Privacy Policy

AuraWallet (“AuraWallet”, “we”, “our”) is a personal finance application operated by FomeThings. We help individuals track their accounts, transactions, categories, and investments across multiple currencies. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

We collect only the information needed to provide the service:

• Account information. Email, name, preferred language, country, and primary currency, provided when you sign up.
• Authentication data. If you choose Sign in with Apple or Google, we receive the email and name granted by the provider. We do not receive your password.
• Financial data you enter. Wallets, transactions, categories, recurring payments, and investment holdings you create. This data lives in your account and is never shared with other users or sold to third parties.
• Subscription state. Whether your account is on the free or premium tier, including trial dates and renewal dates. Payment details (card, billing address) are handled directly by Apple or Google and are never sent to us.
• Device data. Push notification token, language, and timezone, used to deliver notifications and format dates.
• Diagnostics. Anonymous crash reports and error traces, used to fix bugs.

• To provide and operate the app’s features.
• To send you transactional notifications you opted into (recurring payments, market updates, dividend events).
• To process subscription purchases, renewals, and trial states.
• To respond to your support requests.
• To diagnose crashes and improve reliability through anonymous error logs.

We do not sell your data. We do not share your financial data with advertisers, data brokers, or third parties for marketing purposes.

We rely on a small set of trusted providers to operate AuraWallet. Each one processes only the data needed for its function: Supabase (authentication and database), RevenueCat (subscription management), OneSignal (push notifications), Sentry (anonymous crash reporting), Resend (transactional email), and optional sign-in via Apple and Google. Market data is sourced from Financial Modeling Prep, CoinGecko, and CryptoCompare using public asset symbols only — no personal or financial data is shared with these market data providers.

We keep your data while your account is active. You may delete your account at any time from Settings → Account → Delete account inside the app. Account deletion permanently removes your profile, wallets, transactions, categories, recurring payments, investment holdings, and subscription record from our active database. Backups are retained for up to 30 days for disaster-recovery purposes and are then purged.

Depending on your jurisdiction, you may have rights to access, export, correct, or delete the personal data we hold about you. The in-app account deletion path satisfies the right to erasure. Contact us using the address below for any other request.

AuraWallet is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

Data is encrypted in transit (TLS) and at rest. Access to your account is protected by your authentication credentials and row-level security on the database. While no system is perfectly secure, we apply industry-standard practices to protect your information.

Our service providers may process your data in regions outside your country of residence. By using AuraWallet, you consent to this cross-border processing under the safeguards each provider has committed to.

We may update this Privacy Policy as the app evolves. Material changes will be communicated in-app or by email before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Questions or requests: support@aurawallet.app.