Privacy Policy

Last updated: 27 October 2026 · Effective: 27 October 2026

Who we are

Auserene is a journaling and AI companion app for iOS. Auserene is operated by Himanshu Pathak, an individual developer based in India (“Auserene,” “we,” “us,” or “our”). This Privacy Policy explains what we collect, how we use it, who processes it on our behalf, and the choices and rights you have.

This app is intended for users 16 years of age or older. We do not knowingly collect information from anyone under 16.

If you have questions or want to exercise any privacy right, contact us at support@auserene.com. Our support page explains what to expect.

The short version

• Auserene is a private space to reflect. The journaling you do, your mood entries, and the conversations you have with the companion are the most personal things in the app, and we treat them that way.
• We encrypt your sensitive content at rest using per-user encryption keys.
• We do not use advertising or ad networks, we don’t track you across apps or websites, and we don’t collect advertising identifiers. We use one product-analytics tool that receives action events only(for example “a note was saved”), never what you wrote. It is off until you say yes, and you can change your mind in Settings.
• To generate, transcribe, and voice your sessions, we send the minimum necessary data to a small set of AI providers who are contractually prohibited from training on your content. Your raw journal entries reach only our language and embedding providers — never our voice or image providers.
• Your content is never sold and never used for advertising or marketing.
• You can delete your account and all of your data from inside the app, permanently, at any time.

The rest of this policy is the detail behind those statements.

What we collect

Information you give us directly

• Account information: depending on how you sign in, your email address and a password (handled by our authentication provider), your phone number (for phone sign-in, verified by a one-time code), or the identifier that Apple or Google returns to us when you use Sign in with Apple or Google Sign-In. A display name if you provide one.
• Date of birth: asked once during setup, because Auserene is only for people 16 and older. Kept with your profile and used for nothing else.
• Your agreement: the date and time you accepted the Terms of Service and this Privacy Policy and confirmed you are 16 or older.
• Onboarding responses:your stated preferences for pace, directness, how you’d like to be addressed, and your free-text answer to what’s on your mind. These shape how the companion is present with you.
• Your journaling and conversations: the text of your sessions, conversations with the companion, and any journal entries, moods, reflections, or notes you record.
• Voice recordings: if you record a voice note, the audio is sent to a speech-to-text provider and converted to text. The audio is transient: it is used only for transcription and is not stored by us or by the provider afterwards (see How long we keep your data). The resulting text is treated like any other note.
• Preferences and settings: session length, preferred time, pronouns, and similar in-app choices.
• Optional uploads: a profile avatar image, if you add one.
• Photos you add to notes, chats, and people: the app keeps a small copy on your phone for everyday use. So they come back on a new phone or after reinstalling, each photo is encrypted on your phone with your personal key before it is backed up to our storage. We store only that encrypted copy and cannot see the photo. Deleting the note, the chat, the person’s photo, the person, or your account deletes its backup; signing out removes the copies on that phone.
• Photos that stay on your phone: photos you choose as the background of a saved quote are kept only on your phone and never uploaded. Deleting the quote or signing out removes them.

Information created by the app as you use it

To make the companion feel like it remembers you, the app derives a private, evolving understanding of how to be present with you and the world as you’ve described it— for example, themes you return to, what tends to help you feel settled, and goals you’ve named. This is descriptive only. We do not create, store, or infer any medical, psychiatric, or clinical assessment, diagnosis, or condition label about you, anywhere. This derived understanding is visible to you inside the app, and you can edit, correct, or remove any part of it.

This memory, including the numeric representations (embeddings) the app uses to find related entries, is stored encrypted on our servers. It is sent to our language-model provider only while a reply is being written, under the same zero-data-retention terms described below.

Art of the day

When Auserene writes your journal entry, it also writes a short scene description for that day’s picture: a landscape, a still life, a sky, chosen to echo how the day felt. It is a symbol, not a record. It never contains names, people you mentioned, private places, dates, or any words to show in the picture, and we check every description for these before it is used. The description is stored encrypted with your other content. With Premium, it is turned into an image in the art style you pick; the image is stored with your account and deleted with it. You can choose a pattern drawn on your phone instead, or no art at all, in Settings → Art of the day.

Apple Health

If you turn it on in Settings → Apple Health, Auserene saves two things to Apple Health on your iPhone: the minutes of meditations and breathing sessions you finish (as Mindful Minutes), and the moods you log (as State of Mind — how pleasant it felt, plus any feelings and areas of life that match Apple’s list). Your note text is never saved there. Auserene does not read any data from Apple Health, and nothing it saves there is sent to us or to anyone else. You can turn it off in Settings, and remove the data or the permission in the Health app at any time.

Siri, Shortcuts and the share sheet

You can save a note or log a mood by asking Siri, from the Shortcuts app, or by sharing text or a link to Auserene from another app. Siri’s speech recognition is provided by Apple under Apple’s privacy terms. What you save waits on your iPhone, in storage only Auserene can open, until you next open the app; then it becomes a note like any other and is handled as described above.

Information collected automatically

• A user identifier assigned at account creation, used to associate your data with your account and, in the services below, to tell your account apart from others without using your name or email.
• Basic operational data such as usage counts and timestamps, your device timezone (so sessions and reminders land at the right local time), and aggregate token/cost counters we use to run and budget the service. These do not contain the content of your journals or conversations.
• Subscription status and purchase history reported by the App Store: which plan you are on, when it started, when it renews or ends, and whether you are in a trial. We never see your payment card or Apple ID password.
• Product-analytics events: the fact that an action happened (a note was saved, a session started, a meditation was completed), with a timestamp and the app version. Never the content of a note or conversation. Off unless you agree to it during setup or in Settings; see Your choices.
• Device attributes for paywall display: device model, OS version, app version, locale, and screen size, used by our subscription service to show the right paywall in the right language and currency.
• We do not collect advertising identifiers (IDFA) or precise location, we do notuse Apple’s App Tracking Transparency tracking, and we do nottrack you across other companies’ apps or websites.

How we use your information

• To provide the core experience: your sessions, the companion’s responses, generated reflections, transcribed voice notes, and voiced meditations.
• To maintain continuity — so the companion can be present in a way that reflects what you’ve shared over time.
• To manage your subscription and unlock the features you have paid for.
• To understand, in aggregate, which parts of the app are used and where people get stuck, so we can improve it.
• To operate, secure, debug, and budget the service.
• To communicate with you about your account or material changes to the service.

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use your content to train our own models, and our AI providers are contractually prohibited from training on it (see below).

Your sensitive personal content

Your mood entries, journal text, voice notes, and conversations with the companion can reveal things about your emotional and mental well-being. We treat all of it as sensitive personal content. That means, plainly:

• It is encrypted at rest with a key unique to you.
• It is used only to provide the app to you— to generate your sessions and to give the companion continuity.
• It is never used for advertising or marketing, never used to build profiles for anyone else, and never sold, rented, or shared with data brokers, advertisers, insurers, employers, or anyone else.
• It is never sent to our analytics or subscription providers. They see only that an action happened, not what you wrote or said.
• It reaches only the AI providers named below, only to the extent needed to generate a response, and under terms that prohibit training on it.

When you report a reply

Under each reply from the companion you can give a thumbs up or down. A rating and the reason you pick stay with your account, and we see them only as counts, never next to what you wrote.

With a thumbs down you can also choose to let our team read that conversation. This is the one exception to “no one reads your conversations”, and it happens only if you tick that box for that report. If you do, we keep the conversation up to the reply you reported, plus any note you add, encrypted with your key. A small team reads it only to understand what went wrong and to improve the companion’s replies. It is never used to train an AI model, and we delete it once we have reviewed it, or after 90 days at most. Deleting your account deletes it too.

AI providers: how your sessions are generated

Auserene uses third-party AI processors to generate, transcribe, and voice your sessions. We send each provider the minimum data it needs, and we choose providers for our most sensitive data based on their data-handling terms. All transmissions occur over encrypted connections; content is decrypted in our secure server environment only to build each request (and, to show it to you, on your own device — see How we protect your information).

• Language-model and embedding provider — Fireworks AI.It receives your journal entries and conversations to generate the companion’s responses, reflections, meditations, and the searchable memory that gives it continuity. It is contractually prohibited from training on your content, and processes it under zero-data-retention terms: it is used to generate the response and is not stored afterwards.
• Speech-to-text provider — Groq. When you record a voice note, the audio is sent to Groq for transcription and the text comes back. It processes it under zero-data-retention terms: the audio is not stored by Groq after the transcript is returned, and we do not store the audio either. It never receives your written journal or conversation history.
• Image provider — Together AI.For Premium Art of the day, it receives only the day’s scene description and the art style you chose (see Art of the day above), and returns the picture. It runs the image model from Black Forest Labs. It never receives your journal, notes, conversations, voice, or anything that identifies you. Because the description carries nothing personal, this provider is not used under zero-data-retention terms: Together AI and Black Forest Labs may keep the description and the image under their own policies. Our settings with Together AI do not allow it to be used for training.
• Text-to-speech providers — ElevenLabs and Inworld AI. These receive only the short, generated meditation script to turn into audio. They never receive your raw journal text or conversations.

A full, current list of our subprocessors, including what each one receives, is available at www.auserene.com/subprocessors.

Other third parties that receive data

Besides the AI providers above, these companies process some of your data to run the app. None of them receives your journal entries, voice notes, mood entries, or conversations.

• PostHog(product analytics). Receives action events — that a note was saved, a session started, a meditation was completed — tied to your internal user identifier, plus app version and device type. Never note or chat content. No advertising identifier and no cross-app tracking. Only if you opt in; you can switch it off any time in Settings → Share anonymous usage.
• PostHog also receives crash and error reports. When the app crashes or hits an error, it sends a technical report: the type of error and where in our code it happened, app version, device model and OS version, tied to your internal user identifier. Reports are stripped before they leave your phone: no notes, chats, voice, or screenshots, and no error messages, since a message can contain words you wrote. These are separate from usage analytics and on by default so we can fix crashes; switch them off any time in Settings → Send crash reports.
• Superwall (subscription and paywall service). Receives your internal user identifier, purchase and subscription events reported by the App Store (plan, start, renewal, expiry, trial), and device attributes used to display the paywall (device model, OS and app version, locale, screen size). Handles no notes or conversation content.
• Resend (email delivery). If you sign in with your email address, Resend sends you the one-time sign-in code. It receives your email address and that code, and nothing else.
• Apple(App Store, StoreKit, and Sign in with Apple). Processes your purchases and subscriptions under Apple’s own terms and, if you choose Sign in with Apple, your sign-in. Apple sends us your subscription status; we never receive your payment details.
• Google (Google Sign-In). If you choose Google Sign-In, Google authenticates you and returns a sign-in identifier and the email address on your Google account.
• Google Firebase(a Google service) provides our authentication (including email, phone, Apple, and Google sign-in), database, file storage, and server functions. Your data is stored on Google’s infrastructure.
• Google Cloud KMS holds the master key used to protect your per-user encryption key.

These providers process data on our behalf under their respective terms.

How we protect your information

• Encryption at rest.Your sensitive content — including your journals, mood entries, conversations, derived understanding, your own quoted words, and onboarding free-text — is encrypted at rest using a unique encryption key generated for each user. Each user’s key is itself protected by a master key held in a managed key service.
• Your key on your device.So the app can open your journal quickly and work offline, it decrypts your content on your phone. After you sign in, the genuine app receives a copy of your personal encryption key over an encrypted connection and keeps it in your device’s secure Keychain, usable only on that device. The copy is removed when you sign out, and from your other devices when you use Sign out of all other devices in Settings or delete your account. Our servers keep their own protected copy for the parts of Auserene that run there, such as writing your reflections.
• Encryption on your device.The copy of your data the app keeps on your phone (so it opens instantly and works offline) is encrypted with a key held in your device’s secure Keychain, which never leaves the device.
• Encryption in transit. Data moves between the app, our servers, and our providers over encrypted (TLS) connections.
• Only the genuine app, only verified accounts.Our servers accept requests only from the genuine Auserene app, checked with Apple’s App Attest (which confirms the request comes from an unmodified copy of the app on a real device, without identifying you), and only from accounts whose email, phone number, or Apple or Google sign-in has been verified.
• Important limit — this is not end-to-end encryption. To generate your sessions, our servers and our AI providers must process your content in unencrypted form in memory at the moment of generation. Encryption protects your data as stored; it does not hide your content from our servers or from the AI providers listed above during processing.
• No advertising, attribution, or session-replay SDKs. The only third-party analytics and diagnostics in the app are the event tracking and crash reports described above, both with PostHog. Neither receives your content, and you can turn off both.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

How long we keep your data

• Your account and content are kept for as long as your account is active. You can delete them at any time (see below).
• Unverified sign-ups— an email account whose address was never verified — are deleted automatically, with anything attached to them, 48 hours after they were created.
• A conversation you shared with a report is deleted once we have reviewed it, or after 90 days at most.
• Voice audio is not stored. It exists only while it is being transcribed; once the text comes back, the audio is discarded by us and by the transcription provider.
• Account deletion is immediate and irreversible. When you delete your account, we first destroy your per-user encryption key (so every encrypted record becomes permanently unreadable), sign out every device signed in to your account (which removes the copy of the key each one held), then purge your account, journals, conversations, derived understanding, and stored files from our active systems. We cannot restore a deleted account.
• Backups. Encrypted copies of your data may remain in our routine database backups for up to 30 days after deletion before they are overwritten in the normal rotation. Because your encryption key has already been destroyed, that content cannot be read or restored, by us or anyone else.
• Operational recordsthat do not identify you, such as aggregate usage statistics, may be retained after deletion. Purchase records held by Apple are governed by Apple’s terms.
• AI providers delete the content we send them on their own schedules: immediately, for the zero-data-retention providers named above, and within approximately 30 days or sooner for the others.

Your choices and rights

Delete everything, yourself, from inside the app. Settings includes a Delete my account option. After a confirmation step, this permanently and irreversibly deletes your account, your journals and conversations, your derived understanding, your encryption key, and your stored files, as described above. You may also email support@auserene.com to request deletion.

Sign out of all other devices. If you lose a phone or signed in somewhere you no longer use, Settings lets you sign out every other device at once. Each one is signed out within minutes, the next time it connects, and forgets your data and your key.

Analytics are opt-in.Product-analytics events are off until you say yes, on a screen during setup that explains what is and isn’t collected. You can turn them on or off any time in Settings → Share anonymous usage. Nothing in the app depends on it.

Permissions are optional. Notifications are only used for reminders you choose. The microphone is only used while you record a voice note. Declining either does not limit any paid feature; you can type instead of speaking, and you can use every part of Premium without notifications.

See and correct your derived understanding. The app shows you the understanding it has formed, in your own words, and lets you edit it, mark items as wrong, tell the companion not to bring something up, or delete it.

Access, correction, and portability. You may request a copy of your personal information or ask us to correct it by emailing support@auserene.com.

Manage your subscription.Subscriptions are managed through your Apple ID in the App Store settings on your device, not by us. Cancelling there stops future renewals; deleting your account does not by itself cancel a subscription, so cancel first if you don’t want to be charged again.

For United States users (including California): Depending on your state, you may have the right to know what personal information we collect, to access or delete it, to correct it, and to not be discriminated against for exercising these rights. California residents (under the CCPA/CPRA) have these rights. We do not sell or share your personal information for cross-context behavioral advertising, and we do not process sensitive personal information for purposes other than providing the service you requested. To exercise any right, contact support@auserene.com; we will not deny you service for doing so.

For users in the EU, EEA, and UK: You have the right to access, correct, delete, and receive a copy of your personal information, to ask us to restrict or stop certain processing, and to withdraw any consent you have given. You can use the in-app controls or email support@auserene.com. You also have the right to lodge a complaint with your local data protection authority.

For users in India:Under India’s Digital Personal Data Protection Act, 2023, you have the right to access and correct your personal data, to have it erased, and to grievance redressal. You can use the in-app controls or email support@auserene.com, which is also our contact for any grievance.

We honor these requests regardless of where you live.

Children

Auserene is for users 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact support@auserene.com and we will delete it.

International users and data location

Auserene is operated from India and is available to users in multiple countries. Your data is stored and processed on infrastructure operated by our providers, which may be located in the United States, India, and elsewhere. Wherever you use Auserene from, your information may be transferred to and processed in these locations. By using Auserene, you understand and agree to this processing.

Not a medical or crisis service

Auserene is a journaling and reflection app. It is not a medical device, not therapy, and not a substitute for professional care, and it does not provide medical or mental-health diagnosis or treatment. If you are in crisis or may be in danger, call your local emergency number or a crisis line immediately. Our crisis resources page lists free helplines by country.

Changes to this policy

We may update this policy. If we make a material change, we’ll update the date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

Contact

Himanshu Pathak, operating as Auserene
support@auserene.com
www.auserene.com/support