Legal

Privacy Policy

Last updated: August 30, 2026

Aora is operated by Aora Social, Inc., a Delaware corporation ("Aora," "we," "us"). This policy explains what we collect, how we use it, and the choices you have. Aora is available to anyone 13 or older.

What we collect

Account information. Your name, email address, profile photo, and bio. Your email is used to sign you in and to verify your account.

Content you create. Posts, photos, videos, Takes (short opinion posts), comments, ratings, and messages. Profile photos and bios are public content visible to other users.

Social activity. Who you follow, your close friends selections, ratings you give and receive, your crushes (see "Crushes" below), and engagement with other users' content.

Device and usage data. Device identifiers, push notification tokens, app usage information, and log data generated when you use the app.

Device permissions. If you save a shareable card to your photos, we ask for permission to ADD photos to your library. We never read your photo library with it. If you attach a photo or video to a post or message, that uses the separate photo-picker permission and we only receive what you choose.

We do not collect precise location data. We do not use your data for advertising and we do not sell it.

How we use it

To operate the app: showing your profile and content to other users, computing engagement scores and leaderboard placement, delivering notifications and messages.
To operate Crushes: checking your picks against other people's, and telling you both when a pick turns out to be mutual.
To verify your account.
To moderate content, enforce our Terms of Service, and respond to reports.
To send transactional emails (verification, account notices).
To maintain security and debug problems.

We share data only with service providers who process it on our behalf:

Supabase (database and authentication hosting)
Cloudflare (media storage and delivery)
Expo (app builds and push notification delivery)
Resend (transactional email delivery)
Apple (app distribution and push notifications)

We may also disclose information if required by law, or to protect the safety of users or the public. If Aora is involved in a merger or acquisition, user data may be transferred as part of that transaction.

Aora lets you share your content out of the app — as an image, as a link, or into another app such as Instagram, Snapchat, WhatsApp or Messages. Anything you share this way leaves Aora and is governed by wherever you send it, not by this policy.

Invite links. A link you create points at your content, and anyone who receives it can open a preview of it — including the photo it refers to and your username — without an Aora account. That is what makes the link work. Treat a link you create as public, and only share it with people you mean to reach. Links expire, and you can stop sharing one at any time by not sending it further.

Crushes

Aora lets you privately mark up to three people a week as a crush.

What we store. Who you picked, and when. We also keep a record of picks you have taken back, because the weekly limit counts the picks you have made rather than the ones you still hold.

What other people see. Nothing, unless it is mutual. Someone you pick is never told that it was you. They get one anonymous alert — delayed by a few hours, and never more than one a day — saying only that somebody has a crush on them. It never names you, and it never says how many people have picked them. If the two of you pick each other, and only then, you are both told and can message each other.

Taking it back. You can remove a crush at any time from the Crushes page. If it had already matched, removing it ends the match for both of you, and the other person is not notified.

Blocking. Blocking someone deletes any crush between the two of you, in both directions.

Deletion. Your crushes and your record of past picks are deleted when you delete your account.

Like everything else in the app, this information is stored in our database and is accessible to us as the operator. No other user of Aora can see who you have picked.

Content moderation

We review reported content and accounts. We may remove content or restrict accounts that violate our Terms of Service. Blocked users cannot view or interact with your content.

Data retention and deletion

Some of what you do is remembered so the app works: posts you have already seen or skipped are recorded so your feed does not repeat them, content you send in a group conversation stays visible to that group, and a crush you have taken back still counts against your weekly limit, so we keep a record of it.

You can delete your account at any time from the app's settings. Deleting your account removes your profile, content, and personal information from our systems, except where we are required to retain records for legal, safety, or security purposes. Media files are deleted from storage as part of account deletion.

Your rights

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. To exercise any of these rights, email us at the address below or use in-app account deletion.

Age requirement

Aora is for users 13 and older. We do not knowingly collect information from anyone under 13. If we learn an account belongs to someone under 13, we will delete it and its data. If you believe a user is under 13, contact us at the address below.

Changes

We may update this policy. If we make material changes, we will notify you in the app or by email. Continued use after changes take effect means you accept the updated policy.

Contact

Aora Social, Inc.
alon@joinaora.com