Privacy Policy

1. Who We Are

Arora is owned and operated by The Not So Common Gal LLC, a sole proprietorship based in the State of New Jersey. If you have any questions about this Privacy Policy, you can contact us at:

The Not So Common Gal LLC
Email: info@thenotsocommongal.com
Website: thenotsocommongal.com

2. Information We Collect

We only collect information that is necessary to provide you with the Arora experience. Here is exactly what we collect and why:

2.1 Information You Provide Directly

• Email address — used to create and manage your account and send important notifications
• Full name — used to personalize your experience within the App
• Age range — used to tailor Arora's guidance to your stage of life (e.g., 25–34, 35–44)
• Relationship status — used to personalize conversations and community experience
• Career stage — used to provide relevant career and financial guidance
• Journal entries — stored privately and used only to power your personal journaling experience
• Profile photo — optionally uploaded to personalize your profile and community presence
• Voice input — when you use voice to speak with Arora, your speech is processed by your device's speech recognition service (Apple or Google) and converted to text before being sent to our AI service
• AI conversation history — stored to provide continuity in your Arora sessions
• Community posts and comments — shared within the Arora community as you choose

2.2 Information We Do Not Collect

We do not collect:

• Your location or GPS data
• Device identifiers or hardware information
• Browsing history outside the App
• Biometric data of any kind
• Payment information (we use secure third-party processors for subscriptions)

3. How We Use Your Information

We use the information we collect solely to:

• Create and manage your account
• Provide and improve the Arora experience
• Personalize AI conversations and recommendations based on your profile
• Enable participation in the community feed
• Send you important account communications (password resets, security alerts, etc.)
• Send optional product updates and announcements (you may opt out at any time)
• Comply with applicable legal obligations

We do not use your information for advertising, profiling for third parties, or any purpose not listed above.

4. AI-Powered Features and Your Data

Arora uses artificial intelligence technology powered by Anthropic to deliver personalized conversations and guidance. Here is how your data interacts with AI:

• Your conversation history is used to provide context within your Arora sessions
• We do not use your personal conversations to train AI models
• Anthropic processes conversation data in accordance with their own privacy policy, which you can review at anthropic.com/privacy

We encourage you to avoid sharing highly sensitive information (such as financial account numbers, passwords, or government ID numbers) in your AI conversations.

5. Your Journal and Private Content

Your journal entries are private by design. They are:

• Stored securely in our database with encryption at rest
• Accessible only to you
• Never shared with other users, third parties, or advertisers
• Never used to train AI models

Community posts are visible to other Arora members within the App. Please be mindful of what you choose to share publicly.

6. How We Share Your Information

We do not sell, rent, or trade your personal information. Period.

We may share limited information only in the following circumstances:

6.1 Service Providers

We work with trusted third-party service providers who help us operate the App, including:

• Supabase — secure database and authentication infrastructure
• Anthropic — AI conversation processing
• Expo / EAS — mobile app building and distribution
• Netlify — web application hosting
• Railway — secure backend API infrastructure

These providers are contractually required to protect your data and may not use it for any purpose other than providing services to us.

6.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of The Not So Common Gal LLC, our users, or the public.

6.3 Business Transfers

In the unlikely event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Community posts you have made may remain visible until manually deleted by you or removed by us under our community standards.

8. Data Security

We take the security of your data seriously and implement industry-standard safeguards including:

• Encryption of data at rest and in transit
• Secure authentication through Supabase
• Row-level security policies that ensure you can only access your own data
• Regular security reviews of our infrastructure

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at info@thenotsocommongal.com.

9. Your Rights and Choices

You have the following rights regarding your personal information:

• Access — you may request a copy of the personal information we hold about you
• Correction — you may update or correct your account information at any time through the App settings
• Deletion — you may request deletion of your account and personal data
• Opt-out — you may opt out of non-essential communications at any time
• Portability — you may request an export of your data in a machine-readable format

To exercise any of these rights, please contact us at info@thenotsocommongal.com. We will respond to your request within 30 days.

10. Children's Privacy

Arora is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a user under 18, we will promptly delete that information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us at info@thenotsocommongal.com.

11. Cookies and Tracking

The Arora mobile app does not use cookies. The web version of Arora (arora.thenotsocommongal.com) may use essential session cookies solely to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

We do not track your activity across other websites or apps.

12. Third-Party Links

The App may contain links to third-party websites or resources. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the effective date at the top of this document and notify you via email or in-app notification. Your continued use of the App after any changes indicates your acceptance of the updated policy.

We will never make changes that reduce your privacy rights without providing advance notice and, where required, obtaining your consent.

14. Governing Law

This Privacy Policy is governed by the laws of the State of New Jersey. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts located in New Jersey.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to us:

The Not So Common Gal LLC
Email: info@thenotsocommongal.com
Website: thenotsocommongal.com

We are committed to responding to all privacy-related inquiries within 30 days.