Aurora Valley Privacy Policy
Last updated: September 9, 2026
Aurora Valley ("Aurora Valley," "we," "us," or "our"), operated by Xinlu Exploration (Shanghai) Technology Co., Ltd., is a mental-wellness app centered on a supportive AI companion (the "fox"). Your emotional and health-related information is sensitive, and protecting it is central to how we build this app. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have.
By using Aurora Valley you agree to the practices described here. If you do not agree, please stop using the app.
1. Information We Collect
We collect only what we need to provide the app.
Account information
- Your email address, used to create and secure your account. If you sign in with a phone number, we collect that number for the same purpose.
Profile information you provide
- Your nickname, and a profile photo if you choose to add one.
- Optional details from onboarding, such as your date of birth, gender, and the wellness goals you select.
Health and wellness information you share
- Your answers to the in-app wellness screening.
- The body areas and levels of discomfort or pain you indicate, and the moods or emotions you describe.
- The content of your conversations with the fox, and any diary entries or session summaries generated from them.
This is sensitive personal information. We treat it with heightened care and use it only to provide and personalize your experience within the app.
Voice recordings
- If you choose to speak to the fox instead of typing, we process the audio of your voice message in order to transcribe it and respond, and to derive acoustic features that shape the fox's response (see Section 3).
Purchase information
- If you subscribe or make an in-app purchase, we receive confirmation of the purchase and your subscription status from Apple. We do not collect or store your full payment card details; Apple processes the payment.
Diagnostics
- Crash reports and basic performance data, so we can keep the app stable. We configure our crash-reporting tools to strip out information that could identify you: we do not attach your account identity, and we do not capture screenshots or the content of your messages.
Information we do NOT collect or do
- We do not use advertising identifiers (such as Apple's IDFA), and we do not collect your precise location, your contacts, your browsing history, or device sensor data.
- We do not track you across other companies' apps or websites, and we do not use your information for advertising.
- We do not sell your personal information.
2. How We Use Your Information
We use your information to:
- Provide the fox conversations, somatic exercises, and other core features.
- Personalize your experience and remember your history, so sessions build on one another.
- Create and secure your account, and process your purchases.
- Keep the app reliable and safe, diagnose crashes, and prevent abuse.
- Communicate with you about your account, such as sign-in confirmation and password reset.
We do not use your information for advertising, and we do not sell it.
3. How Your Information Is Shared
We do not sell your personal information or share it for advertising. We share information only with service providers that process it on our behalf, and only as needed to run the app:
- Cloud hosting and database providers that store your account and app data.
- AI service providers that power conversations, voice features, and reports. With your explicit consent (the "Your Data & AI" screen in the iOS app; on the web, by agreeing to this Policy), we send the following to these providers:
1. AI conversation and report generation: Dify (our self-hosted large-language-model orchestration service) and Alibaba Cloud Model Studio (Qwen large language models) — process the messages you send and your conversation history, the emotions and body-map selections you choose to share, your screening answers, and, to keep the companion consistent across sessions, system-generated long-term-memory summaries, text and voice analysis scores, and your account identifier; used to generate replies, diary summaries, and screening and healing reports.
2. Speech-to-text and acoustic analysis: Tencent Cloud speech recognition (mainland China edition) / Deepgram (international edition) — process your voice recordings when you use voice input, to convert speech to text; the same recording is also analysed by our own analysis service for acoustic features (clarity, stability, rhythm, loudness) that feed the voice analysis scores above.
3. Voice synthesis: MiniMax — processes reply text to be read aloud, to generate voice playback.
4. Real-time voice calls: Tencent Cloud — processes the live audio of hotline calls.
This information is used only to provide the corresponding features and is transmitted over encrypted channels or private networks. We require these providers to protect your personal information to a standard no lower than this Policy; it is never used for advertising and never sold. Your conversations are not used to improve or train AI models unless you turn on the optional data-improvement setting (currently offered in the iOS app's Settings, off by default). Except as required by law, we do not share this information with any other third party without your consent. This information (voice recordings included) is retained for as long as your account exists; you may delete your account as described in Section 4, and we delete or anonymise it within five (5) business days of your deletion request, except where retention is required by law.
- A crash-reporting provider for diagnostics, with your identity removed.
- Apple, to process purchases, and Google, if you choose to sign in with Google.
We may also disclose information where required by law, to comply with legal process, or to protect the rights, safety, and security of our users or the public.
4. Data Retention and Deletion
We keep your information for as long as your account is active. You can delete your account at any time from within the iOS app (Settings → Delete Account) or by emailing jgglittlefox@163.com. Within five (5) business days of your deletion request we delete or anonymise your personal data and associated content (voice recordings included), except where we are required to retain certain records by law; backups are purged on a rolling basis.
5. Your Choices and Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. You can edit your profile in the app, delete your account and data in the iOS app or by contacting us (see Section 4), or contact us for any other request. We will respond consistent with applicable law and will not treat you differently for exercising these rights.
6. Security
We protect your information using measures such as encryption in transit and at rest, access controls, and internal safeguards. No method of transmission or storage is completely secure, but we work to protect your information and to address any issues promptly.
7. Children
Aurora Valley is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal information from them. If a minor uses the app, it should be with the involvement and consent of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. International Users
We operate across regions, and your information may be processed in a country different from where you live. Where that happens, we take steps to protect it consistent with this Policy and applicable law.
9. Changes to This Policy
We may update this Policy from time to time. We will communicate material changes in the app or by other prominent means. The "Last updated" date above reflects the current version.
10. Contact Us
If you have questions, requests, or concerns about this Policy or your data, contact us at:
Xinlu Exploration (Shanghai) Technology Co., Ltd.
Email: jgglittlefox@163.com