@getauramed.com; tell us the caregiver's email address or username if you know it. We answer within 45 days. The caregiver can remove you at any time: deleted from their phone at once and from our server with their next sync; backups within 30 days.
Your rights, and how to use them
- Confirm and access: ask whether we hold your consumer health data, get a copy, and get the list of the companies that received it.
- Delete: delete your account and its copy in the app (Settings → Delete my account and data), and what is on your device (Settings → Delete all health data); or ask us to delete it. When you delete your account, RevenueCat's record of your purchases is deleted with it. If you ask us, we also ask Postmark to delete the emails it sent you, and PostHog to delete the usage events linked to your device ID, if you can give it to us. Anthropic, OpenAI, ElevenLabs and Vercel give us no way to find or delete one person's requests, so we cannot ask them to.
- Withdraw consent: turn off usage analytics, Aura's memory, reminders, app notifications, Apple Health or Health Connect, or your account at any time, or ask us to stop a use.
- Stop sharing your health data with a helper at any time in Settings → Caregiver mode → Care circle → your helper, by unticking “Share your Apple Health” (or Samsung Health). Their copy is deleted at once.
- Appeal if we decline a request.
Email mail@getauramed.com with the subject “Health data request”. We verify a request by answering at the email address of your account. We answer within 45 days; if we need more time where the law allows it, we tell you why within those 45 days (at most 45 more days). To appeal a decision, reply with the word “Appeal”; we answer within 45 days. If your appeal is declined, you can contact your state's Attorney General, for example the Washington State Attorney General at atg.wa.gov. Requests are free, and using a right never changes the service you get.
Changes
When this policy changes, we update the date at the top of this page. We will ask for your consent before collecting or sharing consumer health data in a new way where the law requires it.