Privacy Policy

1. Who we are

aynura is operated by Sebale LLC, 1135 Terminal Way, Reno, NV 89905.

You can reach us at support@sebale.net for any privacy question, request, or complaint.

2. Information we collect

2.1 Account information

When you create an account we collect your email address and a password (stored only as a secure hash). If you choose to set one, we also store a display name and an avatar color you pick. We record the date you joined ("member since").

2.2 Information you add about people

The core of the app is what you choose to save:

• People: name, your relationship to them, avatar color, optional memorial information (for people you hold in loving memory).
• Occasions: birthdays, anniversaries, and other dates - including the year, where you provide it.
• Facts: notes such as interests, clothing sizes, style preferences, things to avoid, addresses, and free-form notes.
• Gift log: what you gave, which year, and optional notes.
• Interactions: which people you've recently celebrated, used to suggest reconnecting.

This information is stored on our servers so it syncs to every device you sign into. It is associated with your account and is not visible to other users unless you explicitly share it (Section 5).

2.3 Technical and usage information

• Device push tokens, so we can deliver reminder notifications to your devices.
• Your time zone, so reminders arrive at the hour you chose, wherever you are.
• Reminder settings (which lead-time notifications are on, delivery hour, snoozes).
• Delivery records: a minimal log of which reminders have already been sent to you, so you never receive the same reminder twice. This contains occasion types and dates - not the content of your notes.
• Weekly briefs: the app generates one private digest per week from your data and stores it (~3 months) so you can reread past issues.
• A local on-device cache of your data (so the app opens instantly) and your AI consent setting (Section 3).

2.4 What we do NOT collect

• No advertising identifiers, no advertising.
• No location tracking (time zone is a setting, not a GPS location).
• No analytics, crash reporting, or tracking SDKs.
• No access to your phone's contacts, photos, or microphone.

3. AI features - the important part

aynura offers four AI-assisted features:

1. Gift ideas - suggestions for what to give someone, based on what you've saved about them.
2. Message drafts - a first draft of a birthday or occasion message.
3. Conversation starters - gentle suggestions on a person's page for staying in touch.
4. Weekly brief insights - a warm preview, short insights, and suggested actions added to your weekly digest.

3.1 AI is opt-in, always

AI features are off by default. Nothing is sent to any AI service unless:

• you switch on "AI features" in your Profile, or
• you open an AI feature and deliberately tap the consent button on the panel shown first (e.g., "Find gift ideas", "Write my draft").

Declining ("Not now") simply closes the panel - the feature does nothing, and nothing is transmitted. Every AI feature works without AI: each has a built-in on-device alternative used whenever AI is off.

3.2 What we send when you use an AI feature

When you use an AI feature, we send your request - together with a minimized summary of the relevant saved information - to a third-party AI service so it can produce the result:

• What is sent: your relationship to the person (e.g., "your sister"), their approximate age or occasion year if saved, the facts and notes you've saved about them (interests, sizes, style, avoid-lists, addresses, notes), your recent gift log entries for them, and your request (e.g., a budget filter or draft request).
• What is never sent: your contacts' names are removed from AI prompts. Your account email, your display name, your contact details, your login credentials, and your friends' share activity are never sent to AI services.

3.3 Who processes AI requests

AI requests are sent to Google's Gemini model, routed through a secure server-side gateway operated by our infrastructure provider (so your app never talks to Google directly and no API keys live on your device). Google may process these prompts under its own terms for service provision. We do not use your content to train our models, and we have not opted in to having your prompts used to improve Google's models. For details on Google's handling, see Google's Gemini terms and privacy notice.

3.4 Purpose and limitation

The data sent to the AI service is used solely to generate the specific result you asked for (a gift idea, a draft, a starter suggestion, or brief insights). It is not used to profile you, not shared with advertisers, and not sold.

3.5 How to opt out

You can withdraw consent at any time:

• Profile → AI features → toggle off. Once off, no further AI requests are made. Because weekly-brief insights are generated once per week, a brief generated before you switched AI off remains as stored; future briefs will use the on-device alternative.
• You can also simply never turn AI on, or decline at the in-feature prompt - the app fully works without AI.
• Deleting your account (Section 7) removes your consent record along with everything else.

4. How we use your information

• To provide the app: sync your data across your devices, compute upcoming occasions, generate your weekly digest, and show suggestions.
• To send you the notifications you configured (Section 6).
• To let you share specific people with friends (Section 5).
• To provide AI features - only with your consent (Section 3).
• To operate and secure the service (rate limiting, abuse prevention).

We do not sell your personal information, and we do not use it for advertising.

5. Sharing people with friends

If you use the share feature, you choose one person and we send your friend only that person's name, your stated relationship, and their occasions - never facts, gift history, gift ideas, or memorial details. Your friend sees you as the sender (identified by your chosen display name and your share code, e.g. K7M2-9P). Sharing happens only when you actively type their code and confirm.

6. Notifications

If you enable them, reminder notifications are sent through Apple's or Google's push systems. Notification text contains only the person's name and the occasion type - never facts, addresses, or gift notes. Delivery records (Section 2.3) exist purely to prevent duplicate reminders. Turning off reminders, or deleting a device's registration, stops all pushes.

7. Your rights and choices

• Download your data. Profile → "Download my data" exports everything we hold about your account - profile, people, occasions, facts, gift log, weekly briefs, and settings - as a readable JSON file.
• Delete your account. Profile → "Delete account" (you'll be asked to confirm by typing DELETE). Deletion is immediate and permanent: we erase your profile, all people, occasions, facts, gift records, weekly briefs, reminder settings, share code, push registrations, delivery records, rate-limit records, and your login itself. There is no grace period and it cannot be undone, so download your data first if you want a copy.
• Turn AI off anytime (Section 3.5).
• Access and correction: everything in the app is editable or deletable by you directly.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA (e.g., objecting to processing, lodging a complaint with a regulator). Contact us at support@sebale.net and we'll help - but note that the in-app export and delete tools already cover most requests instantly.

8. Where data is stored and how it's protected

Your data is hosted on Supabase (cloud database and authentication). Data is transmitted over encrypted connections (TLS) and protected at rest by our provider. Access to your data is enforced by database-level security rules tied to your login - other users cannot read your data. Our server-side functions use restricted keys to perform only the operations the app requires (such as generating briefs or deleting your account at your request).

No service is perfectly secure; if a breach affecting your data ever occurs, we will notify you as required by law.

9. Data retention

• Your content is kept while your account exists.
• Weekly briefs are retained approximately 3 months.
• Delivery and rate-limit records are minimal and kept only as long as needed to prevent duplicates / abuse.
• Everything is erased immediately when you delete your account (Section 7). Device caches on a phone you later delete your account from are wiped on that device at sign-out/deletion.

10. Children

aynura is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has created an account, contact us at support@sebale.net and we will delete it.

11. Changes to this policy

If we change this policy, we'll update the date above and, for material changes, notify you in the app before the change takes effect.