Privacy Policy

Company: AnimaScribe ("Company", "we", "us", or "our")
Product: Auralis (Web and Desktop Application)

1. Introduction: Our Privacy Philosophy

At AnimaScribe, we built Auralis to be your proactive AI work companion. Because Auralis operates intimately with your workflow—seeing your screen, hearing your voice, and interacting with your local files via the Model Context Protocol (MCP)—we believe trust is our most critical feature.

This Privacy Policy explains how we collect, use, and protect your information. We have engineered Auralis with privacy-by-design principles: prioritizing local storage, utilizing ephemeral API tokens for AI processing, and explicitly refusing to use your personal project data to train our own models.

2. Information We Collect

We collect only the data necessary to provide, maintain, and improve the Auralis service.

A. Account & Billing Information

• Account Data: When you register via our Web App (auralis.technology), we collect your email address and securely hash your password via our authentication provider (Supabase).
• Billing Data: If you upgrade to a paid tier, payment details are processed directly by our Merchant of Record (Stripe). We do not store your full credit card information on our servers.

B. AI Interaction Data (Ephemeral vs. Persistent)

To provide a seamless multimodal experience, we distinguish between ephemeral streams and persistent memories:

• Streaming Data (Audio, Video, Screen): When you use voice or vision features in the Auralis Desktop App, your audio and screen data are processed using ephemeral tokens. Auralis connects directly to our AI provider (Google Gemini) for real-time inference. AnimaScribe does not permanently record, store, or log your audio, webcam, or screen capture streams.
• Contextual Memory: To function as a "Work Companion," Auralis generates text-based summaries, embeddings, and user preferences ("Memories") from your interactions. These Memories are stored securely in our database (Supabase) to provide continuity across your work sessions. You maintain full control over these Memories and can delete them at any time via your User Dashboard.

C. Local Execution & Model Context Protocol (MCP)

Auralis utilizes the Model Context Protocol (MCP) to interact with your local environment (e.g., local files, databases).

• Local Processing: Your MCP configurations, locally stored API keys, and device preferences remain strictly on your local machine.
• Data Transfer: Data accessed via MCP is only transmitted to the AI model (Google Gemini) when explicitly required to answer your prompt or analyze your current context. We do not passively harvest your local file system.

D. Analytics & Telemetry

To improve the UI/UX and track system performance, we collect product analytics (e.g., clicks, pageviews, session duration) using Mixpanel.

• EU Infrastructure: We route this data through Mixpanel's EU endpoints (api-eu.mixpanel.com).
• No Third-Party Tracking Cookies: We use standard localStorage instead of tracking cookies to persist session metadata.

3. How We Use Your Information

We use your data solely to:

• Provide the Service: Authenticate your account, manage your subscription tier, and route AI inference requests.
• Enforce Quotas: Track your "Voice Seconds" and "Vision Seconds" to manage your tier usage limits.
• Improve Auralis: Analyze technical metadata and usage patterns to fix bugs and enhance the user interface.
• Communicate: Send essential service updates, security alerts, and billing notices.

4. Sub-Processors & Data Sharing

To operate Auralis securely and at scale, we share necessary data with trusted third-party sub-processors. All sub-processors are vetted for GDPR compliance:

5. Cookies and Local Storage

• Strictly Necessary Cookies: We use secure, HTTP-only cookies (sb-[id]-auth-token) managed by Supabase. These are essential for keeping you logged in and securing your session.
• Local Storage: We use HTML5 localStorage to manage your client-side preferences (like dark mode and MCP settings) and to persist Mixpanel analytics identifiers without relying on invasive third-party tracking cookies.

6. Security & Control

• The "Clean Disconnect": The Auralis Desktop App features a master hardware-level kill-switch (Alt+Shift+A integration) that instantly terminates all active webcam, screen share, and microphone streams.
• Encryption: All data in transit is encrypted via TLS/SSL. Data at rest in our databases is encrypted to industry standards.

7. Your Data Rights (GDPR)

Because AnimaScribe is headquartered in Poland, we afford all users the rights protected under the General Data Protection Regulation (GDPR). You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Erasure (Right to be Forgotten): Delete your account and all associated "Memories" from our servers.
• Rectification: Correct inaccurate data in your profile.
• Data Portability: Export your user context and memories.

To exercise any of these rights, please email legal@auralis.technology. We will respond within 30 days.

8. Data Retention

We retain your account data and Memories for as long as your account is active. If you delete your account, your data will be permanently removed from our active Supabase databases within 30 days, and from secure backups within 90 days. Ephemeral AI processing streams are never retained by AnimaScribe.

9. Changes to this Policy

We may update this Privacy Policy as Auralis evolves. If we make material changes, we will notify you via email or a prominent notice within the Desktop Application before the changes take effect.

10. Contact Us

If you have questions about this Privacy Policy or our data handling practices, please contact us at:

AnimaScribe
Warsaw, Poland
support@auralis.technology