Privacy Policy

Introduction

This Privacy Policy describes how Technologies Aurealis Inc. (“Aurealis,” “we,” “us,” or “our”) collects, uses, stores, and protects personal information when you use the Ethos mobile application (“Ethos” or the “App”). Ethos is a Christian self-improvement application that delivers AI-generated devotionals, scripture interpretations, and prayers based on emotions and reflections you choose to share.

By using Ethos, you consent to the practices described in this Policy. If you do not agree, please do not use the App.

1. Information We Collect

To deliver the Ethos experience, we collect the following categories of information:

• Account information: email address and authentication identifiers, used to create and secure your account.
• Devotional inputs: the emotions you select, optional reflection text you submit (“heart” / “specify” entries), and the scripture verses associated with your sessions.
• Generated content: the devotionals, prayers, and interpretations produced for you, along with your saved or favourited entries.
• Subscription status: purchase, renewal, and entitlement information for Ethos Pro, processed through Apple and RevenueCat.
• Usage analytics: de-identified product analytics (screen views, feature interactions, retention events) collected through PostHog to help us improve the App.
• Device information: device model, operating system version, language, and the Apple Push Notification Service (APNs) token if you enable notifications.

We do not collect contacts, photos, location, health data, or microphone input.

2. Third-Party AI Processing

When you submit text to Ethos features that use AI (Bible Chat, Go Deeper conversations, or the optional reflection text you write when selecting your daily anchor), your input is transmitted over TLS to OpenAI's servers for processing.

• What is sent: only the text you typed (your chat messages, your reflection text, the emotion you selected). We do NOT send your name, email address, payment information, location, or any device identifier to OpenAI.
• OpenAI's retention: per OpenAI's API data usage policy, this data may be retained by OpenAI for up to 30 days for abuse and misuse monitoring, after which it is automatically deleted.
• Training: OpenAI does NOT use this data to train, improve, or fine-tune their models.
• Aurealis storage:messages you report via the in-app “Report” button are stored in our content_reports database (linked to your account) for up to 1 year for safety review, then deleted.

3. Religious and Faith-Related Information

Ethos is a Christian devotional application. The emotions you select, the prayer texts you write, and your scripture history may reveal information about your religious belief or practice. Under the EU General Data Protection Regulation (Article 9) and Quebec's Act respecting the protection of personal information in the private sector (Law 25), this is treated as a special category of personal information.

We process this information solely to deliver the devotional experience you request. The legal basis for this processing is your explicit consent, given when you sign up and when you submit each devotional input. This information is never used for advertising, behavioural profiling, training third-party models, or sold to any party.

4. Service Providers

We rely on the following service providers to operate Ethos. Each is contractually bound to handle your information securely and only for the purposes described.

• Supabase — authentication and database hosting (servers located in the United States, region us-east-1).
• OpenAI — AI generation of devotionals, prayers, and scripture interpretations (United States).
• RevenueCat — subscription management and entitlement validation.
• PostHog — product analytics (de-identified).
• Apple Push Notification Service (APNs) — delivery of optional notifications.
• Apple App Store — payment processing for Ethos Pro subscriptions.

5. International Data Transfers

Several of our service providers (including Supabase and OpenAI) operate servers located in the United States. If you use Ethos from Quebec, the European Economic Area, the United Kingdom, or other jurisdictions outside the United States, your personal information will be transferred to and processed in the United States. We rely on standard contractual clauses and provider commitments to safeguard transferred data.

6. How We Use Your Information

• To create and authenticate your account
• To generate the devotionals, prayers, and interpretations you request
• To save your history and personalize content within Ethos
• To deliver and validate your subscription
• To send notifications you have enabled
• To diagnose technical issues and improve the App through aggregated analytics
• To comply with legal obligations

7. We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to any third party. We do not share your information for cross-context behavioural advertising. This statement is provided in compliance with the California Consumer Privacy Act (CCPA) and Quebec Law 25.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete your account and associated personal information
• Withdraw consent for processing at any time
• Receive a copy of your information in a portable format
• Lodge a complaint with your local data protection authority

To exercise these rights, use the in-app option described below or contact our Privacy Officer at privacy@aurealis.live.

9. Account Deletion

You can permanently delete your Ethos account at any time from Settings → Delete my account. When you delete:

1. Your authentication identity is removed from our authentication provider (Supabase).
2. Cascading deletion removes all your personal data: profile, daily logs, verse history, AI conversation history, content reports.
3. If you signed in using Sign in with Apple, we call Apple's /auth/revokeendpoint to invalidate the refresh token, removing the “Sign in with Apple” association both at Apple and on our servers.
4. RevenueCat and Apple may retain transaction history (purchase records) indefinitely for tax compliance — this data is not accessible to us beyond aggregate metrics.

Deletion is processed within 30 days; some technical backups may persist for up to 90 days before being purged automatically.

If you are unable to access the in-app deletion option, you may also request deletion by emailing privacy@aurealis.live.

10. Data Retention

We retain your personal information for as long as your account is active. Once you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law.

11. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, role-based access controls, and audit logging. No system is perfectly secure; if we become aware of a security incident affecting your information, we will notify you in accordance with applicable law.

12. Children's Privacy

Ethos is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Quebec Law 25 — Privacy Officer

In accordance with Quebec's Act respecting the protection of personal information in the private sector, our designated Privacy Officer can be reached at:

privacy@aurealis.live

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated through the App or by email. The “Last Updated” date at the top of this page reflects the most recent revision.

15. Governing Law

This Privacy Policy is governed by the laws of the Province of Quebec and the laws of Canada applicable therein. Users in the European Union or United Kingdom may lodge complaints with their national data protection authority. For users in the United States, this Privacy Policy is intended to comply with applicable state and federal requirements.

16. Contact Us

For questions about this Privacy Policy or your personal information:

Technologies Aurealis Inc.
Montréal, Quebec, Canada
privacy@aurealis.live

© 2026 Technologies Aurealis Inc. All rights reserved.

See also: Ethos Terms of Use · About Ethos