Privacy Policy

This explains what RefineAura collects, why, who we share it with, and the rights you have over it. The data controller is AxiomFrame Media Inc., 30 North Gould Street, Ste R, Sheridan, WY 82801, USA.

1. What we collect

• Your quiz answers, including the gender and age range you select: to build and personalize your plan. We save your answers against a random device identifier as you answer them, before you give us an email address, and we use them to improve the quiz.
• Your email address: to give you access and send you transactional emails (confirmation, cancellation). If you log in, we email you a one-time code; there is no password to store.
• Payment information: handled directly by Stripe, our payment processor. We receive a customer reference and your subscription status; we never see or store your full card number. If you subscribe inside the mobile app, payment is taken by Apple or Google through your app store account instead, and we receive only your subscription status.
• Progress, streaks and ratings: which lessons you’ve completed, your practice streak, and any star ratings or feedback you choose to send us after a session.
• Practice recordings (Speech Analyzer): if you use the Speech Analyzer, we collect the audio you record, a transcript of it, and the scores and feedback we generate from it. The microphone is used only while you are recording, recordings are stored privately against your account, and nothing is recorded in the background.
• Notification token: if you turn on reminders or notifications in the app, a device token so notifications can be delivered to your device.
• Device and analytics data: a device identifier, IP address, browser type, and how you moved through the funnel, collected via our own analytics and the advertising tools below.

2. How we use it

• To deliver the service and personalize your plan.
• To transcribe and score your practice recordings and give you feedback on them.
• To take payment and manage your subscription.
• To send you transactional emails about your account and billing.
• To send you the practice reminders you turn on (and only those).
• To measure and improve our advertising, and to prevent fraud and abuse.

We do not sell your personal information. We do not add you to a marketing list without your consent. The emails you get are the ones you need to recognise and control your subscription.

3. Legal bases (UK/EU visitors)

Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (to deliver the service you paid for), consent(for advertising and non-essential cookies, which you can withdraw), and legitimate interests (to secure the service and understand how our funnel performs, balanced against your rights).

4. Who we share it with

We use a small set of processors, each only for what their name suggests:

• Stripe: payment processing and subscription billing on the website.
• RevenueCat: managing app-store subscriptions bought inside the mobile app (it receives an account identifier and purchase status from Apple/Google, never your card details).
• Resend: sending our transactional emails.
• Vercel: hosting the website.
• Supabase: account login, our database, and private storage of your progress, streaks, ratings and practice recordings.
• OpenAI: transcribing and scoring your practice recordings, and processing the text you submit to practice tools (such as the Conversation Builder and Intro Builder) to generate their suggestions. Under its API terms, OpenAI does not use this data to train its models.
• Apple (APNs) and Google (Firebase Cloud Messaging): delivering app notifications you’ve turned on — Apple’s service on iPhone and iPad, Google’s on Android.
• Amplitude: product analytics inside the app and on the website — which screens are opened and which features are used, so we can see where the product is confusing. This includes session replay, a recording of on-screen activity in your own session. When you are signed in, Amplitude and Statsig receive your account identifier (a random ID, never your email address) so that your use of the website and the app is counted as one person.
• Statsig: running feature experiments, so we can compare two versions of a screen and keep the one that works better.
• Meta and Google: advertising measurement (see the Cookie Policy). These let us know that ads led to sign-ups so we can spend responsibly.

We may also disclose information if the law requires it, or to protect our rights, users, or the service.

5. International transfers

We are based in the United States and our processors may store data in the US and elsewhere. Where we transfer data out of the UK/EU, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. How long we keep it

We keep your account and billing records for as long as your subscription is active and for a reasonable period afterwards to meet legal, tax, and dispute-resolution obligations. When it is no longer needed, we delete or anonymise it. You can ask us to delete your data sooner (see your rights below).

You can also delete your account yourself from the Account page. That immediately removes your profile, progress, streaks, ratings, practice recordings and transcripts, and notification tokens, and stops any web subscription from renewing. Billing records that the law requires us to keep are retained by our payment processor.

7. Your rights

Depending on where you live (including under UK/EU GDPR and the California CCPA/CPRA) you can ask us to:

• access a copy of your personal data;
• correct or delete it;
• port it to another service;
• object to or restrict certain uses, and withdraw consent at any time.

To exercise any of these, email help@refineaura.com. We won’t charge you or treat you differently for asking. If you’re in the UK or EU and unsatisfied, you may also complain to your local data-protection authority (in the UK, the ICO).

8. Children

RefineAura is for people aged 13 and over, and anyone under 18 needs a parent or guardian’s permission. We do not knowingly collect data from children under 13. If you believe a child has given us data, email help@refineaura.com and we will delete it.

9. Security

We use industry-standard measures to protect your data, including encrypted connections and tokenized payment handling through Stripe. No method is perfectly secure, but we take it seriously and act quickly if something goes wrong.

10. Changes and contact

If we change this policy we’ll update the date above and, for material changes, tell you directly. Questions or requests: help@refineaura.com.