Aurelius AI includes a public website and a signed-in mentoring app. We collect the information needed to operate those services, and we explain here what we store, why we use it, and which service providers process it.
What we collect
When you join the waitlist, we collect the information you give us: your name, email address, and — only if you choose to provide it — your phone number.
Alongside a signup we also record basic technical and marketing context: your IP address, your browser's user-agent string, the time of signup, and — when available — the page you arrived from (referrer), the page you landed on, and campaign tags in the address (utm_* parameters). This tells us which channels bring visitors and helps us prevent abuse.
When you use the Aurelius AI app, we store your account and sign-in information, saved quotes, conversation messages, conversation summaries, subscription status, and — if you enable notifications — a device push token. We also record limited operational metadata such as the AI provider and model used, token counts, response time, and errors. API keys, passwords, and authentication tokens are never written to application logs.
Cookies
The site sets a first-party session cookie only when it is needed: when you arrive through a campaign link or interact with the waitlist form. It exists to remember where you came from and to show the form's success message.
Google Analytics (below) sets its own first-party cookies (_ga and similar) to recognize returning browsers. There are no advertising cookies.
Analytics (Google Analytics)
We use Google Analytics 4 to understand how people find and use the site — which pages are read, roughly where visitors come from, and which channels lead to signups. Google Analytics collects usage data such as pages viewed, approximate location, and device and browser characteristics; GA4 does not log or store full IP addresses. We use this data only in aggregate.
Google's handling of this data is described in the Google Privacy Policy. You can opt out with the Google Analytics opt-out browser add-on, or by using a browser or extension that blocks analytics scripts — the site works fully without them.
Bot protection (Cloudflare Turnstile)
To keep automated bots off the waitlist, the signup form is protected by Cloudflare Turnstile. When you use the form, your browser loads Turnstile from Cloudflare, and Cloudflare evaluates technical signals (such as your IP address and browser characteristics) to distinguish people from bots. Cloudflare's handling of that data is described in the Cloudflare Privacy Policy.
AI mentoring (OpenAI and Anthropic)
To generate a mentoring response, our server sends the current message and the relevant conversation context to the AI provider selected in the app's server-side configuration: either OpenAI or Anthropic. Only the active provider receives a given request. Do not include information in a conversation that you would not want processed for this purpose.
Aurelius AI keeps the full conversation in our database. When a conversation becomes long, we create a compact summary and send that summary plus the most recent messages to the active provider so the request stays within the model's context limit. The summary is stored with the conversation and can be regenerated when the model or summarization method changes.
How we use your information
We use waitlist information for exactly what the form promises: to manage the waitlist, to invite you to early access, and to email you about the launch. We use attribution data to understand which channels our early members come from, and IP addresses to rate-limit the signup form against abuse.
We use app information to authenticate your account, provide saved quotes and conversation history, generate AI mentoring responses, manage access and subscriptions, deliver notifications you request, prevent abuse, and operate and improve the service.
We do not sell your information, share it with advertisers, or use it for any purpose beyond Aurelius AI.
Where your data lives
Waitlist signups and app data are stored in a database on infrastructure operated by DigitalOcean, our hosting provider. Access is restricted to the people building Aurelius AI. Production traffic to the website and API is encrypted (HTTPS).
We may disclose information if required to by law.
How long we keep it
We keep waitlist information while the waitlist is active and through the launch communications it exists for. If you ask us to remove you, we delete your record.
We keep app account and conversation data while your account is active. Deleting your account removes its authentication sessions, identities, saved quotes, conversations, messages, summaries, device tokens, subscription records, and related usage records from the live database. Encrypted backups may retain deleted data temporarily until they expire through the normal backup cycle.
Your rights
You can ask us at any time to see the information we hold about you, correct it, or delete it entirely. Email us and we will handle it — no forms, no friction. Depending on where you live (for example the EU/EEA under GDPR, or California under the CCPA), these rights may also be backed by law; we honor such requests regardless of where you live.
Children
The site is not directed at children under 13, and we do not knowingly collect information from them.
Changes to this policy
If our data practices change, we will update this page and its "last updated" date. Significant changes affecting members will be announced by email or in the app when appropriate.
Contact
Questions or requests about your data: privacy@stoicai.app.