Aurilo Privacy Policy

Last updated: 22 July 2026

This policy explains what personal data Aurilo collects, why, who we share it with, and your choices. Aurilo is a personal finance assistant that processes bank and card statements you choose to send us. We never connect to your bank and never ask for your banking login.

Data we collect

Account data: the email address and password you register with. We only ever store a securely hashed version of your password, never the password itself. If you sign in with Google instead, we receive your Google account identifier and the basic profile Google shares with us, such as your email and name. At sign-up we also collect your date of birth, to confirm you meet our minimum age, and your mobile number.
Financial data: the statements and documents you forward or upload, and the transactions we extract from them (amounts, dates, descriptions, categories).
Content you provide: chat messages and questions you ask about your finances.
Voice data: if you use voice mode, audio from your microphone and its transcription.
Technical data: basic information needed to run the app reliably, such as error and delivery logs, and the sign-in tokens your device stores so you stay logged in.
Consent records: when you agree to these Terms and this Privacy Policy — at signup and whenever we publish a new version — we record which version you agreed to, the date and time, and the IP address and device/browser (user-agent) of that request, as proof of your agreement. We keep this for as long as your account exists and a reasonable period afterwards to meet our legal obligations.

We do not ask for or collect special-category personal data, such as information about your health, race or ethnicity, religious or political beliefs, or sexual orientation. We never connect to your bank, and we never ask for your banking login, card numbers, or government identifiers.

How we use your data

To provide the service: receive forwarded statements, extract and organise your transactions, answer your questions, and power voice mode.
To secure and maintain the app, prevent abuse, and enforce rate limits.
To communicate with you about your account, such as password resets and account-deletion confirmations.
To keep a record that you agreed to these Terms and this Privacy Policy, including which version and when.
We do not sell your personal data, and we do not use it for cross-app advertising or tracking.

AI processing

To answer your questions and categorise transactions, relevant content, including statement text and your messages, is sent to our AI provider (Anthropic). Voice mode additionally uses a voice provider (ElevenLabs) to transcribe and synthesise speech. These providers process the content to return a result and act as our processors; they are not permitted to use your content to train their models on our behalf.

Aurilo does not use your data for automated decisions that produce legal or similarly significant effects about you. Categorising a transaction or answering a question is assistive only; you remain in control and can correct anything Aurilo gets wrong.

Who we share data with

We share data only with service providers ("subprocessors") who help us run Aurilo, under contracts that require them to protect it:

Supabase: database, file storage, and authentication hosting. Supabase's privacy policy.
Mailgun: receiving your forwarded statements and sending transactional email, such as deletion codes. Mailgun's privacy policy.
Anthropic: AI used to understand statements and answer questions. Anthropic's privacy policy.
ElevenLabs: voice transcription and synthesis, for voice mode only. ElevenLabs' privacy policy.
Google: sign-in, if you choose it. Google's privacy policy.

We may also disclose data where required by law.

Storage and security

Your data is stored in your account and protected by row-level security so that you can only access your own records. Uploaded documents are kept in private storage. Data is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your information.

Retention and deletion

We keep your data while your account is active. You can delete your account at any time from Profile → Delete Account in the app, or via our public account-deletion page. Deletion is processed immediately: it permanently removes your account and associated data, including statements, documents, transactions, chats, and any waitlist entry, from our systems, and this cannot be undone.

We may retain a limited amount of data for a short period only where the law requires it, or to detect and prevent fraud and abuse. Anything retained for these reasons is kept to the minimum necessary and deleted once no longer needed.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

Access: get a copy of the personal data we hold about you.
Correction: have inaccurate or incomplete data corrected.
Deletion: have your data erased.
Portability: receive your data in a portable, machine-readable format.
Objection and restriction: object to, or ask us to restrict, certain processing.
Withdraw consent: where we rely on your consent, withdraw it at any time (this does not affect processing already carried out).

You can exercise deletion yourself at any time, in the app under Profile → Delete Account, or via our account-deletion page. For any other request, email support@aurilo.app. To protect your account, we may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. We will never discriminate against you for exercising these rights.

If you believe we have handled your data improperly, you also have the right to complain to your local data-protection authority.

International transfers

Our providers may process data in countries other than yours. Where they do, we rely on appropriate safeguards for those transfers.

Children

Aurilo is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy; the "last updated" date above will change and material updates will be surfaced in-app where appropriate. For significant changes, we may also notify you by email.

Contact

For any privacy question or request, email support@aurilo.app.