This policy describes the consumer health data AuraMed handles: information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. It applies to everyone, and it is written in the form the laws of Washington, Nevada and Connecticut ask for. Our full Privacy Policy gives the details, including how long each item is kept.
AURAMED S.A.R.L, a company registered in Lebanon (Main Road, Ras El Metn, Khaled Makarem Building, Ground Floor, Baabda, Mount Lebanon, Lebanon), is responsible for this data. Contact: mail@getauramed.com. AuraMed has no affiliates that receive it.
The health data we collect, and why
- Your cabinet: the medicines and supplements you add, their strength, how often you take them, the times you set and the dates of a course. Why: to show and explain them, check them for safety warnings, answer Aura's questions about them and send reminders.
- Your Health Profile: sex, age as you enter it, conditions (including smoking and regular alcohol use, if you enter them), allergies, pregnancy, breastfeeding or trying to conceive, weight, and an optional profile name. Why: to fit scan results, look-ups, safety warnings and Aura's answers to you.
- Your dose record: which items you marked taken, taken late or missed, and when. Why: to show your dose history, and so Aura can answer about today.
- Scans and look-ups: the photo you scan, a note you add, the product name you look up and the result. Why: to identify the product and explain its official label. The photo is not stored.
- Questions to Aura, typed or spoken, and Aura's memory of your own words, if it is on. Why: to answer, and to pick a conversation up where it was left. A voice recording is used once to write your question and is not stored.
- Names you type into the medicine or allergy search. Why: to suggest matching names.
- Reminders on the web: the item names and times, your time zone, course dates and your browser's notification address. Why: to send each reminder on time.
- Usage events that show you use a medicine app, such as that a scan was completed or a first cabinet item or reminder was added, with a random device ID. They carry no medicine name, condition or question. Why: to understand and improve AuraMed. You can switch them off.
- Apple Health and Health Connect (steps, sleep, resting heart rate), if you connect them. They are read on your device only, shown to you, and never sent to AuraMed or anyone else.
Your cabinet, Health Profile, dose record and scan history are kept on your device. If you sign in, an encrypted copy is also kept with your account on our server so they come back on your other devices. AuraMed does not collect your precise location and does not use geofencing.
Where it comes from
From you: what you enter, scan, say or ask. From your device: Apple Health or Health Connect, only if you connect them, and only on the device. From public U.S. government sources (the FDA, the National Library of Medicine, the NIH and the CDC): the official label and reference information used to explain a product. AuraMed buys no data about you and receives none from data brokers.
Who receives it
AuraMed shares consumer health data only with these service providers, which process it for us to run AuraMed:
- Anthropic (AI provider): your scans and look-ups with your Health Profile, cabinet safety checks, and questions to Aura with the context described in the Privacy Policy.
- OpenAI (speech to text): the recording of a spoken question and, in a voice conversation, up to twelve cabinet product names.
- ElevenLabs (text to speech, with OpenAI as a stand-in): the text of a spoken answer, never your recording.
- Upstash (our database, Frankfurt, EU): your encrypted account copy, if you sign in, and web reminder records.
- Vercel (hosting): every request passes through it, including the names you type into search, which are part of the request's web address.
- PostHog (usage analytics): the usage events described above, with a random device ID and your network address.
- Public U.S. government services (FDA, National Library of Medicine, NIH, CDC): product names, ingredient names and search terms, sent from our server without your name, account or device address.
AuraMed never sells consumer health data and does not use it for advertising. It is not given to anyone else unless the law requires it.
Your rights, and how to use them
- Confirm and access: ask whether we hold your consumer health data, get a copy, and get the list of the companies that received it.
- Delete: delete your account and its copy in the app (Settings → Delete my account and data), and what is on your device (Settings → Delete all health data); or ask us to delete it. When you delete your account, RevenueCat's record of your purchases is deleted with it. If you ask us, we also ask Postmark to delete the emails it sent you, and PostHog to delete the usage events linked to your device ID, if you can give it to us. Anthropic, OpenAI, ElevenLabs and Vercel give us no way to find or delete one person's requests, so we cannot ask them to.
- Withdraw consent: turn off usage analytics, Aura's memory, reminders, Apple Health or Health Connect, or your account at any time, or ask us to stop a use.
- Appeal if we decline a request.
Email mail@getauramed.com with the subject “Health data request”. We verify a request by answering at the email address of your account. We answer within 45 days; if we need more time where the law allows it, we tell you why within those 45 days (at most 45 more days). To appeal a decision, reply with the word “Appeal”; we answer within 45 days. If your appeal is declined, you can contact your state's Attorney General, for example the Washington State Attorney General at atg.wa.gov. Requests are free, and using a right never changes the service you get.
Changes
When this policy changes, we update the date at the top of this page. We will ask for your consent before collecting or sharing consumer health data in a new way where the law requires it.