Aurilo Privacy Policy

Last updated: 18 July 2026

This policy explains what personal data Aurilo collects, why, who we share it with, and your choices. Aurilo is a personal finance assistant that processes bank and card statements you choose to send us. We never connect to your bank and never ask for your banking login.

Data we collect

Account data: your email address and authentication details. If you sign in with Google, we receive your email and basic profile from Google.
Financial data: the statements and documents you forward or upload, and the transactions we extract from them (amounts, dates, descriptions, categories).
Content you provide: chat messages and questions you ask about your finances.
Voice data: if you use voice mode, audio from your microphone and its transcription.
Basic technical data needed to run the app reliably, such as error and delivery logs.

How we use your data

To provide the service: receive forwarded statements, extract and organise your transactions, answer your questions, and power voice mode.
To secure and maintain the app, prevent abuse, and enforce rate limits.
To communicate with you about your account, such as password resets and account-deletion confirmations.
We do not sell your personal data, and we do not use it for cross-app advertising or tracking.

AI processing

To answer your questions and categorise transactions, relevant content — including statement text and your messages — is sent to our AI provider (Anthropic). Voice mode additionally uses a voice provider (ElevenLabs) to transcribe and synthesise speech. These providers process the content to return a result and act as our processors; they are not permitted to use your content to train their models on our behalf.

Who we share data with

We share data only with service providers ("subprocessors") who help us run Aurilo, under contracts that require them to protect it:

Supabase — database, file storage, and authentication hosting.
Mailgun — receiving your forwarded statements and sending transactional email (e.g. deletion codes).
Anthropic — AI used to understand statements and answer questions.
ElevenLabs — voice transcription and synthesis (voice mode only).
Google — sign-in, if you choose it.

We may also disclose data where required by law.

Storage and security

Your data is stored in your account and protected by row-level security so that you can only access your own records. Uploaded documents are kept in private storage. Data is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your information.

Retention and deletion

We keep your data while your account is active. You can delete your account at any time from Profile → Delete Account in the app, or via our public deletion page. Deleting your account permanently removes your account and associated data — including statements, documents, transactions, and chats — from our systems, and this cannot be undone.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise deletion directly in the app, or contact us at support@aurilo.app for any other request.

International transfers

Our providers may process data in countries other than yours. Where they do, we rely on appropriate safeguards for those transfers.

Children

Aurilo is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy; the "last updated" date above will change and material updates will be surfaced in-app where appropriate.

Contact

For any privacy question or request, email support@aurilo.app.