Privacy

Your Moments stay personal.

Aunori is designed as a local-first acoustic-memory app. This policy explains what stays on your device, what leaves it only when you choose a cloud feature, and the choices that remain under your control.

Last updated: August 17, 2026

Information Aunori handles

When you create a Moment, Aunori may store a cover photo, an audio recording, capture time, title, optional memory note, detected sound labels, favorites, and other choices you make inside the app. Location is stored only when you allow location access and a location is available.

Where your Moments are stored

Moments are stored on your device by default. Aunori does not require an account and does not operate a public profile or social feed.

If you explicitly enable Private iCloud Sync with Aunori Pro, Aunori uses your private iCloud database to keep supported Moment data, recordings, and covers available across your Apple devices. Apple provides and operates iCloud. Disabling sync or losing Pro access does not make the local Moments already on your device inaccessible.

Private sharing links

When you choose to create a private sharing link, Aunori prepares a separate, reduced copy of that Moment. The cover, browser-compatible audio, and the details you selected are encrypted on your iPhone before upload. Spatial Audio is included only when you explicitly select it. Exact coordinates and private library identifiers are not included.

The decryption key remains in the fragment of the complete sharing URL. URL fragments are handled by the recipient’s browser or Aunori app and are not sent to Aunori’s server. Aunori therefore stores encrypted content and cannot read the shared cover, audio, or selected details. Anyone who has the complete link can decrypt the shared copy, and end-to-end encryption cannot prevent a recipient from forwarding, recording, or redistributing what they receive.

Private sharing uses Cloudflare Workers, D1, and R2 to deliver the link. Aunori stores encrypted media and manifest data, ciphertext sizes and checksums, access and revocation credential hashes, lifecycle timestamps, a one-way hash of a random app-installation identifier for sharing quotas, and limited request fingerprints used for rate limiting and reports. Aunori does not put the decryption key in those systems.

Sharing retention and control

A published link is available for up to seven days. You can stop sharing earlier in Aunori. Deleting a locally saved Moment also attempts to stop its active sharing link before local deletion proceeds. Revoked and expired encrypted media are removed promptly; an hourly cleanup process removes remaining metadata and abandoned uploads. Sharing quota history is retained for up to 31 days, and short-term rate-limit records for up to 48 hours, to prevent revoke-and-recreate abuse.

Device permissions

You can change these permissions at any time in iOS Settings. Features that depend on a permission may no longer work after access is removed.

Purchases

Aunori Pro subscriptions are processed by Apple through the App Store. Apple handles payment information and purchase management under its own privacy terms. Aunori uses StoreKit to determine whether Pro features are available.

Analytics, advertising, and tracking

The current Aunori app does not include third-party analytics, advertising SDKs, or cross-app tracking. Aunori does not sell personal data. The random installation identifier is linked only to that app installation and its sharing quota records; it is not tied to an Aunori account or used for advertising or tracking.

Retention and deletion

Your local Moments remain on your device until you delete them, remove the app and its data, or restore the device in a way that removes local storage. Aunori includes controls to delete Moments and to export or restore a local archive. Data stored in iCloud is also subject to your iCloud settings and Apple’s retention practices. Reports about a sharing link include a selected reason, an optional note, a one-way request fingerprint, and a timestamp; they do not include decrypted Moment content and are removed with the associated share record.

This website

This website does not currently use advertising or analytics cookies. It stores your light or dark theme preference locally in your browser. Like most websites, the hosting provider may process basic technical request data needed to deliver and protect the site.

Changes and questions

This policy will be updated if Aunori’s data practices change. You can avoid server processing by not creating a private link, stop an existing link from Aunori, and delete local Moments in the app. Questions, deletion concerns, and privacy requests can be raised through the Aunori Support page.