Note: this is a clear, good-faith policy written to match how the site works today. It is not legal advice. Have it reviewed by qualified counsel before launch and as the product and data flows evolve.
Who we are
Auromone ("we", "us") is a wearable health brand based in Québec, Canada. You can reach us about anything in this policy at hello@auromone.com.
What we collect
When you join the waitlist through the form on this site, we collect:
- your email address;
- which page you joined from and any plan you selected (for example, the sensors plan);
- an approximate country, derived from your IP address by our host;
- basic technical details such as your browser type (user agent) and the time of the request.
We also collect privacy-friendly, aggregate site analytics (page views and similar) that are not used to identify you. We do not currently run advertising trackers, and there is no cortisol or health-sensor data involved at this stage, because the product has not shipped.
How we use it
- to hold your waitlist spot and contact you about it;
- to send the confirmation email and occasional founder updates you can opt out of at any time;
- to understand, in aggregate, how the site is used so we can improve it.
Health data from the Auromone Curve and app
This section describes how we will handle information from the Auromone Curve device and its companion app. It applies once you use the device and app; if you are only on the waitlist today, only the sections above apply to you.
What the device and app collect. To show you your cortisol curve and related insights, the app processes:
- raw and processed cortisol sensor readings from the Curve, taken roughly every 15 minutes;
- supporting sensor signals that make those readings accurate (skin-proximal temperature, humidity, skin conductance, and sensor contact quality);
- calibration information for your device, including any saliva reference tests you choose to enter;
- derived metrics we compute from the above, such as your daily rhythm and trends;
- a non-identifying device identifier so multiple sensors can be grouped under your account.
We do not need your name or email to analyze your cortisol data, and we deliberately keep them out of our analytics and modelling systems (see pseudonymization below).
Pseudonymization — your identity is kept separate from your health data
Your account details (name, email) are stored in a separate, access-controlled identity system. Your health data is labelled only with a random, opaque code (a "pseudonym") — never your name or email. The systems that store and analyze health data cannot, on their own, connect that data back to you; only the separate identity system holds the link, and access to it is restricted and logged. This is pseudonymization: it protects your identity while still letting the app track your own readings over time so it can personalize your insights.
Your consent — two separate choices
Cloud features are consent-based. Because health data is sensitive, we ask for your express, opt-in consent, and we ask for two things separately so you stay in control:
- Tier 1 — cloud processing for your own insights. To provide AI-based predictions and insights, we need to process your data in our cloud. This is required only for those AI features. If you don't enable it, the device and app still work with on-device features — you simply won't have the cloud AI features.
- Tier 2 — help improve Auromone (optional). You can separately choose to let your de-identified data help improve our cortisol models and research. This is entirely optional and is never required to buy or use the product or any feature, and you can turn it off at any time.
You can withdraw either consent at any time in the app or by emailing us. Withdrawing stops the corresponding use going forward and, where applicable, we delete the associated data.
Where your information is stored
Waitlist records are stored in Canada (our database is hosted in the Canada Central region, Montréal). To send email and manage the mailing list we use an email provider that may process your email address on servers in the United States. Our site and forms are served by our hosting provider. In all cases your information is protected in transit and at rest, and access is limited to what's needed to run the waitlist.
Health data from the Curve and app is stored in Canada (Amazon Web Services, Montréal region — ca-central-1), encrypted in transit and at rest, and kept logically separate from the identity system that holds your name and email.
Who we share it with
We do not sell your personal information, and we never will. We share it only with the service providers that help us operate, and only for that purpose:
- a database provider (system of record for the waitlist, hosted in Canada);
- an email provider (to send your confirmation and updates);
- a hosting and analytics provider (to serve the site and measure aggregate traffic).
We may disclose information if required by law, or to protect our rights and the safety of others.
How long we keep it
We keep waitlist information for as long as your waitlist spot is active, and afterwards only as long as needed for the purposes above or as the law requires. You can ask us to delete it sooner at any time.
We keep your health data for as long as your account is active and you have cloud features enabled, and afterwards only as long as needed for the purposes described here or as the law requires. When you ask us to delete it, we sever the link between you and your pseudonymized data and delete your stored readings; any remaining aggregates are then irreversibly anonymized.
Your choices and rights
Wherever you live, you can email hello@auromone.com to access, correct, or delete your information, or to unsubscribe. Every email we send also includes an unsubscribe link. For health data, you can also withdraw either consent (Tier 1 or Tier 2) at any time in the app or by email, and request deletion (erasure) of your readings.
PIPEDA (Canada)
For people in Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). That means we collect only what we need with your consent, use it for the purposes described here, keep it accurate and secure, store waitlist data in Canada, and give you the right to access and correct it. You may also contact the Office of the Privacy Commissioner of Canada if you have an unresolved concern.
Québec (Law 25)
Auromone is based in Québec, and we follow Québec's Act respecting the protection of personal information in the private sector, as modernized by "Law 25." In practice this means we design for privacy by default, obtain your express consent before using sensitive information such as health data, and complete a privacy impact assessment for systems that handle personal information. We have a designated Privacy Officer responsible for our practices, reachable at hello@auromone.com. You may also contact the Commission d'accès à l'information du Québec if you have an unresolved concern.
GDPR (EU / UK)
If you're in the European Economic Area or the United Kingdom, our legal basis for processing your email is your consent (which you can withdraw at any time) and our legitimate interest in operating a waitlist. You have the right to access, correct, delete, restrict, or port your data, and to object to processing. Because email is sent via a provider in the United States, that transfer is made using appropriate safeguards. To exercise any right, email us; you may also lodge a complaint with your local data protection authority.
Security
We use reputable providers, encryption in transit and at rest, and least-privilege access. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.
Children
The site and product are intended for adults. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we'll remove it.
Changes to this policy
We'll update this page as the product and our practices evolve. This version has been expanded to describe how the Curve device and app handle health data ahead of launch; we'll continue to refine it and will change the "last updated" date above when we do.
Questions about your privacy? Email hello@auromone.com. This document is provided in good faith and is not legal advice.