AuraMed: last updated October 2026
AuraMed is an educational tool. It identifies medications and supplements from photos and provides general educational information grounded in public U.S. FDA drug-label data and the NIH Dietary Supplement Label Database. AuraMed is not a medical device, does not provide medical advice, diagnosis, or treatment, and never replaces the judgment of your doctor or pharmacist. Product identification from photos may be imperfect. Always verify against the physical label. Never start, stop, or change a prescription based on this app.
Photos are sent securely to our AI provider (Anthropic) to be analyzed, and the relevant product databases are queried to ground the answer. Photos are processed to generate your result and are not used to build advertising profiles and are not sold to anyone.
Asking Aura by voice is optional and off unless you tap the microphone or start a voice conversation. AuraMed never listens on its own: there is no wake word, and nothing is recorded before you tap or after a session ends.
Two providers are involved in a spoken answer, and they receive different things.
OpenAI turns your speech into text. The recording of that one turn is sent to OpenAI and comes back as a transcript. In a voice conversation your phone connects to OpenAI directly for this, so OpenAI receives your device's network address, as any website you visit does. In a voice conversation, the names of the products in your cabinet are sent with it — up to twelve, names only — so that spoken medicine names are recognised correctly rather than guessed at. Nothing else from your Health Profile is sent, and dictating a single question sends no names at all.
ElevenLabs turns the answer into speech. What it receives is text: a short spoken version of the answer already on your screen, checked against that answer before it is sent. ElevenLabs never receives your recording. If ElevenLabs can't speak that text, OpenAI speaks the same text in a paired voice instead, and the app labels it “Stand-in voice”. If neither can speak it, your phone's own voice may read it aloud instead.
No audio is stored — by AuraMed or in your device's storage — and no transcript is written to any log. The words you said exist in the app while your question is being answered, and go away with it. Voice adds nothing to what AuraMed records about you: the only things it reports are that a voice turn started, stopped, failed (as an error code) or played, with no content of any kind attached.
Français. Parler à Aura est facultatif. AuraMed n'écoute jamais de lui-même. L'enregistrement de votre question est envoyé à OpenAI pour être transcrit ; lors d'une conversation vocale, les noms des produits de votre armoire l'accompagnent (douze au maximum, les noms seuls) afin qu'ils soient reconnus correctement. La réponse parlée est synthétisée par ElevenLabs à partir du texte déjà affiché à l'écran ; ElevenLabs ne reçoit jamais votre enregistrement. Si ElevenLabs ne peut pas lire ce texte, OpenAI lit le même texte avec une voix associée, et l'application l'indique par « Voix de remplacement ». Si aucun des deux ne peut le lire, la voix de votre téléphone peut le lire à voix haute à la place. Aucun audio n'est conservé et aucune transcription n'est journalisée.
Español. Hablar con Aura es opcional. AuraMed nunca escucha por su cuenta. La grabación de tu pregunta se envía a OpenAI para transcribirla; en una conversación por voz se envían con ella los nombres de los productos de tu botiquín (doce como máximo, solo los nombres) para que se reconozcan correctamente. La respuesta hablada la sintetiza ElevenLabs a partir del texto que ya aparece en tu pantalla; ElevenLabs nunca recibe tu grabación. Si ElevenLabs no puede leer ese texto, OpenAI lee el mismo texto con una voz asociada, y la aplicación lo indica con «Voz sustituta». Si ninguno de los dos puede leerlo, la voz de tu teléfono puede leerlo en voz alta en su lugar. No se guarda ningún audio y ninguna transcripción queda registrada.
Português. Falar com a Aura é opcional. O AuraMed nunca ouve por conta própria. A gravação da sua pergunta é enviada à OpenAI para ser transcrita; numa conversa por voz, os nomes dos produtos do seu armário seguem junto (no máximo doze, apenas os nomes) para que sejam reconhecidos corretamente. A resposta falada é sintetizada pela ElevenLabs a partir do texto já apresentado na sua tela; a ElevenLabs nunca recebe a sua gravação. Se a ElevenLabs não conseguir ler esse texto, a OpenAI lê o mesmo texto com uma voz pareada, e o aplicativo indica isso com “Voz substituta”. Se nenhuma das duas conseguir ler, a voz do seu próprio celular pode ler em voz alta no lugar. Nenhum áudio é guardado e nenhuma transcrição é registrada.
Your cabinet, Health Profile, dose record and scan history are saved on your device. Every message you send Aura includes up to 40 cabinet items, automatically, so it can answer about what you take. Whenever your cabinet or Health Profile changes, AuraMed also checks your cabinet for safety warnings on its own: the items in it and your Health Profile are sent to AuraMed and Anthropic, and product names to the FDA's label service, for that check. AuraMed's server keeps none of it; the latest result is kept on your device. If you sign in to an AuraMed account, a copy is also kept with your account on our server; see Your account below. If you turn on reminders on the web, each reminder's item name and times are also stored on our server so it can be sent; see Reminders below. Clearing your browser data removes what is on your device, not the copy kept with your account.
When you scan or look up a product, the names and active ingredients of up to ten medicines in your cabinet are sent with that one request, only to check them against that product for interactions: to AuraMed, and as ingredient names to the U.S. National Library of Medicine's RxNorm service and the FDA's label service. They are not sent to Anthropic, and AuraMed's server does not store or log them. The cabinet safety check described above also looks ingredient names up in RxNorm.
Signing in is optional. AuraMed works without an account, exactly as before. An account lets your cabinet, Health Profile, dose record and scan history come back on another device, or on this one if you reinstall.
How you sign in. You sign in with your username (or your email address) and your password, or you ask for a 6-digit code instead. The code always goes to your email address, and one is sent once when you create your account, to confirm the address is yours. The code is sent by Postmark, our email provider. We store only a one-way scramble (a hash) of the code, it expires after 10 minutes, and it stops working after five wrong attempts.
Your password. If you set a password, we store only a one-way Argon2id hash of it; we cannot see or recover your password. When you choose one, we check it against Have I Been Pwned's list of passwords exposed in data breaches by sending only the first five characters of its SHA-1 hash, never the password itself.
Passkeys (optional). You can add a passkey, so that you sign in with Face ID, Touch ID, a fingerprint or your device's screen lock instead of a password. Your device checks your face or fingerprint; AuraMed never receives it, only a signed answer that works on getauramed.com and nowhere else. For each passkey we keep its public key, when it was added and last used, and the kind of device it was added on (for example “iPhone”). You can remove a passkey in Settings, and it stops working at once. Your password and the email code keep working either way.
Sign in with Apple or Google (optional). If you choose one of these, Apple or Google tells us your email address and that they have verified it, and we use it to sign you in to the account with that address, or to create one. If you use Apple's Hide My Email, we receive only the relay address Apple gives us. We never receive your Apple or Google password, and we keep only the time you first used each one, not the identifier Apple or Google gives you. Apple and Google handle that sign-in under their own privacy policies. AuraMed loads no Apple or Google code on its pages to do this, and they learn only that you are signing in to AuraMed.
What your account keeps. A copy of your cabinet, Health Profile, dose record and scan history (up to 50 recent scans, the result text only, never the photo), whether reminders are on, and your Text size and Opening sound settings. With it we keep when the account was created, when you last signed in, and whether you have AuraMed Pro. The account does not keep what Aura remembers, your first name, your Apple Health or Health Connect data, or scan photos.
Where it is kept. On our server, in a database run for us by Upstash, Inc., located in Frankfurt, Germany (European Union). Requests to and from your device travel encrypted (HTTPS).
How it is protected. Your copy is encrypted at rest with AES-256-GCM before it is written to the database, under a key AuraMed holds separately from the database. Someone who obtained the database alone would see only the encrypted copy. This is not end-to-end encryption: AuraMed's own servers hold the key, because they decrypt your copy to send it back to your devices.
Your email address. If you choose a username, your email address is stored with it, encrypted with AES-256-GCM, so we can send your sign-in code when you sign in with the username, and sign you in with a passkey. If you don't choose one, the database does not hold your address — only a one-way hash of it. A hash is not anonymous: someone who already knows your address can compute the same hash. Your address is used in two places: it is sent to Postmark to deliver your code, and it is kept in the sign-in cookie on your own device. It is never sent to Apple, Google or RevenueCat. If you use Sign in with Apple or Google, they send it to us.
Keeping and deleting it. Your account and its copy are kept until you delete them. To delete them, open Settings → Delete my account and data and type DELETE. This removes the account and the copy from our server at once, and other devices signed in to it can no longer update it. To stop an old device from re-uploading, we keep only the time of the deletion, under the same hash, for 8 days; then it is removed automatically. If you chose a username, deleting your account (or changing your username) releases it, and a released username is held for 30 days before anyone can take it; for those 30 days we keep only the time it was released, not your address. Signing out only signs this device out; the copy stays with your account until you delete it. Information on your device stays until you delete it there (Settings → Delete all health data). If you delete it there while signed in, it is removed from your account too.
Aura keeps a short memory of your own words — a concern or a question you raised — so a conversation can be picked up rather than started over. It is stored on your device, it holds what you said and never what Aura replied, and it is capped at fifty short entries. You can read it, delete any entry, or switch memory off in Settings; switching it off erases the log rather than pausing it.
Recent entries travel with your question when you ask Aura something, in the same request as your cabinet and Health Profile, so the answer can take them into account. That means they are processed by Anthropic along with the rest of the question. Neither the question nor those entries is stored on our servers, and what Aura remembers is never part of your account.
Connecting Apple Health is optional and off by default. If you connect it, AuraMed asks for read-only access to the specific categories you choose — steps, sleep, and resting heart rate. You pick each category individually, and you can decline any of them.
Apple Health data never leaves your device. It exists only in the app's memory while the app is running, is used to draw what you see on screen, and is re-read from Apple Health each time you open your health context. Closing the app discards it. It is never written to your device's storage, never transmitted to our servers, never sent to our AI provider, never used for advertising, and never sold or shared with anyone.
AuraMed cannot edit or delete your Apple Health records. The integration is read-only by construction: the app does not request write access and contains no code that could write, update, or delete a Health record. You can review or withdraw AuraMed's access at any time in the Apple Health app, under Sharing → Apps.
On Android, AuraMed reads the same three categories — steps, sleep, and resting heart rate — from Health Connect, the place on Android where health and fitness apps share data, including apps such as Samsung Health when you have set them to share with it. Connecting is optional and off by default. Android asks you to allow each category separately; you can refuse any of them, and you can change or withdraw access at any time in Health Connect.
Health Connect data never leaves your device either. It exists only in the app's memory while you are looking at it, is re-read from Health Connect each time you open your health context, and is discarded when the app closes. It is never written to your device's storage, never transmitted to our servers, never sent to our AI provider, never used for advertising, never used to decide credit, insurance, lending or employment, never added to your Health Profile, and never sold or shared with anyone. Because nothing is kept, there is nothing to retain or delete.
AuraMed cannot write to, edit, or delete your Health Connect records: it requests read access only, holds no permission to write, and contains no code that writes. Where Android makes it available, AuraMed shows which app recorded a reading — for example, “Samsung Health via Health Connect” — rather than presenting the number without its source.
Reminders are optional and off by default. If you turn them on, your device is registered for notifications and (so we can send a reminder at the right time) the reminder times, the item names you chose to be reminded about, and your time zone are stored securely on our server. We do not store your dose, your health conditions, or the rest of your cabinet, and this data is never sold. Turning reminders off removes it.
Your email address is used to sign you in (the code is delivered by Postmark) and to respond to support requests. It is not stored in our database as written; see Your account above. AuraMed Pro is paid for through Apple (App Store) or Google (Google Play); we never see or store your card details, and billing, cancellation and refunds are handled by Apple or Google under their terms. RevenueCat, our subscription service, receives your account's hashed identifier (never your email address), the store's record of your purchase, and basic information about the app and device making it, so that AuraMed Pro follows your account to every device you sign in on. Our server keeps only when your Pro ends and which store it came from.
AuraMed Pro is an auto-renewing subscription sold through the App Store and Google Play. You can cancel anytime in your Apple or Google account settings, at least 24 hours before renewal; access continues until the end of the paid period. Deleting your AuraMed account does not cancel a store subscription. Scanning and looking up products are free and may be limited or changed.
If you buy an AuraMed Pro pass on the website. Your card, and the billing name, address and email you enter with it, go into Cybersource's payment fields and are processed by Cybersource (Visa) for AURAMED S.A.R.L; AuraMed never receives your card number or that billing address. From Cybersource we receive a payment reference, the amount, and whether the payment succeeded, was declined, or was refunded. We keep a record of each payment (the pass, the amount, the date and the reference, linked to your account's identifier, not to your email address) for as long as accounting law requires, also after you delete your account. To send your receipt and the reminders before your pass ends, we keep your email address encrypted, and we delete it when you delete your account.
| Data | Purpose | Processor | Stored where | Kept until |
|---|---|---|---|---|
| Cabinet, scan history, Health Profile, dose record | App features; if you sign in, bringing them back on your other devices | None on your device; Upstash for the account copy | Your device; if you sign in, also an encrypted copy with your account (Upstash, Frankfurt, EU) | You delete it / clear app data; the account copy until you delete your account |
| Account record: hashed email, created, last sign-in, plan | Sign you in; keep your plan | Upstash | Our server (Upstash, Frankfurt, EU) | You delete your account |
| Passkeys (if you add one): public key, when added and last used, device kind | Sign you in without a password | Upstash | Our server (Upstash, Frankfurt, EU) | You remove it, or delete your account |
| Sign in with Apple or Google (if you use it): your verified email address | Sign you in to the account with that address | Apple or Google (sign-in only) | Our server keeps only the time you first used each; the address is used as for any sign-in | You delete your account |
| Email address at sign-in | Deliver the sign-in code | Postmark (email delivery) | Not in our database; Postmark keeps sent messages per its terms | Per Postmark's terms |
| Apple Health data (steps, sleep, resting heart rate) | Show your health context in the app | None | Your device only — in memory, never saved | Not stored; discarded when the app closes |
| Health Connect data on Android (steps, sleep, resting heart rate) | Show your health context in the app | None | Your device only — in memory, never saved | Not stored; discarded when the app closes |
| Scan images & the profile fields you attach | Generate your result | Anthropic (AI provider) | Processed to produce the result | Per provider terms: see Anthropic's policy |
| Voice recording of one spoken turn (optional) | Turn your speech into text | OpenAI (transcription) | Not stored — held only while the turn is answered | Not stored; per provider terms while processing |
| Product names from your cabinet, during a voice conversation | Recognise spoken medicine names correctly | OpenAI (transcription) | Not stored | Not stored; per provider terms while processing |
| Ingredient names only; no personal data | To match medicine names | U.S. National Library of Medicine (RxNorm) | Not stored | Not stored |
| The spoken line — text, never your recording | Speak the answer aloud | ElevenLabs (speech); OpenAI if unavailable | Not stored | Not stored; per provider terms while processing |
| What Aura remembers (your own words) | Continue a conversation | None to store it; Anthropic sees recent entries with your question | Your device only | You delete it / switch memory off |
| Reminder times, item names, time zone (optional) | Deliver notifications | AuraMed server | Our server | You turn reminders off / request deletion |
| AuraMed Pro purchase (subscribers) | Take payment; keep your Pro on every device you sign in on | Apple or Google (payment); RevenueCat (subscription status, hashed account identifier only) | Apple or Google; RevenueCat; our server keeps only the end date and store | Per Apple's, Google's and RevenueCat's terms; our copy until you delete your account |
| AuraMed Pro pass bought on the website: card and billing details | Take the payment | Cybersource (Visa) | Cybersource only; not stored by AuraMed | Per Cybersource's terms |
| AuraMed Pro pass: payment record (pass, amount, date, reference; account identifier, not your email address) | Give Pro to your account; accounting | Upstash | Our server (Upstash, Frankfurt, EU) | As long as accounting law requires, also after you delete your account |
| AuraMed Pro pass: your email address, encrypted | Send the receipt and the reminders before the pass ends | Upstash; Postmark (email delivery) | Our server (Upstash, Frankfurt, EU), encrypted | You delete your account |
We do not run advertising trackers, and health information is never sold. We collect anonymous product-usage events (for example, that a scan was started, with no medication, dose, condition or other identifying information included) to understand and improve AuraMed. You can turn these off at any time in the app: Settings → Privacy & support → Usage analytics. AuraMed also honours your browser's Do Not Track and Global Privacy Control signals. Your rights and deletion steps: Data deletion.
To the maximum extent permitted by law, AuraMed and its creator accept no liability for decisions made based on the app's educational content. The service is provided "as is" without warranties of any kind.
Questions, requests, or data concerns: mail@getauramed.com