Last updated: August 19, 2026
This policy applies to Aura (package name: app.lovable.spendsorter), published by AT consulting.
Aura is a personal money-management and budgeting app. It helps users organize bank-account, card, and UPI transaction alerts into a personal spending dashboard.
On Android, Aura may request READ_SMS only when you choose to enable transaction sync. Aura reads SMS already stored in your inbox to identify financial transaction alerts, including debit and credit alerts, card purchases, UPI payments, amounts, dates, banks, merchants, references, and masked account details. After you enable this feature, Aura may sync new alerts when you open the app. This information is used to create and manage your personal budget, spending categories, transaction history, and spend-limit alerts.
Aura does not use SMS for OTP account verification, sending messages, call-log access, personal-message profiling, advertising, or selling data. Messages that are not relevant to financial transaction tracking are not used to build your budget.
Transaction data and learned message formats are stored locally on your device. Aura does not sell or share your SMS data with advertisers or data brokers.
Optional Gmail and AI features are only used when you actively connect Gmail, paste email content, or configure and use an AI service. In those cases, the relevant content is sent to the service you choose to provide the requested import, parsing, categorisation, or insight feature. Do not enable these optional features unless you accept the privacy policy of the selected service.
Aura uses Google Analytics for Firebase and Firebase Crashlytics, and may use PostHog, to understand which app screens and features are used and to diagnose crashes, application-not-responding errors, and other technical failures. Diagnostic data can include app version, device and operating-system information, screen names, feature outcomes, error type, and a technical stack trace.
Aura's analytics filters are designed not to send SMS or email content, your name, bank name, merchant or counterparty names, account details, transaction references, or transaction amounts. Advertising ID collection and ad-personalization signals are disabled.
You can turn anonymous analytics and crash diagnostics on or off from Aura's Sync & settings screen. You can decline or revoke SMS permission at any time in Android Settings. You can also use Aura's manual paste and transaction-entry features without granting SMS permission. Removing app data or uninstalling Aura removes locally stored app data from your device.
For privacy questions, contact AT consulting at abey619@gmail.com.