Privacy Policy

Last updated: September 2026

aroa is operated by Laksh Bhadech, an individual based in Mumbai, India. For privacy questions or requests, contact pausewitharoa@gmail.com.

This policy explains how aroa handles personal data when you use the app or aroa.life. We collect data to provide, secure, support, and improve aroa. We do not sell personal data or use journal entries for advertising.

1. What We Collect and Why

a) Account Information

When you create an account, we collect your name and email address. We use them to manage your account, provide support, and communicate about the Service.

b) App Usage Metrics

aroa's core feature requires access to how you use your designated distracting apps. On iOS, this is accessed through the Screen Time and FamilyControls frameworks.

We collect the following derived metrics and store them on our servers:

Raw app-level usage data (e.g. which specific app you opened at what time) is processed on your device only and is never transmitted to our servers. Only the derived metrics listed above are stored.

Before any permission is requested, aroa will show you a clear, in-app explanation of what access is needed and why — so you can make an informed choice.

You may revoke this permission at any time through iOS Settings → Screen Time. Revoking this permission will disable aroa's core awareness features.

c) Intercept Interactions

Each time aroa's intercept screen appears, we record the choice you made: close the app, pause with aroa, or continue. This data is stored against your account and used to understand how aroa is being used over time. No other context about what you were doing on your phone is captured.

d) Journal and Mood Entries

If you choose to use journal or mood logging, your entries are optional and remain yours. We store them only to provide the feature and enable encrypted cross-device sync. Journal content is protected in transit and in storage with access controls; we do not describe this as end-to-end encryption. Our team does not read journal entries in routine operations or use them for advertising. We do not sell journal content. Limited access may be necessary to maintain the Service, respond to a support request you make, comply with law, or protect rights and safety.

e) In-App Actions

We record interactions with aroa's features — such as activating Intentional Pause Mode, using Pause aroa Mode, or engaging with the Take Action and Let My Mind Breathe cards. This helps us understand which features are valuable and where the product can improve.

Intentional Pause Mode (also referred to as Hardcore Mode in some contexts) is a user-initiated feature that restricts your selected distracting apps for the mentioned time period in the app. It is activated only by your explicit choice and confirmation within the app. aroa cannot trigger, schedule, or extend this mode on your behalf. You remain in full control at all times.

f) Device and Technical Information

We automatically collect basic technical information including your device type, operating system version, app version, and crash or diagnostic data. This is used solely to maintain the stability and performance of the Service.

g) Website Analytics

Our website (aroa.life) may use Google Analytics (GA4) and Meta Pixel to understand how visitors use the site and to measure the effectiveness of our advertising. These services may collect information such as pages viewed, interactions, device and browser information, approximate location, and cookie or similar identifiers. Where required by law, we ask for consent before setting non-essential analytics or advertising cookies. Google and Meta process this information under their respective privacy policies. You can learn more at Google's Privacy Policy and Meta's Privacy Policy.

h) Subscription Metadata

Subscription and payment transactions are processed by Apple App Store or Google Play. We receive subscription-status information but do not receive or store your payment-card details.

We do not collect:

2. How We Store Your Data

Your data is stored using Supabase, a cloud database provider. We separate direct account identifiers from behavioural data where practical and use internal identifiers to provide the Service. We use reasonable technical and organisational safeguards, including encryption in transit and at rest where supported by our providers, and access controls.

When your account is deleted, we delete data that identifies or can reasonably be linked to you, including your account information, journal and mood entries, credentials, and preferences. We may retain only anonymised or aggregated usage and awareness statistics that can no longer reasonably be linked back to you, solely to understand and improve the Service.

Supabase processes data under confidentiality obligations and is required to protect your data and use it only as necessary to provide infrastructure services. You can review Supabase's privacy practices at supabase.com/privacy.

3. How We Use Your Data

All data collected is used for the following purposes only:

We do not use your data for advertising, profiling for commercial purposes, or any purpose beyond those listed above.

4. Cohort-Based Analysis

To understand how aroa's impact evolves over time, we group users by the month they installed aroa. This allows us to measure patterns — such as how awareness states change over weeks of use — without mixing data across different points in the product's development. This analysis is performed on anonymised, aggregated data and does not involve identifying or singling out individual users.

5. Third-Party Service Providers

We use the following third-party providers to operate the Service:

We use these providers under their applicable terms, privacy commitments, and data-processing arrangements. Their use of data is governed by the role and agreement applicable to the service they provide.

6. Legal Bases for Processing

For users in countries that require a legal basis for processing, including the European Economic Area and the United Kingdom, we rely on the following legal bases:

7. Data Retention and Deletion

You may request deletion of your account and associated data at any time through in-app settings where available or by emailing pausewitharoa@gmail.com. Deleting an account removes user-linked data; it does not itself cancel an App Store or Google Play subscription.

What is permanently deleted upon request:

What is retained in anonymised form:

Limited temporary retention: We may retain limited user-linked data for up to 90 days where required by law or reasonably necessary to resolve disputes, prevent fraud, or complete the deletion securely. After that, it is deleted or anonymised.

Where no deletion request is made, personal data is retained only for as long as necessary to provide the Service or comply with applicable legal obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

To exercise these rights, contact pausewitharoa@gmail.com or use in-app settings where available. We will respond within 30 days unless applicable law requires a different period. For users in India, this email is also the grievance contact for privacy requests under applicable data-protection law. If you are dissatisfied with our response, you may complain to the Data Protection Board of India through the process it makes available.

9. Age requirement

aroa is for people aged 18 or older. We do not knowingly offer the Service to, or knowingly collect personal data from, anyone under 18. If you believe a person under 18 has provided personal data to us, please contact us so we can take appropriate steps.

10. International Transfers

aroa is operated from India and uses service providers, including Supabase, Firebase, Google, Meta, Apple, and Vercel, that may process data in countries other than your own. Where required, we rely on appropriate safeguards provided by those service providers, such as contractual protections and data processing terms.

11. Security

We use reasonable technical and organisational measures to protect data, including encryption in transit and at rest where supported by our providers, and secure access controls. No internet or storage system is completely secure. We will take appropriate steps if a security incident affects personal data, including notifying affected people or authorities where required by law.

12. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be communicated through the app or via email. The date at the top of this page reflects when the policy was last updated. Continued use of the Service after an update constitutes acceptance of the revised policy.

13. Contact

For privacy-related requests or questions, contact pausewitharoa@gmail.com.