Privacy Policy

Data Controller: AURA Fem Health Pte. Ltd., 2 Venture Drive, 608526, Singapore

Email (privacy/data rights): solutions@aurafemhealth.com

Email (support): solutions@aurafemhealth.com

If you are in the EEA/UK, AURA acts as a data controller for your personal data. We may appoint an EU/UK representative where required.

This Policy covers personal data processed when you:

• browse our website or use the AURA app;
• create an account, complete assessments, receive a Personalized Plan;
• join programs (self-paced, coach-supported, group circles);
• attend events (webinars/workshops);
• message or book practitioners;
• receive emails, nudges, reminders, or participate in research/feedback.

We collect personal data that you provide directly, data generated by your use, and limited data from third parties.

We process personal data for:

We use cookies and SDKs to operate and improve the Platform. Categories:

• Strictly necessary (login/session, security).
• Functional (preferences, timezone).
• Analytics (e.g., GA4, privacy-safe configuration).
• Marketing/attribution (e.g., Meta Pixel, Firebase/Branch for deep links).

You can manage preferences via our Cookie Banner/Settings and your device settings. Some features require essential cookies.

We share data only with:

• Processors who help us deliver the service (hosting, cloud infrastructure, email/SMS, payments, scheduling, video, analytics, support). Examples include: Stripe (payments), Calendly (scheduling), Zoom (video), SendGrid/SES (emails), Firebase/Branch (deep links/notifications), Sanity/Contentful (CMS), GA4 (analytics).
• Practitioners you choose to work with (access is logged and consented).
• Event co-hosts where clearly disclosed at registration.
• Legal authorities where required by law or to protect rights/safety.

We do not sell your personal data. We do not allow third parties to use your health data for ads.

We may process/store data in Singapore and other countries where we or our processors operate. Where required, we use safeguards (e.g., SCCs under GDPR) to protect your data across borders.

We keep data only as long as needed to provide the service and for legitimate business/legal purposes, then delete or anonymize it. Typical guidelines:

• Account & plan data: while account is active and for a reasonable period after closure (e.g., 12–24 months) unless you request earlier deletion where applicable.
• Transactions: 7 years (tax/audit).
• Support tickets: up to 24 months.
• Events/program chat: per program/event lifecycle, then archived/anonymized.

Depending on your location (PDPA/GDPR and similar), you may have rights to:

• Access your data;
• Correct inaccurate data;
• Delete your data (subject to legal holds);
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time (this doesn't affect prior processing).

To exercise rights, contact solutions@aurafemhealth.com. We may need to verify your identity. We will respond within 30 days (or the statutory period). You can also contact your local data protection authority.

The Platform is for users 18+. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.

We use administrative, technical, and organizational safeguards, including encryption in transit, role-based access, audit logs, and least-privilege access. No method is 100% secure; please use strong, unique credentials and keep them confidential.

Incident response: If we detect a data breach that poses risk to you, we will notify you and/or authorities as required by law.

Your website and app access use one shared account. Actions on one surface (e.g., enrollment, bookings, plan updates) may be reflected on the other.

If you engage a practitioner:

• They may view your relevant information (with your explicit consent) to support care;
• They are independent providers and must comply with AURA's policies and applicable law;
• Messaging and notes should remain within AURA for privacy.

You can revoke practitioner access by ending your care relationship (subject to legal/clinical retention norms).

Many events are recorded. If you register, you may receive access to a replay for a limited period. We ask participants not to share links publicly. Event chat/Q&A may be visible to co-hosts and used to improve content.

Our Platform may link to third-party sites. We are not responsible for their privacy practices. Please review their policies.

We may update this Policy from time to time. We will change the "Last Updated" date and, where required, notify you of material changes. Continued use of the Platform means you accept the updated Policy.

Questions or requests about this Policy or your data:

AURA Fem Health Pte. Ltd.
Email: solutions@aurafemhealth.com
Address: 2 Venture Drive, 608526, Singapore

For support: solutions@aurafemhealth.com