Privacy Policy

Last updated: September 24, 2026

Aimora ("the app", "we", "our") is a calm productivity app that helps you move toward your goals one step at a time. This Privacy Policy explains what data leaves your device, what we keep and for how long, and what choices you have. Aimora has no accounts: there is nothing to sign up for, and we never ask for your name, email or phone number.

1. Data Stored on Your Device

Your goals, daily progress, completed steps, streaks, notes and settings are stored on your device using Apple's SwiftData framework. The home screen widget, the Lock Screen widget and the Apple Watch app read that same on-device data; none of them sends it anywhere. Some of your content does leave the device when a step is generated, and section 3 describes exactly what.

2. iCloud Sync

If you are signed in to iCloud and iCloud Drive is enabled for Aimora, your data is synced across your Apple devices through your own private iCloud database (CloudKit). This sync is handled entirely by Apple, stays inside your Apple account, and is subject to Apple's Privacy Policy. We have no access to it, and sync is managed in your system settings rather than in the app.

3. AI Step Generation

Aimora writes each daily step with an AI language model. To produce a step that fits your goal and your day, the app sends the following to our own backend server:

No name, email or account identifier goes with any of this, because Aimora has none. Your full history is never needed for a single request.

Requests are routed through our Cloudflare Worker and processed by an OpenAI model. OpenAI acts as a processor for us and does not use this content to train its models; it may retain request data for a limited period for abuse monitoring under its own policies. Along with the request we send OpenAI a short irreversible hash derived from your device attestation key or, when attestation is unavailable, from your IP address. It exists so that a rate limit or a block can be scoped to one device instead of to the whole app, and it is never the raw value.

If AI is unavailable, Aimora keeps working with simpler built-in steps.

4. What We Keep on Our Server, and for How Long

We do not keep a copy of your goals, your steps or anything you write. What our server does keep is short-lived and listed here in full:

5. Analytics and Diagnostics

The app records anonymous, aggregate usage events such as "step completed", "generation timeout" or "feature opened". These contain no personal content and cannot be tied to an individual. No third-party analytics SDK is used, and no advertising or tracking SDK of any kind is present in Aimora.

Once a day, if diagnostics are enabled, the app sends a small technical pulse to our own server: the app version and build, the iOS version, the subscription tier, a coarse bucket for how long the app has been installed, crash and hang counts reported by Apple's MetricKit together with the system-generated crash signatures, median launch time, and the day's change in a handful of product counters such as sessions, steps completed and "too much for me" taps. The pulse never contains your goal, your steps, your reflections or check-ins, and it carries no device or account identifier, so separate pulses cannot be joined back into one person.

You can turn diagnostics off in Settings → Privacy details. When it is off, nothing is sent and nothing is kept.

6. Notifications

With your permission, Aimora sends reminders about your daily step and the occasional milestone. Almost all of them are scheduled and delivered on your device, with no server involved.

One exception is worth naming: to have tomorrow's step ready before you open the app, our server may send a silent overnight notification that carries no visible content and only wakes the app to prepare. For that, the app registers your Apple Push Notification token with our server, where it is stored with no other information about you and expires after 60 days. If you turn notifications off, no further pushes are sent and the stored token expires on its own.

7. Abuse Prevention

To keep our server from being used as a free proxy, the app proves it is a genuine copy of Aimora on a real device using Apple's App Attest. This produces an opaque key identifier that belongs to the device, not to you, and we never store it in its raw form: it is hashed before it is used for the daily counter described in section 4, and hashed again before any part of it reaches OpenAI.

8. Subscriptions and Payments

Aimora offers an optional subscription and a one-time purchase, including a free trial, managed entirely through Apple's App Store and StoreKit. We never see or store your payment details, and we receive no purchase history tied to you. For questions about billing, please refer to your Apple ID account settings or Apple's billing support.

9. Your Choices

10. Children's Privacy

Aimora is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

If you have any questions about this Privacy Policy, you can contact us at: support@vektramind.com.