Legal
Privacy Policy
AuraFit turns workouts into a game: you earn Aura, keep streaks and climb ranks. To do that we store a small amount of data about you. This page explains what, why, and how to remove it.
The short version
- We store your email, your public profile and your quest and workout history so your progress follows you.
- Your public profile stats can be shared as a hunter card image and a public page at
/u/your-handle. These never include your email or activity history, and they are kept out of search engines. - We do not show ads, and we do not sell or rent your personal data to anyone.
- Your data is hosted by our database and authentication provider, Supabase.
- You can delete your account and its data at any time from your account page.
What we collect
Account data
Your email address and a securely hashed password. If you choose Sign in with Google, Google shares your email address, name and profile picture with us; we never receive your Google password.
Profile data
Your display name, handle, avatar, title and bio, and game stats such as Aura points, rank, level, attribute scores and streak. Your profile and game stats are public: other people can see them on leaderboards, next to workout drops you publish, and on your public hunter card (see Public hunter cards). Your email address is never shown publicly.
Activity data
A log of the quests and workouts you complete (what, when and how much Aura it earned). This history is private to you. Workout drops you publish as a creator are public.
Technical data
Session cookies that keep you signed in, and standard server logs (such as IP address, browser type and request time) that we and our providers use to run and secure the service. The web app also stores preferences such as theme and sound, and demo-mode progress, in your browser's local storage; that data stays on your device.
We do not use advertising or cross-site tracking cookies, and we do not collect precise location, contacts or health records from your device.
Public hunter cards
Every account has a shareable hunter card: an image (for example for Stories or posts) and a public page at /u/your-handle. Anyone with the link can view them. They show only fields that are already public on the leaderboard: your display name, handle, rank, level, Aura points, the four attribute scores (STR, AGI, END, REC), your streak and your workout count.
They never show your email address, avatar, bio, fitness goal or level, sign-in details, or your quest and workout history. Hunter card pages ask search engines not to index them, and we do not list them in our sitemap. Cards are cached for a few minutes, so a change can take a short while to appear.
Nothing is posted anywhere unless you choose to share it. When you share to another service (such as X, WhatsApp or Telegram), that service's own privacy policy applies to what you post there. Your card exists for as long as your account does; deleting your account removes the card image and the page. Copies you already posted elsewhere stay where you posted them.
How we use it
- To create and secure your account and keep you signed in.
- To run the game: award Aura, track streaks, show leaderboards and your quest board.
- To prevent cheating and abuse, and to keep the service reliable.
- To send essential account emails, such as sign-up confirmation and password resets.
We do not use your data for advertising, and we do not make automated decisions about you that have legal effects.
How long we keep it
We keep your data for as long as your account exists. When you delete your account, your profile, activity history and published workout drops are deleted immediately from our live database. Copies in our providers' encrypted backups are removed as those backups expire on their regular schedule.
Deleting your account
Sign in on the web, go to Account and choose Delete account (the same account works in the mobile app). This permanently removes your sign-in, profile, quest and workout history, and any workout drops you published. Squads you led stay up for their other members, without you as leader. Deletion cannot be undone.
If you can no longer sign in, email digital@brilworks.com from the address on your account and we will delete it for you.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict how we use it. You can edit your profile in the app and delete your account yourself; for anything else, email digital@brilworks.com. You also have the right to complain to your local data protection authority.
Security
Data is encrypted in transit (HTTPS) and access to it is restricted by row-level security rules in our database. Passwords are hashed by our authentication provider and are never visible to us. No system is perfectly secure, so please use a unique password.
Children
AuraFit is not intended for children under 13 (or the minimum age required in your country). If you believe a child has created an account, contact digital@brilworks.com and we will delete it.
Changes to this policy
If we make material changes, we will update the date at the top of this page and let you know in the app or by email before they take effect.
Contact
Questions or requests about your privacy: digital@brilworks.com.