Privacy Policy

Personal Information

Most of Reauris can be used without telling us anything about yourself. You can read, sit with Milo, breathe, and use the Memory Jar without an account. We only hold personal information when you choose to give it to us, which happens if you:

• Register for an account
• Write or comment on a community post
• Email us using the address on our contact page

In those cases we may hold:

• Your name or display name
• Your email address
• Profile information you add yourself, such as a bio
• Anything you write in a post, a comment, or an email to us

We do not currently run a newsletter, and we do not run surveys. If either of those changes, this policy will be updated before we start collecting anything for them.

Automatically Collected Information

We count visits with Cloudflare Web Analytics, which tells us how many people read each page, which site linked them here, and roughly which country they are in. It sets no cookies, stores nothing on your device, and does not fingerprint your browser, so it cannot recognise you from one visit to the next or follow you to other websites.

If you agree to it in the banner, we also use Google Analytics 4. It tells us how people move through the site: which pages they visit, how long they stay, roughly where they are, and what device and browser they use. It sets its own cookies (named _ga) to recognise a returning browser, and Google processes this data under its own privacy policy. It only loads after you tap Allow. If you choose No thanks, or never answer, no Google script runs at all. Google Analytics never sees what you say to Milo or what you put in your Jar. We don't use it for advertising, and there are no advertising trackers or pixels on this website.

Like any web server, ours records a short technical log of the requests it receives, which includes your IP address, the page requested, the time of the request, and your browser's user-agent string. This is ordinary server operation — it is what lets us keep the site online and see when something is broken or under attack. It is not used to build a profile of you, and it is not linked to your account.

Some parts of Reauris never send anything to us at all. Memory Jar entries — the worries, thoughts, and gratitude you write down — are stored only in your own browser on your own device. They are not transmitted to our servers, not stored in our database, and not readable by us.

Clearing your browser storage will permanently delete your Memory Jar entries, and we have no copy to restore them from. That is the intended trade-off: your private notes stay private.

When you talk with Milo, the messages you send are transmitted to our server so a reply can be generated, and may be passed to a third-party language model provider for that purpose. We do not log the contents of these conversations, and they are not attached to your account or used to build a profile of you.

Milo is a companion for presence and grounding. He is not a therapist, cannot diagnose or treat any condition, and is not a substitute for professional mental health care. Please do not share information with Milo that you would not want leaving your device.

We use what we hold only for the following:

• To provide and maintain the website
• To let you sign in and to show your posts and comments under your name
• To respond to you when you contact us
• To keep the site online and protect it against abuse or unauthorized access
• To comply with legal obligations

We do not use your information to advertise to you, and we do not use it to train any machine learning model.

Reauris sets one cookie, and only after you sign in. It holds your session so that you stay signed in between pages. It is marked HttpOnly, so it cannot be read by scripts in your browser, and it expires after seven days.

Google Analytics cookies (_ga and _ga_ followed by an ID) are set only if you tap Allow in the cookie banner. They let us count returning visitors and last up to two years. There are no advertising cookies on this website.

Your answer to the banner is remembered in your browser's local storage, so we don't ask on every page. To change it, use "Cookie settings" at the bottom of any page. If you withdraw consent, we delete the Google Analytics cookies and stop loading it.

You can also clear or block cookies through your browser settings. Blocking the sign-in cookie means you will not be able to stay signed in.

We may share your information with third parties in certain circumstances:

• Service Providers: We may share your information with third-party service providers who perform services on our behalf. Today this means our hosting provider, which operates the server the website runs on, and — as described in Conversations with Milo — potentially a language model provider. Cloudflare provides our domain name service and the aggregate visit counts described above. We do not currently use an email delivery service.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information with third parties when we have your consent to do so.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Account passwords are stored hashed, never in plain text. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have certain rights regarding your personal information:

• The right to access your personal information
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to restrict or object to processing of your personal information
• The right to data portability
• The right to withdraw consent at any time

To exercise these rights, please contact us using the details in the Contact Us section below.

Reauris Studio (studio.reauris.com) is the publishing tool Reauris operates to create, schedule and publish videos and posts to social media accounts that their owner connects, including the Reauris YouTube channel. This section explains how Reauris Studio accesses, uses, stores, shares and deletes Google user data and data from Meta platforms. The complete Reauris Studio privacy policy is at https://studio.reauris.com/privacy.

Google user data we access

• youtube.readonly: the connected channel's id, title, handle and thumbnail, and the view, like and comment counts of videos Reauris Studio uploaded.
• youtube.upload: to upload the videos the channel owner created or scheduled in Reauris Studio, with the title, description and tags they set.
• youtube.force-ssl: only to post one comment, written by the owner, under a video Reauris Studio uploaded.
• yt-analytics.readonly: the average percentage viewed, average view duration, engaged views and shares of videos Reauris Studio uploaded.

We do not access other videos, playlists, subscribers, subscriptions, comments by other people, messages, Google profile information, email or contacts, and we request no other Google scopes.

How we use it

Only to provide Reauris Studio's features to the person who connected the channel: showing which channel is connected, publishing their videos, and showing them how those videos performed for 28 days after publishing. Google user data is not used for advertising, not sold, not used to build profiles, not used to determine credit-worthiness or for lending, and not used to train artificial intelligence or machine-learning models.

Sharing

Google user data is not shared with, transferred to, or disclosed to anyone except as needed to run the service: our hosting provider (Hostinger, India), which stores the encrypted database, and Cloudflare, which carries traffic to the site. It is never sent to any AI provider. People at Reauris do not read it except with the owner's permission for support, for security, or where the law requires.

Protection

All traffic uses HTTPS. Access tokens are encrypted at rest with AES-256-GCM, the key is held on the server and never in the database, and tokens are never sent to any browser. Database backups are encrypted.

Retention and deletion

Tokens are kept until the owner disconnects the channel or deletes their workspace; disconnecting deletes the token and channel details immediately. Performance figures are refreshed for 28 days after a video is published; YouTube figures are deleted 30 days after their last refresh, and the channel's name, handle and picture are re-read from YouTube regularly while it stays connected. Encrypted backups are destroyed after 14 days. Access can also be revoked at any time at https://myaccount.google.com/permissions, and deletion of all data can be requested at [email protected]; instructions are at https://studio.reauris.com/data-deletion.

Limited Use

Reauris Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Reauris Studio uses YouTube API Services; by connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's own handling of data is described in the Google Privacy Policy (https://policies.google.com/privacy).

Facebook, Instagram and Threads

When a Facebook Page, Instagram professional account or Threads profile is connected, Reauris Studio stores its id, name or username, profile picture and an encrypted access token, publishes the posts the owner creates, and, for posts it published, reads views, reach, likes, comments, shares, saves and watch time. The same protection, sharing, retention and deletion terms above apply.

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to remove that information.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the Last updated date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].