Privacy Policy
Effective Date: January 1, 2026 · Last Updated: March 5, 2026
App: Aura Recovery · Package: io.softexforge.aura · Developer: Md Nasim Sheikh (nasimstg), operating as SoftexForge
🔒 TL;DR — Your Privacy Promise
Aura Recovery is offline-first. Your recovery data is stored exclusively on your device and never transmitted to our servers. We do not track you, we don't sync to the cloud, and we don't sell your information. The only time we touch the internet is to verify your in-app purchase through RevenueCat.
1. Introduction
This Privacy Policy describes how Md Nasim Sheikh (nasimstg), operating as SoftexForge ("we", "us", or "our"), collects, uses, stores, and protects your information when you use the Aura Recovery mobile application ("App") available on Google Play.
By downloading, installing, or using Aura Recovery, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Information You Provide (Stored Locally on Your Device Only)
All of the following data is stored exclusively in a local SQLite database on your device (aura.db). It is never transmitted to our servers or any third party, except as described in Section 3.
| Data Type | What is Stored | Purpose |
|---|---|---|
| Habit / Addiction Profile | Addiction type, category, start date, motivation, relapse count, cost/hours estimates | Core recovery tracking |
| Journal Entries | Date, mood rating (1–5), energy level (1–5), optional text notes, tags | Daily wellness logging |
| Check-In Records | Date, sobriety status, craving intensity (1–10) | Streak & relapse tracking |
| User Profile | Display name, Sparks balance, companion ID, theme & sound settings | App personalization |
| Inventory | Item IDs owned/equipped, purchase date | In-app shop |
| Wait List | Item name, price, date added, status | Impulse habit management |
| Quests | Quest IDs completed, completion date, XP earned | Gamification |
| Energy Entries | Energy level, timestamp, optional note | Energy tracking analytics |
2.2 Automatically Collected Information
We do not automatically collect any analytics, usage statistics, crash reports, or behavioral data from within the App itself.
2.3 Device Permissions
| Permission | Why It Is Needed |
|---|---|
INTERNET | Exclusively for in-app purchases via RevenueCat/Google Play Billing |
BILLING | Required to access Google Play in-app purchase APIs |
USE_BIOMETRIC | Optional biometric lock — handled entirely by your device's secure hardware; no biometric data is read or stored by us |
VIBRATE | Haptic feedback during interactions and SOS Panic Mode |
MODIFY_AUDIO_SETTINGS | Audio playback for breathing exercises and voice affirmations |
RECORD_AUDIO | SOS Panic Mode voice affirmations — processed locally, never recorded or transmitted |
READ/WRITE_EXTERNAL_STORAGE | Local data export/import backup file — all files remain on your device |
READ/WRITE_CONTACTS | Required by an underlying library dependency (expo-contacts). This App does not read, access, or use your contacts for any purpose |
SYSTEM_ALERT_WINDOW | Enables SOS Panic Mode overlay to display over other apps during a craving emergency |
3. Third-Party Services
3.1 RevenueCat (In-App Purchases)
Aura Recovery uses RevenueCat (RevenueCat, Inc.) to process in-app purchases. When you initiate a purchase, RevenueCat receives your Google Play purchase receipt and an anonymous app user ID generated by the RevenueCat SDK. RevenueCat does not receive your name, email address, addiction data, journal entries, or any other personal information entered in the App.
RevenueCat's data processing is governed by their own Privacy Policy: revenuecat.com/privacy
3.2 Google Play Billing
All payment transactions are processed by Google Play (Google LLC). We do not receive, store, or process your payment card details. Google's payment processing is governed by Google's Privacy Policy.
3.3 What We Do NOT Use
Aura Recovery does not integrate:
- Advertising networks or ad SDKs
- Analytics platforms (Firebase Analytics, Mixpanel, Amplitude, etc.)
- Social media SDKs (Facebook, TikTok, etc.)
- Crash reporting services (Sentry, Crashlytics, etc.)
- Any cloud database, backend server, or external data storage
4. How We Use Your Information
The locally stored information is used solely to:
- Provide core App functionality (tracking streaks, milestones, journal entries)
- Personalize your experience (companion selection, theme, settings)
- Enable the SOS Panic Mode to display your personal "My Why" motivation
- Calculate statistics shown within the App (money saved, time reclaimed, health milestones)
- Verify your Pro subscription status via RevenueCat
We do not use your data for advertising, profiling, analytics, or any purpose beyond operating the App features you directly use.
5. Sensitive Health Information
Aura Recovery processes information that may constitute health-related or sensitive personal data, including the type of addiction or habit you are recovering from, mood, energy, and craving records, and relapse history.
This information is treated with the highest level of care. It is stored exclusively on your device, optionally protected by your device's biometric lock, never transmitted to our servers or any third party, and never used for any commercial, advertising, or analytical purpose.
6. Data Storage and Security
All personal data is stored in a local SQLite database on your device. We do not operate servers or cloud infrastructure that stores user data.
- The App supports an optional biometric lock (fingerprint / face) to prevent unauthorized access on shared devices
- Purchase verification is handled by RevenueCat using encrypted connections (TLS)
- The App does not transmit personal data over the internet
Your data remains on your device for as long as the App is installed. You may delete all data at any time through Settings → Delete All Data. Uninstalling the App removes the local database from your device.
7. Data Export and Backup
The App provides a Data Export feature in Settings that allows you to export all your local data as a JSON file to your device storage, and import a previously exported backup to restore your data. This export/import process is entirely local. Exported files are saved to your device and are your sole responsibility once exported.
8. Children's Privacy
Aura Recovery is intended for users 18 years of age and older. The App addresses topics including substance addiction, alcohol use, gambling, and pornography, which are not appropriate for minors. We do not knowingly collect personal information from individuals under the age of 18. The App is rated Mature (17+) or Adults Only on Google Play.
9. Your Rights
9.1 Access and Portability
You can access all your data within the App at any time. You may export your complete data via Settings → Export Data.
9.2 Deletion
You may delete all your data at any time via Settings → Delete All Data. This action is irreversible.
9.3 Correction
You may modify your profile information, journal entries, and settings directly within the App.
9.4 For EU/EEA Residents (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the GDPR:
- Legal Basis: Consent (given by using the App) and performance of a contract
- Right to Erasure: Request deletion of data held by RevenueCat by contacting contact@softexforge.io
- Right to Object: You may object to RevenueCat processing by not making in-app purchases
- Data Controller: Md Nasim Sheikh (nasimstg), contact@softexforge.io
9.5 For California Residents (CCPA)
We do not sell your personal information. The only third party that receives any identifier is RevenueCat (for purchase verification), using an anonymous ID. You have the right to know, delete, and non-discrimination as described herein.
10. Notifications
The App may send local push notifications to remind you of daily check-ins or streak milestones. These notifications are scheduled locally on your device using expo-notifications, not sent from our servers, and are optional and controllable through your device's notification settings.
11. In-App Purchases
Purchase transactions (Pro Monthly Subscription, Pro Lifetime Purchase) are processed by Google Play Billing and RevenueCat. We do not store payment information. Subscription management, cancellation, and refund requests are handled through your Google Play account. For refund requests, please contact Google Play support or reach out to us at contact@softexforge.io.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy and notify you through the App or through an updated version on our website. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy:
Md Nasim Sheikh (nasimstg)
Operating as: SoftexForge
Email: contact@softexforge.io
Website: aura.softexforge.io/privacy
We will respond to all legitimate requests within 30 days.