Privacy Policy
Last updated: November 11, 2026
1. Introduction
AuraBooks ("AuraBooks", "we", "our", or "us"), provided by Growth Asteroid, is a bookkeeping, invoicing, estimates and inventory app for small businesses, available on iPhone (iOS). This Privacy Policy explains what information we collect, how we use it, and how we keep your business data secure.
2. Our promise
We do not sell your business data, we do not use your invoices to train public AI models, and we do not build profiles for advertising. We do not track you across other apps or websites.
3. Information we collect
Account information. When you register with an email and password, we collect your email address and a hashed password managed by Supabase Auth; we never store your password in plain text. If you use Sign in with Apple, we receive your name and email address from Apple. If you use Apple's "Hide My Email", we receive only the private relay address Apple provides.
Business data you enter in the app, including:
- Business name, address, logo, industry and contact details
- Customer and vendor names, phone numbers and email addresses
- Estimates, invoices, line items and payment history
- Products, services, rates and inventory records
- Expenses, bills, purchase orders and receipt images
- Team member email addresses and roles
- Reminders and to-do items
Device and usage data such as app version, operating system version, crash logs and error diagnostics, and session identifiers used by Supabase.
We do not collect your GPS location, contacts or microphone data. The camera and photo library are used only for images you choose to attach (receipts, product photos, your logo, signatures). Face ID / biometric unlock is handled on your device by Apple; your biometric data never leaves your device.
Subscription data. Subscriptions are processed by the Apple App Store. We never receive your payment card details; we receive only a transaction identifier from Apple to activate and keep your plan (Free, Starter or Booster) in sync on renewal, cancellation or refund.
4. How we use your information
| Purpose | Legal basis |
|---|---|
| Providing and improving the app's features | Contract / legitimate interest |
| Syncing your business data across devices | Contract |
| Sending transactional emails (sign-up confirmation, password reset, invitations, reminders) | Contract |
| Monitoring crashes and errors | Legitimate interest |
| Verifying your subscription | Contract |
5. Storage and security
Your data is stored on Supabase infrastructure (PostgreSQL with row-level security). Every record is scoped to your business account; no other business can read your data. Data is encrypted in transit (TLS 1.2+). Images are kept in Supabase Storage with access-controlled URLs.
6. Sharing and sub-processors
We do not sell your personal or business data. We share data only with these sub-processors, strictly to run the service:
| Sub-processor | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Apple App Store | In-app purchases and subscription verification |
| Resend | Sending transactional and reminder emails |
7. Team access
When you invite a team member to your business, they can view and work with your business data according to the role you assign (for example Owner, Admin or Staff). You are responsible for managing access and removing people who should no longer have it.
8. Retention and account deletion
- Your data is kept as long as your account is active.
- You can permanently delete your account and its data in the app: Settings → Security → Delete Account. This removes your login and the business data you own.
- You can also request deletion by emailing us.
- After deletion, your data is removed from our active systems promptly and from routine backups within 30 days, except where the law requires us to keep certain records.
Cancelling a subscription does not delete your account; it returns you to the Free plan.
9. Children
AuraBooks is a business app for users aged 18 and older. We do not knowingly collect data from children under 13.
10. Your rights
Depending on where you live, including under US state privacy laws such as the California Consumer Privacy Act, you may have the right to access, correct, delete or export your personal data, and to withdraw consent. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, email us.
11. Changes
We may update this policy from time to time. Changes are shown by the "Last updated" date above. Continued use of the app after changes means you accept them.
12. Contact
For privacy questions, data requests or account deletion: support@aimzsuite.com
Growth Asteroid — Paris Mall, Burma Bridge, Islamabad, Pakistan