Privacy Policy

Who we are

Aurorra (“Aurorra”, “we”, “us”) operates aurorra.earth, a holistic-medicine research platform that makes published scientific research easier to find and understand. This policy explains what information we collect, how we use it, and the choices you have. It applies to everyone who uses the site, with or without an account.

What we collect

• Account information. When you create an account: your email address and a password (stored only as a secure hash — we never see or store your plain-text password).
• Profile information. Your display name and any interests or focus topics you choose to add to personalize your experience.
• Activity on the platform. Papers you save and, when you are signed in, searches you run — used to power your dashboard and improve your recommendations.
• Reviews you choose to submit. If you submit a review through a review invitation, we collect the content you provide — which may include health experiences such as conditions that improved, outcomes you noticed, and herbs or botanicals that were part of your care — along with the attribution you select (verified, first name, initials, or anonymous).
• Practitioner information. If you apply to be listed as a healer: your name, practice details, contact information, and the credentials you submit for verification.
• Technical information. Standard server logs (IP address, browser type, pages requested) used for security and to keep the service running.

Health information deserves special care

Reviews on Aurorra can describe personal health experiences. Sharing them is entirely voluntary, and the review form lets you choose how you are identified — including full anonymity. Published reviews are public: please do not include anything in a review that you would not want visible on a practitioner’s public profile. We do not use your health disclosures for advertising, and we do not sell them to anyone.

How we use information

• To provide the service: accounts, saved papers, personalized dashboards, search.
• To publish content you have chosen to make public (reviews, practitioner profiles).
• To verify practitioner identities and credentials before they become discoverable.
• To send transactional email — account verification, password resets, review invitations.
• To keep the platform secure and to debug problems.

We do not sell your personal information, and we do not show third-party advertising.

Who we share information with

We share information only with the service providers that run the platform, and only so they can provide their services to us:

• Supabase — database and authentication hosting.
• Vercel — website hosting.
• Railway — application programming interface (API) hosting.
• Resend — transactional email delivery.

Content you choose to publish (reviews with your chosen attribution, practitioner profiles) is visible to anyone who visits the site. We may also disclose information if required by law, or to protect the safety of our users and the platform.

Cookies and local storage

We use browser local storage to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

Retention and deletion

We keep your information for as long as your account exists. You can delete saved papers and update your profile at any time from your dashboard. To delete your account and associated personal information, contact us at the address below; we will action deletion requests within 30 days, except where the law requires us to retain certain records.

Your rights

Depending on where you live (including under the GDPR and the CCPA), you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below. We will never discriminate against you for exercising them.

Security

Information is encrypted in transit and encrypted at rest by our hosting providers, access to production systems is restricted, and passwords are stored only as secure hashes. No system is perfectly secure, so we cannot guarantee absolute security — but protecting the trust you place in us, especially around health experiences, is a founding commitment of this platform.

Children

Aurorra is not directed at children. You must be at least 18 years old to create an account. If you believe a minor has provided us personal information, contact us and we will delete it.

International users

Aurorra is operated from the United States and information is processed on servers located there. By using the platform you understand that your information will be transferred to and processed in the United States.

Changes to this policy

If we make material changes to this policy we will update the date at the top of this page and, for significant changes, notify account holders by email.

Contact

Questions or requests about your privacy: info@aurorra.earth