Idea on the shelf/ideas/aura-crm/privacy

Aura CRM Privacy Policy

What Aura CRM collects, what it is used for, and how long it is kept.

Last updated
November 13, 2026
Applies to
Aura CRM (Web, Android)

Overview

This policy covers Aura CRM: a voice-first client app for independent professionals: coaches, consultants, therapists and advisors.

It was built by Ahsan Mahmood, a software developer in Lahore, Pakistan. I am responsible for it, and you can reach me at aoneahsan@gmail.com.

Aura CRM is not released. I froze it on October 21, 2026, with my other idea projects, so the products already in production get finished first. It is not being developed or sold now, and these documents change before that does.

What it holds

You sign in with your Google account. Google shares your name, email address and profile photo with Aura CRM; your Google password never reaches it.

If you used a build of Aura CRM, it may hold:

  • your Google name and email address
  • your clients’ records and your notes
  • voice notes you record and their text

How it is used

Only to run the part of Aura CRM you were using. Nothing is sold, and nothing goes to anyone outside the services listed below.

Nothing is used for advertising.

Services it uses

ServiceWhat it receives
SupabaseYour sign-in record and the data you save, stored in its Postgres database.
SentryError reports when something breaks: the page, the browser or device, and what went wrong. Not your content.
AmplitudeCounts of which screens are opened and which buttons are pressed, to see what gets used.
Microsoft ClarityHow pages are scrolled and clicked, with typed text masked.
OneSignalA device token, only if you allow notifications.

Each service keeps what it receives under its own privacy policy.

Please keep this out

If you work with therapy or health clients, keep clinical records out of Aura CRM.

How long it is kept

Until you ask me to delete it, or until I switch the Aura CRM backend off, whichever comes first.

Children

Aura CRM is not meant for children under 13, and I do not knowingly keep anything about them. If you think a child has used it, email me and I will delete what it holds.

Deleting your data

How to ask, what is deleted and what is kept are on the Aura CRM account deletion page.

Changes to this policy

If this policy changes, the new version goes on this page with a new Last updated date. There is no mailing list, so that date is the notice.

Contact


This document’s own address

https://aoneahsan.com/ideas/aura-crm/privacy

Something here unclear?

Privacy questions get an answer from me, not a form. Deletion requests are done within 30 days, with a written reply.