Effective from 17 October 2026

AURA app privacy policy

This policy covers the AURA Smart Home mobile app and the AURA Hub installed in the user's home. Data controller: Tibor Büki, sole proprietor, 6000 Kecskemét, Vízmű utca 8. 3/23, Hungary, info@myaura.hu. If there is any discrepancy, the Hungarian version of this policy prevails.

Where your data is stored

AURA works locally. The app talks to the user's own AURA Hub in their home. Account data, devices, automations, location data, family messages, photos and the data of enabled add-ons (such as the family calendar, recipes and household stock) are stored on the Hub. We (the controller) do not receive, access or share this data, except during remote support that the user explicitly approves.

Location data

Data: precise and approximate location of the phone, and the location of the home set by the user.
Purpose: presence detection (running "away" and "arrival" routines, for example turning off the lights when the last person leaves), live location sharing within the household, and setting the home location for weather and sunrise data.
Background location: if the user turns on presence detection and grants the "Allow all the time" location permission, the app collects location data even when the app is closed or not in use, so that the routines can run when the user leaves or arrives home. Presence detection is off by default, and a notification shows while it runs in the background.
Sharing: location data is sent only to the user's own AURA Hub. It is not sent to us, not shared with third parties, not sold and not used for advertising.
Legal basis: consent.
Control and retention: presence detection can be turned off in the app, location sharing can be stopped at any time, and location permission can be revoked in the phone settings. Data is kept until the feature is turned off, sharing is stopped or the account is deleted.

Camera, photos and microphone

The camera is used to scan the Hub's QR code, add devices and take room and profile pictures; photos are stored on the Hub. The microphone is used only when the user taps the microphone button to dictate a command; the recognized text is used for the command. If voice control is turned on, the spoken command is sent only to the user's own Hub, recognized and answered there; the recording is not stored and is not sent to us. With the optional wake word on a wall tablet, audio is streamed only over the local network to the Hub, which listens only for the wake word and the command after it and does not store audio. Permissions can be revoked in the phone settings.

Phone calendars

With the calendar permission, the app reads only the calendars the user selects: calendar name and colour, and event title, description, location, start and end for the past week and the next three months (no attendees or reminders). The data goes only to the user's own Hub, to show events and run calendar-based automations; we do not receive it. Deselecting a calendar deletes its events from the Hub; the permission can be revoked in the phone settings.

Device compatibility check

The user can type a device name or take a photo of the device, its box or label. Text on the photo is read on the phone by Google ML Kit (on-device; ML Kit may send diagnostic and usage data to Google, but not the photo or the text). If the Hub cannot answer by itself, the text, the photo and the list of supported device types are sent to our server, without name, email or account data. We do not store the request; to answer it we may pass the text and photo to Anthropic.

Siri, Google Home and Alexa (Matter bridge)

If you turn on the Matter bridge and pair it with your phone's home app (Apple Home, Google Home, Amazon Alexa), the Hub shares the bridged devices with that app over the local network: device names and types and their state (on or off, brightness, measured temperature and humidity, door or window open, motion). Locks, the alarm, gates and cameras are never shared. The provider you choose (Apple, Google or Amazon) processes this data, including voice commands, under its own privacy terms; we do not access it. Legal basis: consent (the bridge is off by default). You can turn it off or remove the pairings in the app at any time.

Weather and other online services

Weather, weather warnings, air quality and place search are requested by the Hub through our server (MET Norway, MeteoAlarm, Sensor.Community, Photon / OpenStreetMap), with coordinates rounded to about 1 km. These providers see only our server, not the user. Our server keeps this data only in memory for up to 7 days.

Automatic error reports

Unexpected errors of the Hub software and the app (error message, code location, time, software version, phone platform, shortened Hub ID; no name, email, device names, location or request content) are sent to our own server for fixing bugs, based on legitimate interest, kept for 90 days, and can be turned off for your Hub on request at info@myaura.hu.

Notifications

The phone's push token and the notification text are used to deliver notifications from the Hub. Processor: Google Ireland Limited.

Remote access and remote support

Away from home, the app reaches the Hub through our relay server (the Hub's relay address and certificate, the fact of the connection and the phone's IP address, for the duration of the connection). Remote support and screen sharing start only at the user's request and with their approval; the session log is kept for 1 year. On a wall tablet or an installation device, the technician may also use remote desktop (RustDesk) through our own server, end-to-end encrypted, only with the approval of the user on site; we do not record the screen.

Support requests, error reports, licence and backups

Support requests and suggestions (name, email, message, attachments, Hub ID) are kept for 1 year after closing. The message text, without name, email and Hub ID, may be processed by Anthropic to prepare a fix and a reply draft.
Error reports (app version, phone model, OS, connection state, error log) are sent only when the user chooses to.
Licence and update data (licence key, Hub ID, software version, uptime, load, free storage, number, name and OS of paired phones): health data for 30 days, health events for 90 days, licence data until the licence ends.
Encrypted backups, if turned on, are uploaded encrypted; we cannot read them and keep the last 3 per licence.

Processors and transfers

Google Ireland Limited (notifications, ML Kit diagnostics), Anthropic, PBC and Anthropic Ireland, Limited (support text, and the text and photo of device compatibility checks), Rackhost Zrt. (server hosting). Google and Anthropic may process data outside the EU, including the United States, under the applicable adequacy frameworks and contractual safeguards. We do not sell personal data and do not use it for advertising.

Security, children, your rights

The connection between the app and the Hub is encrypted when away from home, and communication with our server uses HTTPS. Accounts for household members under 16 can only be created by or with the consent of a parent. You have the right to information, access, rectification, erasure, restriction, data portability, objection and to withdraw consent: write to info@myaura.hu. Account deletion is described on the Delete account page. You can lodge a complaint with the Hungarian supervisory authority (NAIH).