Privacy Policy

AureaHD (“AureaHD,” “we,” “us,” or “our”) operates the website at aureahd.com and the related Human Design chart and reading service (the “Service”). This Privacy Policy applies to information we handle when you use the Service. By using AureaHD, you agree to the practices described here.

This policy works alongside our Terms of Service. If anything here is unclear, email us at orla@aureahd.com — a real person will answer.

We collect only what we need to compute your chart and run the Service.

• Account details. Your email address, and your name if you provide it. Sign-in is passwordless, so we never collect or store a password. If you choose Google sign-in, we use your email address and Google account identifier to authenticate and link your AureaHD account. We request only identity and email access, not your contacts, Gmail messages or Google profile. We validate Google's sign-in response without storing its access, refresh or identity tokens.
• Birth details. Your exact birth date, birth time, and birth location. These are essential inputs to the astronomical calculations behind a Human Design chart, and we also use the location to determine the correct birth timezone.
• Payment data. If you start a card-required Pro trial or purchase a membership, our payments processor (Stripe) handles your card details. We never see or store your full card number. We keep a Stripe customer ID and subscription ID so we can manage your plan and unlock your reading, along with billing status, trial dates and introductory trial usage to manage access and enforce trial eligibility.
• Chat & journal content. Messages you send to Orla, our AI reflective companion, along with summaries we generate to give Orla memory of your conversations. Your reflections, journal notes, and any text you save within the Service.
• Computed content. The chart, daily transit reports, monthly recaps, and reading data we generate from your birth details.
• Email choices. Your optional email opt-ins, frequency, delivery timezone, consent history, and delivery or unsubscribe status.
• Voluntary feedback. If you send feedback, we keep your note, category, page or onboarding step, and your plan at the time. Signed-in feedback is linked to your account. Visitors can share an email address if they want a reply. We do not automatically attach birth details, charts or conversations, and feedback is not sent to Meta.
• Usage & technical data. Basic analytics about visits, completed charts, saved accounts, checkouts and payments. We use a random browser identifier and fixed campaign labels to understand which ads bring people to AureaHD. Our servers also create technical logs when the site is visited.

We use the information above to:

• Generate your Human Design chart, transit reports, and readings.
• Personalize your experience and give Orla continuity across conversations.
• Process payments, manage subscriptions, and unlock paid features.
• Send transactional email — sign-in links and codes, saved-reading access, Pro trial billing details and reminders before a trial's first charge. These messages help you access your account and manage billing. Saving a reading or starting a trial does not subscribe you to a marketing newsletter.
• Understand how the Service is used so we can improve it.
• Review feedback and, with your permission, email you about your note.
• When you opt in, send discovery emails for free accounts or personal reflections for active members. Member reflections use chart context and invite you back into the app; private conversations and journal entries are not included in these emails.
• Keep the Service secure, prevent abuse, and meet legal obligations.

Orla is powered by a third-party large-language-model (LLM) provider. When you chat with Orla, the content of your messages — along with relevant chart context and stored conversation summaries — is sent to that provider so it can generate a response.

We do not use your chat or journal content to train our own models, and we instruct our LLM provider to process your content only to serve your request. Orla’s responses are generated automatically and are not reviewed by a human before you see them. Please read the AI disclosures in our Terms of Service.

You have in-app privacy controls to review, manage, and delete your Orla data, including stored memories and summaries.

We use service providers to run AureaHD. If you allow advertising measurement, we also share limited activity with Meta as described below:

• Google — optional sign-in authentication when you choose Continue with Google. Google receives the authentication request and returns the identity information needed to sign you in. We do not send your birth details, chart, goals or Orla conversations to Google for this sign-in flow.
• Stripe — payment processing and subscription billing.
• Resend — sending transactional email and optional emails you choose to receive, and reporting delivery failures or complaints.
• ContentERP — preparing discovery email campaigns. AureaHD applies your email preferences and membership status before delivery; private conversations and journal entries are not shared for campaigns.
• Our LLM provider — generating Orla’s responses.
• Meta — optional advertising measurement. With your permission, we send basic visit, chart-completion, registration, checkout and first-payment events, including payment amount and currency where applicable. Matching data can include the Meta ad-click identifier, browser type and IP address. We do not send names, email addresses, birth details, chart-bearing links, chart contents, goals, journal entries or Orla conversations to Meta.
• Our hosting provider — running the servers and databases that operate the Service.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

An essential session cookie keeps you signed in. A separate random browser cookie helps us measure visits and payments on our own service, without storing your birth details in analytics. These browser identifiers expire after 90 days.

Meta measurement is optional and starts only after you choose “Allow measurement.” We do not load a Meta browser pixel or automatic page-URL collection. You can change your choice using “Advertising privacy choices” at the bottom of any page. We honor Global Privacy Control as a choice against Meta sharing. Declining does not limit your chart or membership.

Withdrawing permission stops future sharing from this browser and removes its stored advertising matching details from our active measurement record. It cannot recall events already sent. Matching details expire after 90 days; non-payment funnel events are retained for up to one year. Payment records may be kept longer for accounting. Cookie controls apply per browser; blocking the session cookie prevents sign-in.

We keep your information for as long as your account is active and as long as we need it to provide the Service. If you delete specific content — such as an Orla conversation or a journal note — we remove it from active systems. If you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (for example, billing records) to meet legal, tax, or accounting obligations. Backups are cycled out on a rolling basis.

You always have meaningful control over your data:

• Access & correction. You can view and update much of your information in the app. For anything else, email orla@aureahd.com.
• Orla privacy controls. In-app controls let you manage and delete Orla’s stored memories and summaries.
• Deletion. You can ask us to delete your account and associated personal data at any time.
• Email preferences. Discovery emails and personal member reflections require separate opt-ins. Discovery emails follow a daily schedule, as do personal member reflections. Manage your choices in your account preferences, or use the unsubscribe link in an optional email to stop both. Discovery emails pause during an active membership, including a Pro trial. Essential sign-in, account and billing messages, including trial confirmations and pre-charge reminders, remain separate from these optional email choices.

We do not sell your personal data for money. Optional Meta measurement may be treated as sharing for advertising under some privacy laws. You can decline or withdraw that permission through our advertising privacy choices. Your birth details, chart, chat and journal content are never part of that sharing.

AureaHD is intended for adults. The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

We take reasonable measures to protect your information, including encryption in transit (HTTPS) and access controls that restrict who can reach your data. No method of transmission or storage is ever completely secure, however, so while we work hard to protect your information we cannot guarantee its absolute security.

AureaHD is operated from the United States, and your information is processed and stored in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

Depending on where you live, you may have additional rights over your personal data — such as the right to access, correct, delete, port, or restrict our use of it, the right to object to certain processing, and the right to withdraw consent. If you are in the European Economic Area or the United Kingdom, our legal bases for processing include performing our contract with you, your consent, and our legitimate interests in running and improving the Service. If you are a California resident, you have rights to know about, access, and delete your personal information, and to not be discriminated against for exercising those rights — and, as noted above, we do not sell your personal information.

To exercise any of these rights, email orla@aureahd.com. We will respond as required by applicable law, and we will never charge you or degrade your experience for making a request.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or within the app. Your continued use of the Service after an update means you accept the revised policy.

Questions, requests, or concerns about your privacy? Reach us any time at orla@aureahd.com.