Privacy & Policy

AurLux asks for very little, and only what the experience itself needs to display your ownership.

Identity you choose

• The display name you type during onboarding, or later change in Settings. It can be anything you like — a real name, a nickname, or a title. We never verify it.
• The country you pick from the list of 249 ISO countries. This is a choice you make, not a detection — the App does not use GPS, IP geolocation, or any other means to work out where you actually are.

Artifact and preference data

• Your certificate details — serial number and edition — generated on your device when you first claim your artifact.
• Whether onboarding has been completed, so the three opening screens are shown only on first launch.
• Your Daily AURLUX Reminder setting: whether it is on, and the time of day you chose (10:00 by default).

Install identifier

• A random per-install id generated on your device. It is not your advertising id, not your device serial, and not linked to your phone number, email, or any account. It exists so that your record in the cloud mirror can be updated rather than duplicated. Reinstalling the App creates a new id.

Technical data

• The installed app version, sent when the App checks the version manifest to see whether a newer build exists.
• Ordinary network metadata that any internet request creates, such as your IP address arriving at our hosting providers. We do not use it to build a profile of you.

We do not collect your precise location, contacts, photos, microphone or camera input, browsing history, or advertising identifiers. There are no third-party advertising or analytics SDKs in the App, and we do not sell your information to anyone.

AurLux keeps two copies of a very small amount of data. The one on your device is the source of truth.

On your device (Hive)

Your identity, certificate details, preferences, install id, reminder setting, and sync state are stored in a local database on your phone. The App is fully usable offline — with no network at all, the gem, certificate, share screen, and daily motivation all work exactly the same.

In the cloud (Supabase)

As a best-effort background step, the App mirrors your owner record — your chosen name, your chosen country, your certificate details, and your per-install id — to a hosted database table so ownership survives a lost or replaced device. Nothing else is uploaded. If the upload fails, it is queued and retried later; a failed sync never loses your local data, and the App keeps working regardless.

Because the name and country are values you type and pick yourself, you are free to mirror a pseudonym instead of anything identifying.

The 365 daily mindset lines are written in-house and ship inside the App. Choosing today's line is done entirely on your device by the calendar date — nothing is requested from a server, and no record of what you read is created or transmitted.

If you enable the Daily AURLUX Reminder, the App schedules a local notification at the time you picked, in your device's own timezone. It is scheduled by the operating system on your phone and re-registered after a reboot. It is not a push notification: no server is involved, no push token is created, and we cannot see whether you opened it. You can turn it off in Settings, or disable notifications for the App in your device settings.

On launch the App fetches a small JSON manifest that we host, which states the current version and whether older builds should be nudged to update or blocked. The request sends only what is needed to answer that question — chiefly your installed app version — and returns the manifest. No identity data is included in this check.

The Share screen is designed to be screenshotted. Any image you capture and post is shared by you, through your own device and the apps you choose — AurLux does not upload, host, or publish your screenshots, and no other AurLux owner can see your name, country, or certificate inside the App.

Do keep in mind that a screenshot of your identity plate or certificate contains the name and country you chose. Once you post it somewhere public, that is outside our control.

AurLux relies on a small number of providers. They process data on our behalf, under their own privacy policies:

• Supabase — hosted database used to mirror the owner record described above. Supabase Privacy Policy
• Google Play and the App Store — distribution of the App and its updates. They collect their own data about installs and purchases, which we do not control. Google Privacy Policy · Apple Privacy Policy

Local data stays on your device until you clear the App's storage or uninstall it. Uninstalling removes the local database and cancels any scheduled reminder.

The mirrored owner record stays in the cloud table, keyed to your per-install id, until you ask us to delete it. Uninstalling the App does not automatically remove the mirrored copy, because it exists precisely so ownership can outlive the install.

• Change your name or country at any time from Settings.
• Turn the Daily AURLUX Reminder on or off, or change its time.
• Use the App entirely offline. With no network connection, nothing is mirrored to the cloud at all.
• Clear the App's storage or uninstall it to erase everything held on device.
• Email us to request a copy of your mirrored record, or to have it deleted. Please include the name and country you registered so we can find it.

Data on your device is stored in the App's private storage area, isolated from other apps by your operating system. Data in transit to our providers travels over encrypted connections, and the cloud table is protected by access rules that limit what a client can read and write. No system is perfectly secure, so we cannot guarantee absolute security, but the amount of information at stake is deliberately small — a chosen name, a chosen country, and a random id.

AurLux is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided information through the App, please contact us and we will remove it.

AurLux is an aesthetic object. The words "elite", "verified", "owned by", "certificate", "serial", and "edition" are part of a designed experience — they confer no real-world status, membership, warranty, or financial value, and nothing in the App is authenticated against any external registry. Ownership is not a blockchain asset and cannot be traded.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes means you accept the revised policy.

If you have any questions about this Privacy Policy, or you want to access or delete your data, you can reach us at:

nooralamabir@gmail.com