Augura — Privacy Policy
Effective date: October 23, 2026
This policy explains what data Augura ("the app") handles, why, and what you can do about it. The app is published by Yabin Alejandro Lagunes Cuevas, trading as The Alchemist Code ("we", "us"), who is responsible for your data (the "controller"). Contact: contact@thealchemistcode.org. Website: https://app.thealchemistcode.org/augura/.
The short version
- No sign-up. We never ask for your name or a password. The first time the app talks to our server, it creates an anonymous ID for your installation.
- Your projections, milestones, steps, check-ins, weekly reviews, letters and settings stay on your phone.
- When you ask Augura to project a future, review your week, compare two paths ("What if…?"), answer a question (Ask Augura) or write a letter from your future self, the app sends what you wrote and a few details about your plan to our server, which asks Anthropic's Claude to generate the output. We do not store your text or the AI's answer on our server.
- The app only does this after you confirm you are 18 or older and give your explicit consent. Without it, Augura still works fully by hand: write your own projections, milestones and steps, no AI.
- Our server keeps only what it needs: your anonymous ID, usage counters, your verified Premium entitlement, a last-seen date and any reports you send us.
- The app shows ads to free users and uses analytics and crash reporting from Google.
- Settings › Delete all my data erases everything on your phone and on our server.
Data stored on your phone
- Your projections: the area, title, why, starting point and minutes per week, the target date, status, source, headline, realism and why, advice, risks, first step and any professional-topic note.
- Milestones and steps: each milestone's title, how you'll know it's done, its date and original date, and each step's title, cadence and minutes.
- Check-ins: which steps you marked done, and when.
- Weekly reviews: the week's numbers (steps done, pace) and, if you asked for one, the AI's headline, advice and proposed date changes.
- Letters from your future self, if you write any.
- Settings: language, reminder times, which reminders are on, and the dates when you confirmed you are 18+ and gave your AI consent.
You can export a backup file (JSON) and an .ics file of your milestones at any time; both are created only when you ask, and you choose where to send them through your phone's share sheet. Augura has no calendar permission and does not read your device's calendar.
Local notifications, scheduled on your phone, remind you about the day's step, the weekly review, upcoming milestones and (Android only) your subscription renewal in 5 days. No server sends them.
Android backup: if backup to your Google account is turned on in your phone's settings, Android may include the app's data in your device backup so it comes back when you change phones. Android makes that backup and stores it encrypted in your Google account. We have no access to it.
What our server receives, and why
Our server runs on Firebase Cloud Functions, Cloud Firestore, Authentication and App Check, in Google Cloud's us-central1 region (United States), inside a Firebase project that The Alchemist Code shares with other apps we publish.
| Data | When | Why | How long we keep it |
|---|---|---|---|
| Anonymous ID (Firebase Authentication) | The first time the app contacts our server | To apply usage quotas, link your Premium entitlement and protect the service from abuse | Until you delete your data, or 12 months after it was last used |
| App Check token (Play Integrity on Android, App Attest or DeviceCheck on iOS) | With every request | To check that requests come from the real app on a real device | We don't store it |
| Your request: the text you wrote for a projection, weekly review, "What if…?", a question to Ask Augura, or a letter, plus the area, target date, starting point and minutes per week; for reviews, what-ifs, questions and letters, also that projection's milestones and dates and that week's step counts; today's date, the app's language and the first day of your week | Each AI request | To generate the projection, review, comparison, answer or letter | Not stored. Passed to Anthropic and discarded once it's delivered to your phone |
| Purchase verification (Android): your Google Play purchase token (hashed in the record's ID), product and expiry date | When you buy or restore Premium on Android, and from time to time after | To confirm your Premium with Google Play, so your AI quotas match your plan | Until you delete your data, or 12 months after the record was last updated |
| Usage counters: how many requests of each type (projection, review, what-if, question, letter) you made per day and month | Each AI request | Free and fair-use quotas | Until you delete your data, or 12 months after your ID was last used |
| Last-seen date | Each time the app contacts our server | To know when an account has been inactive for 12 months, so it and its data can be deleted automatically | Until you delete your data, or updated with each contact |
| Reports: the text you choose to report and your reason | When you tap Report | To review harmful or wrong outputs and improve safety (Google Play requires this button) | Up to 24 months, or until you delete your data |
On iOS, Premium purchases are handled by Apple through the App Store and StoreKit. Our server does not receive or verify your App Store purchase.
No names, location or contacts are ever part of a request. If what you write mentions self-harm or suicide, our server does not send it to the AI: the app shows a fixed message with helpline numbers instead.
The AI: Anthropic as our processor
Projections, weekly reviews, comparisons, answers and letters are written by Claude, an AI model from Anthropic, PBC (United States). Anthropic processes your request on our behalf and only to generate the output, under its commercial terms:
- It does not use this data to train its models.
- It deletes the requests and replies automatically within 30 days. If its safety systems flag a request as a possible violation of its usage policy, it may keep it for up to 2 years.
- It receives only your request and a pseudonymous code (a one-way hash of your anonymous ID) that helps it detect abuse. It does not receive your advertising ID, your email or your Google account.
Every output is generated by AI and labeled as such. You are interacting with an AI system, not a person (as required by Article 50 of the EU AI Act). The AI can be wrong.
Sensitive information and your consent
Plans for your future often touch on your health, your relationships or your beliefs. What you write may therefore reveal sensitive data, such as information about your health, your sex life or sexual orientation, or your religious or philosophical beliefs. We do not ask for this information, but you might write it.
That is why, before your first AI request, the app asks for your explicit consent (a box that is not pre-ticked) to process what you write with AI for this sole purpose. This consent is our legal basis for sensitive data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2025) and Article 9(2)(a) of the EU General Data Protection Regulation (GDPR).
You can withdraw your consent at any time: turn it off in Settings › AI consent, use Delete all my data (which also erases the consent record, so the app will ask again before any new AI request), or write to us. Without consent, Augura keeps working by hand, with no AI. Tip: you don't need names or personal details to get a good projection.
Not a prediction, not professional advice
Augura is a planner, not a fortune teller. It describes a possible path, not a prediction. If your goal touches health, money, legal or immigration matters, the output will suggest you also talk to a professional; it is not medical, financial, legal or immigration advice. See our Terms of Use.
Data collected by third-party services
| Service | What it collects | Why |
|---|---|---|
| Google AdMob (ads, free users only, in Horizon and Projections) | IP address (used to estimate approximate location), Android advertising ID and app set ID, interactions with ads and the app, performance diagnostics | Showing ads, measuring them, preventing fraud |
| Google Analytics for Firebase | App-instance ID, advertising ID, approximate location derived from a masked IP address, screen views, sessions and purchase events | Understanding how the app is used |
| Firebase Crashlytics | Crash stack traces, device metadata at the time of a crash, app state, an installation identifier | Finding and fixing crashes |
| Firebase Remote Config | Country, language, time zone, OS and app version | Adjusting app settings remotely |
| Firebase Authentication, App Check, Cloud Firestore and Cloud Functions | Your anonymous ID, IP address and user agent, and an App Check token | Running our server securely (see the table above) |
| Anthropic (Claude) | Your request, as described above | Generating your projection, review, comparison, answer or letter |
| Google Play Billing (Android) | Payment details, your purchase and your subscription status | Processing your Premium subscription or one-time purchase on Android (we never see your card) |
| Apple App Store / StoreKit (iOS) | Your purchase, processed by Apple | Processing your Premium subscription or one-time purchase on iOS (we never see your card, and our server doesn't receive it) |
All of this data is encrypted in transit. Each provider handles it under its own privacy policy:
- Google: https://policies.google.com/privacy
- How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
- Anthropic: https://www.anthropic.com/legal/privacy
- Apple: https://www.apple.com/legal/privacy/
Legal bases (EEA, UK and similar laws)
- To provide the app you asked for (contract): your AI requests, Premium verification and usage quotas.
- Explicit consent: processing your text with AI (asked in onboarding, before your first request) and personalized ads (asked through Google's consent form).
- Legitimate interests: security and abuse prevention, crash reports, analytics and handling your reports.
International transfers
Google and Anthropic process data in the United States and other countries. They do so under their data processing terms, which include safeguards such as the European Commission's standard contractual clauses. Under Mexican law, sending data to providers that process it on our behalf (encargados) does not require your consent.
Your choices and rights
- Delete everything: Settings › Delete all my data. See Delete your data.
- Ad personalization (EEA, UK, Switzerland): the app asks for your consent before showing personalized ads, and you can change your choice anytime in Settings › Ad privacy options.
- Advertising ID: reset or delete it in your Android settings under Privacy › Ads.
- Notifications: every reminder is optional; deny or revoke the permission anytime.
- AI consent: view the date you gave it, or withdraw it in Settings; Augura keeps working by hand, with no AI.
- Premium removes all ads.
- Subscriptions: Premium is sold as an annual or monthly subscription, both with a 7-day free trial, or as a one-time purchase. On Android, Google Play manages the subscription: cancel it anytime in the Google Play Store under Payments & subscriptions › Subscriptions. On iOS, Apple manages it under Settings › [your name] › Subscriptions. If you cancel before the free trial ends, you are not charged. Uninstalling the app or deleting your data does not cancel a subscription.
- Your rights: you can ask to access, correct or delete your data, object to or restrict its processing, take a copy of it, and withdraw consent (in Mexico, your ARCO rights). Write to contact@thealchemistcode.org. We answer within 20 days at most. Because the app has no sign-up, we can only find server data through the app itself; the in-app option is the fastest way.
- Complaints: you can also contact your data protection authority: in Mexico, the Secretaría Anticorrupción y Buen Gobierno; in the EU, your national authority (in Spain, the AEPD); in Brazil, the ANPD.
Security
Data travels encrypted. Each anonymous ID can only read its own data on our server. Our AI key is kept in Google Secret Manager, never in the app. Requests must come from the genuine app (App Check) and carry a valid sign-in token.
Adults only
Augura is for people 18 and older. The app asks you to confirm your age. If we learn that a minor has used it, we will delete the server data linked to that installation.
Changes
If this policy changes, the new version will be posted at this address with an updated date.
Contact
Yabin Alejandro Lagunes Cuevas (The Alchemist Code), Mexico · contact@thealchemistcode.org