Privacy Policy

01 Who we are

MyAuram is a private wealth-tracking app for the gold and silver you already own, built and operated by Athel ("we", "us", "our"). This Privacy Policy explains what personal data the app handles, why, and the choices and rights you have.

For any privacy question or request, contact us at support@myauram.com. This policy is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and the Google Play policies for user data.

02 Our privacy principle

03 What we collect & why

Account information

You sign in with Google. We receive your email address and a Google account identifier — used only to create and secure your account, sync your subscription, and let you restore your encrypted backup on a new device. We do not receive your Google password.

Subscription & billing

If you buy a Personal or Family plan, the purchase is processed by Google Play and verified through RevenueCat. We receive your entitlement status (which plan is active and until when) — never your card, UPI, or bank details, which are handled entirely by Google.

Diagnostics & usage analytics — off by default

Crash diagnostics and usage analytics are strictly opt-in. Both are two separate switches, both default to OFF, and nothing is collected until you explicitly turn them on. They never include your financial data — only aggregate, pseudonymous signals (tied to an app-instance identifier, not to your name) about app stability and which features are used. You can withdraw either consent at any time in Settings.

Security & technical data

To keep the service safe, the app runs a background check that confirms it is the genuine MyAuram (Google Play Integrity), and we look at basic request information to prevent abuse and rate-limit misuse. This is never used to profile you.

Other account records

On our servers we also keep a few small records tied to your account: your cosmetic achievement badges, a one-time promotional-reward record (append-only, to prevent misuse), a backup salt and backup timestamps that support your encrypted backup, a session marker, and your marketing-email preference. None of this includes your gold inventory.

Early-access waitlist

If you join our early-access waitlist on this website, you give us your name, email address, and (optionally) phone number so we can send you your invite when the app opens. We use these details only to contact you about early access — never sold, never shared. To stop the form being abused, we check your IP address briefly at the moment you submit; it is not stored with your details. You can ask us to remove you from the waitlist any time at support@myauram.com.

04 What never leaves your device

Everything about the gold and silver you own stays on your phone. When you choose to back up, the data is encrypted on your device first, then stored in a private, app-only folder of your own Google Drive — a space we cannot access. We never receive your backup files.

• Your holdings, weights, purities, values and allocation
• Photos of your pieces and any notes, locker or gifting details
• Loans, SIPs, goals and reports — generated on your device

05 How we use your data

• To run your account — sign-in, secure your data, and restore your backup on a new phone.
• To manage your subscription — verify and honour the plan you purchased through Google Play.
• To show live prices — our servers fetch gold and silver rates from a market-data provider; no personal data of yours is sent to price this.
• To keep the service safe — attestation and rate-limiting to prevent abuse.
• To improve the app — only if you opt in to analytics, and only in aggregate.

06 What we never do

• We never sell or rent your personal data to anyone.
• We never show advertising or build an ad profile of you.
• We never read, value, or share your gold inventory — we can't; it's encrypted and stays on your device.
• We never buy, sell, hold, or take custody of your gold or money.

07 Third-party services

We rely on a small set of trusted service providers, who process data only on our instructions and only for the purpose named:

Where your data is processed

Your account records are hosted in India (Google Cloud, asia-south1 region). Some providers — such as RevenueCat, and Google's analytics and crash services if you opt in — may process limited data outside India under their own contractual and legal safeguards.

08 How we protect it

• Encryption at rest — the sensitive details of your holdings, your photos, and your backups are encrypted with AES-256. The key for your on-device data is generated on your phone and stays in its secure hardware keystore, so it never leaves the device.
• App lock — an optional PIN or biometric lock guards the app itself.
• Attestation — every request to our servers is verified with Google Play Integrity so only the genuine app can talk to them.
• Least data — the sensitive record simply isn't on our servers to be breached.

No system is perfectly secure, but keeping your inventory on-device and encrypted removes the single biggest risk in a wealth app.

09 Retention & deletion

We keep your account records only while your account is active. When you delete your account (see the Delete account page), we remove your account, subscription, session and profile records from our servers, and the app clears your local data and removes your device backups where it can.

For a short period afterward we retain a minimal deletion record for up to 90 days (held securely, encrypted at rest like all our records) — used only to prevent abuse, honour any refund or legal obligation, and confirm the deletion completed — after which it is permanently and automatically purged. One append-only promotional-reward record is kept longer for fraud-prevention; it holds no readable profile and cannot rebuild your account. Opt-in analytics data, if you enabled it, is aggregate and pseudonymous and is retained by our analytics provider under their standard windows.

10 Your rights

Under the DPDP Act and Google Play policies you can, at any time:

• Access & export your data — most of it already lives on your device and in your own Drive; email us for anything held on our servers.
• Correct your information.
• Delete your account and data — in-app or via the Delete account page.
• Withdraw consent to analytics or diagnostics — instantly, in Settings.
• Raise a grievance — write to our Grievance Officer below and we will work with you to put it right (complaints may also be filed with the Data Protection Board of India, as the DPDP Act provides).
• Nominate someone to exercise your rights on your behalf if you die or become incapacitated — email us to arrange.

11 Children

MyAuram is intended for adults (18 and over) and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has used the app, contact us and we will delete the account.

12 Changes & contact

If we make a material change to how we handle your data, we will update this page and, where the change affects your consent, ask you to review it again inside the app. Continued use after an update means you accept the revised policy.