Privacy Policy

Aura is a personal health companion that helps you understand, organize and remember your health information. Aura is operated by Aura Health and Wellness Private Limited (“Aura”, “we”, “us”, “our”), a company incorporated in India with its registered office in Bengaluru, Karnataka, India.

This Privacy Policy explains how we handle your information when you use the Aura mobile application, our website at aurahealth.life, and related services (together, the “Service”). It applies across the website, the mobile application and those related services.

Your health information is among the most personal information you have. We are committed to handling it with care — through consent, security, transparency and your control. Your health belongs to you, and Aura is a companion, not a replacement for your doctor.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

We aim to keep our approach to your privacy simple. We will:

• Collect only what we need to provide the Service.
• Use information for clearly stated purposes, described in this policy.
• Ask for your permission where your consent is required.
• Give you control over your information.
• Protect your information using appropriate security measures.

We do not sell your personal health information. We will not use your personal health or medical information for sales, marketing, advertising or research without the consent or other lawful basis required under applicable law.

We collect the following categories of information, depending on how you use Aura:

• Information you provide — such as your name, email address, phone number, profile details and account settings.
• Health and medical information — the health information you add or upload (see Section 4).
• Information from documents you upload — details extracted from prescriptions, reports and other documents (see Section 5).
• Technical and device information — collected automatically as you use the Service (see Section 6).
• Information from permissions and integrations — available through permissions you grant, or connected services you choose to link where offered (see Section 7).

We only collect a category of information when it is relevant to a feature you use.

When you choose to use Aura’s health features, we may handle health-related information such as:

• Prescriptions
• Medical and laboratory reports
• Diagnoses and medical history
• Medicines, dosages and schedules
• Symptoms and health-related notes
• Health measurements you record
• Other health information you voluntarily provide

You decide what health information to add to Aura. You can choose not to provide certain information, though some features may not work without it.

When you upload documents — such as prescriptions, PDFs, images or medical reports — Aura may process them to extract, organize and explain the information they contain. This may include using automated technologies, including artificial intelligence, to read the document, identify details (such as medicines, dosages and instructions) and present them in simpler language.

Automated processing can make mistakes. Aura shows the information it reads so you can review it, and it does not guarantee the accuracy or completeness of extracted information. Please check important details against the original document and your doctor’s guidance.

When you use the Service, we may automatically collect technical information such as:

• Device information (for example, device model, operating system and app version)
• IP address and general connection information
• Log, diagnostic and crash information
• Security and authentication information
• Usage information about how you interact with the Service

We use this information to operate, secure, maintain and improve the Service.

Aura may ask for permissions on your device to enable specific features, such as:

• Camera — to capture a prescription or document
• Photos and files — to upload documents you select
• Notifications — to send medicine and health reminders
• Microphone — where a feature uses voice input

You can grant or decline these permissions and change them at any time in your device settings. If you decline a permission, the related feature may not work.

Health integrations (future / conditional). Aura may, in the future, offer the ability to connect health services or devices — such as Apple Health / HealthKit, Google Health Connect, or wearables. Any such integration would be optional, and would only operate if and when we make it available and you explicitly choose to connect it. We do not access these services unless you enable such a connection.

We use your information to:

• Provide and operate the Service
• Create and manage your health records
• Process documents you upload
• Explain health information in simpler language
• Send reminders you have set up
• Personalize your experience within the Service
• Maintain security and prevent fraud and abuse
• Maintain, troubleshoot and improve the Service, where permitted by law

We do not use your information for undisclosed purposes.

Aura uses automated technologies, including artificial intelligence, to help you understand and navigate your health. For example, AI may be used to:

• Interpret and structure information from documents
• Summarize information
• Explain medical terminology in plain language
• Generate reminders
• Provide contextual information to help you navigate your health

Aura’s AI is a companion, not a replacement for your doctor. It does not diagnose, prescribe or make medical decisions. Diagnosis, treatment and medical decisions remain with qualified healthcare professionals.

Aura does not sell your personal health information.

We will not use your personal health or medical information for targeted advertising, sales profiling or third-party marketing without the consent or other lawful basis required under applicable law.

We will not use your health information for research without the consent or other lawful basis required under applicable law. If we introduce research-related features in the future, we will explain them and seek any consent required before using your information for those purposes.

We do not freely share your health information. We may share information only in these limited situations:

• With your authorization — when you choose to share selected health information, for example with doctors, other healthcare professionals, hospitals, laboratories, pharmacies, caregivers, or other people you explicitly authorize.
• With service providers — trusted providers who help us operate the Service, under appropriate obligations (see Section 13).
• For legal and safety reasons — where required to comply with applicable law, legal process or valid governmental requests, or to protect the rights, safety and security of users, the public or Aura.
• In a business transaction — such as a merger, acquisition or reorganization, subject to this Privacy Policy and applicable law.

We use third-party service providers to provide necessary infrastructure and support, which may include:

• Cloud hosting and storage
• Security and authentication
• Notifications
• AI and document processing
• Customer support
• Other technical infrastructure

These providers may process information only as needed to perform services for us, and are expected to protect it appropriately.

We use appropriate technical and organizational measures designed to protect your information, which may include:

• Encryption of information in transit
• Encryption of information at rest
• Access controls and role-based access
• Audit logging
• Data minimization
• Security monitoring

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We work to protect your information and to continually improve our safeguards.

We retain your information only for as long as reasonably necessary to:

• Provide the Service to you
• Comply with our legal obligations
• Maintain security and prevent fraud
• Resolve disputes and enforce our agreements

When information is no longer needed for these purposes, we take steps to delete or de-identify it in accordance with applicable law.

Depending on applicable law, you may have rights over your information, including the right to:

• Access the information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your information
• Withdraw consent you have given
• Manage and control what you share
• Raise a grievance or complaint

We will respond to requests in accordance with applicable law.

To make a request relating to access, correction, deletion, consent withdrawal or any privacy concern, contact us at legal@aurahealth.life. We may need to verify your identity before acting on your request.

Where we rely on your consent to process your information, you can withdraw it at any time — for example, by changing permissions in your device settings or by contacting us at legal@aurahealth.life.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Some features may stop working if the permissions or consents they rely on are withdrawn.

You may request deletion of your account and associated information by contacting us at legal@aurahealth.life. We will process deletion requests in accordance with applicable law, subject to any information we are required or permitted to retain.

Aura is currently intended for users who are 18 years of age or older. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can take appropriate action.

Aura is operated from India, and we process information in connection with providing the Service. Where information is processed or stored by our service providers, it may be handled in the locations determined by that infrastructure. Where applicable law requires, we take appropriate steps in relation to such processing. We will update this Privacy Policy as our infrastructure and practices are finalized.

Our website may use cookies and similar technologies to enable core functionality, remember your preferences, keep the site secure, and understand and improve performance and usage. You can control cookies through your browser settings. Some features of the website may not function properly without certain cookies.

The Service may contain links to third-party websites or services that we do not operate. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you visit.

If we become aware of a security incident affecting your information, we will take appropriate steps to investigate, contain and remediate it, and to notify affected individuals and relevant authorities where required by applicable law.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date shown above. Where changes are material, we will provide appropriate notice as required by applicable law. Your continued use of the Service after changes take effect indicates your acceptance of the updated Privacy Policy.

If you have a grievance or complaint about how your information is handled, you may contact us at:

• Aura Health and Wellness Private Limited
• Email: legal@aurahealth.life
• Registered Office: Bengaluru, Karnataka, India

[Grievance Officer: to be designated as required under applicable law — details to be added.]

For any questions about this Privacy Policy or your information, please contact:

• Aura Health and Wellness Private Limited
• Email: legal@aurahealth.life
• Registered Office: Bengaluru, Karnataka, India

This Privacy Policy is governed by applicable Indian laws relating to privacy, data protection, technology and consumer protection, including the Digital Personal Data Protection Act, 2023 and the rules made under it (including the Digital Personal Data Protection Rules, 2025), as and when they come into force and to the extent applicable to Aura, along with other applicable Indian privacy, technology and consumer-protection laws.

We will update our practices and this Privacy Policy as these laws and rules take effect.